IETF Logo Mail Archive

Re: [Anima-bootstrap] brsky concern2: Timelyness of log entries

Michael Richardson <mcr+ietf@sandelman.ca> Sat, 12 November 2016 02:56 UTC

Return-Path: <mcr@sandelman.ca>
X-Original-To: anima-bootstrap@ietfa.amsl.com
Delivered-To: anima-bootstrap@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5F59129545 for <anima-bootstrap@ietfa.amsl.com>; Fri, 11 Nov 2016 18:56:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k5TzaZesePWu for <anima-bootstrap@ietfa.amsl.com>; Fri, 11 Nov 2016 18:56:34 -0800 (PST)
Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7C116129536 for <anima-bootstrap@ietf.org>; Fri, 11 Nov 2016 18:56:34 -0800 (PST)
Received: from dooku.sandelman.ca (unknown [182.172.168.109]) by relay.sandelman.ca (Postfix) with ESMTPS id 15FA61F906 for <anima-bootstrap@ietf.org>; Sat, 12 Nov 2016 02:56:33 +0000 (UTC)
Received: by dooku.sandelman.ca (Postfix, from userid 179) id 68D2E321D; Fri, 11 Nov 2016 21:56:30 -0500 (EST)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: anima-bootstrap@ietf.org
In-reply-to: <20161101202856.GA2418@faui40p.informatik.uni-erlangen.de>
References: <20161101202856.GA2418@faui40p.informatik.uni-erlangen.de>
Comments: In-reply-to Toerless Eckert <tte@cs.fau.de> message dated "Tue, 01 Nov 2016 21:28:56 +0100."
X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1
X-Attribution: mcr
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha1"; protocol="application/pgp-signature"
Date: Sat, 12 Nov 2016 11:56:30 +0900
Message-ID: <9497.1478919390@dooku.sandelman.ca>
Archived-At: <https://mailarchive.ietf.org/arch/msg/anima-bootstrap/gnNCN6TRc1bEpa9m-IDIWMoKhWo>
Subject: Re: [Anima-bootstrap] brsky concern2: Timelyness of log entries
X-BeenThere: anima-bootstrap@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Mailing list for the bootstrap design team of the ANIMA WG <anima-bootstrap.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/anima-bootstrap>, <mailto:anima-bootstrap-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/anima-bootstrap/>
List-Post: <mailto:anima-bootstrap@ietf.org>
List-Help: <mailto:anima-bootstrap-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/anima-bootstrap>, <mailto:anima-bootstrap-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 12 Nov 2016 02:56:36 -0000

Toerless Eckert <tte@cs.fau.de> wrote:
    > Device gets later enrolled/installed later by valid owner.  Maybe
    > valid owner does re-enroll devices several times, eg: between them
    >    being put into different locations (as often requered in big
    > customers, eg: CPE and the like).

I'm concerned here.
Why would they enroll it multiple times?  This doesn't make sense to me.
If they really wanted to reset to factory default, wouldn't they reflash
completely back to factory, so:

           "Attacker has physical access to pledge at some point in time."

becomes irrelevant?  Was there a TPM? Did the attacker get access to that?
Did they get access to the manufacturer installed private key?

If they didn't really reset to factory default, then it seems that they would
use the LDevID from the first enrollment to rekey with a new LDevID.

So, this is my problem with this scenario.

v2.23.0 | Report a Bug | By Email