catching the cuckoo : verifying tpm proximity using a quote timing side - channel - ( short paper ) .
Linking remote attestation to secure tunnel endpoints