Assured Remote Execution for a device is the ability of suitably authorized parties to construct secure channels to processes executing known code running on that device. Assured remote execution requires hardware support including cryptographic primitives. Cryptographically Assured Information Flow (CAIF) is a hardware mechanism to enable Assured Remote Execution. It is akin to existing Trusted Execution Environments, but securely implements an ideal functionality for logging and confidential escrow. Symbolic protocol analysis demonstrates that Assured Remote Execution is achieved even against a strong adversary able to modify our programs and execute unauthorized programs on the device. Assured remote execution allows trustworthy remote attestation, and a core part of secure remote reprogramming.11Copyright © 2024, The MITRE Corporation. All rights reserved.