IETF Logo Mail Archive

[CFRG] Re: On the applied cryptography of Attested TLS

waqas.nawaz@vision4d.ai Fri, 06 November 2026 12:16 UTC

Received: from elm2.relay.mail.hostinger.com (elm2.relay.mail.hostinger.com [189.12.193.6]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id D395C46 for <cfrg@ietf.org>; Fri, 06 Nov 2026 12:16:51 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=relay.mail.hostinger.com header.s=elm202607 header.b=CypFcaZq; dkim=pass header.d=vision4d.ai header.s=hostingermail-a header.b="i3/M6CE6"; spf=pass (mx.ietf.org: domain of waqas.nawaz@vision4d.ai designates 189.12.193.6 as permitted sender) smtp.mailfrom=waqas.nawaz@vision4d.ai; dmarc=pass (policy=none) header.from=vision4d.ai
X-Hostinger-Mail-Ref: eyJfQF8iOiJcXF8vIiwicmVjaXBpZW50IjoiY2ZyZ0BpZXRmLm9yZyIsInRlbmFudCI6IndhcWF zLm5hd2F6PXZpc2lvbjRkLmFpIiwieF9jdXN0b21lciI6IndhcWFzLm5hd2F6QHZpc2lvbjRkLm FpIn0=
DKIM-Signature: v=1; a=rsa-sha256; d=relay.mail.hostinger.com; s=elm202607; c=relaxed/relaxed; bh=TVlvvxDDYDY7rzuJTaMX2YoHm79jnSMUZtPxwzZBgMA=; h=cc:cc:content-transfer-encoding:content-transfer-encoding:content-type: content-type:date:date:feedback-id:feedback-id:from:from:in-reply-to: in-reply-to:list-id:list-unsubscribe:list-unsubscribe-post:message-id: message-id:mime-version:mime-version:references:references:reply-to: subject:subject:to:to:x-hostinger-mail-id:x-hostinger-mail-id; t=1793967405; b=CypFcaZqaD7ZCJOh4yKlR3q9Bz5vtEQ169zolglrkhb0305cQ3926AplSAT4UBFKaMS3ym7dA GdExuKX8cv+ptN1ebk7Z8nHD1JqzhUFPUXIep3ts6YzlrqErmc7muLpie9o9334FP199SUWKlU6 N2LNDE7TIjpIRCPfiKPm6cPbVTqt5JfXNvxXeJ2EyPN4tOi05vuGstW2V91npadfYdQEJQvAdiR zserqZa2mIa1UpQKmlHKJsh89tJr+tjEkL1+8IqBjQsdk9pOb7TOU1JnJk/+VxZ/TfKcaCzbdg8 iDyL1NBkrInYYp7c91sqwIz0xHbVUAjkFDvLn57hmNEA==;
Feedback-ID: elm202607:vision4d.ai:hmail
X-Hostinger-Mail-Id: eea359b4d9db11f18da8bc24110e887c
Received: from de-fra-smtpout2.hostinger.io (::ffff:148.222.55.5) by fr-int-hmail-krelay5.hostinger.io (KumoMTA ::ffff:148.222.54.50) with ESMTPS (TLSv1_3:TLS13_AES_256_GCM_SHA384) id eea359b4d9db11f18da8bc24110e887c for <cfrg@ietf.org>; Fri, 6 Nov 2026 12:16:44 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vision4d.ai; s=hostingermail-a; t=1793967404; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=TVlvvxDDYDY7rzuJTaMX2YoHm79jnSMUZtPxwzZBgMA=; b=i3/M6CE6GPJQd3wF2Qrdv2QYxf+oQcVTw5nz+wxCCMsfrtyRArSkhAvZxLEee7zFhAM6L4 PH4H7HQiuHp8IpEVe8O5iv90UNuWFhDXxFCZOHnnzyu/zm1WCbuiXhjbIViAhBaPSgIAOC 7hWot9Xw1aiA5gdb9nojowepPQRHm0BDdlNeWzOTXQqSVdCXNm4iZAHgatFdLMYtTxq05O JpNtLEv2CwMpLMGAq5PSdkUVlv/RNCjv0URM60zXf4y+yHludh9PXJ8/GqtR4CdzH1PPVk fWWluz+hnuPGW3ue/OGZ7dvE6bUIlcSmgkwvXXv6xUBgc8W4hacjuB+zwBL1vA==
Received: from localhost (34.86.89.34.bc.googleusercontent.com [IPv6:2a02:8071:7031:24a0:6c85:db75:4c2e:c978]) (Authenticated sender: waqas.nawaz@vision4d.ai) by smtp.hostinger.com (smtp.hostinger.com) with ESMTPSA id 4jLdT83JX8z3wsp for <cfrg@ietf.org>; Fri, 6 Nov 2026 12:16:44 +0000 (UTC)
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"
From: waqas.nawaz@vision4d.ai
In-Reply-To: <CAObGJnM0oqfVnQi7iC61hw-fet-Eqzy82ipWEfZUwNZm-9BXHA@mail.gmail.com>
Message-Id: <1793967395783625998.1793967395@vision4d.ai>
Mime-Version: 1.0
References: <1A7A2227-C395-44C4-8FF3-6A70EAB70038@symbolic.software> <CAHxYnaOhyd4=6Dqjv_MU1Stk7oYeWS7FbyS7DWbrKTn=7mEj1g@mail.gmail.com> <CAK08nYYoZb338upWB2bQKtUmjS5C7dDDyj2jAnSEjWmmRFx+JQ@mail.gmail.com> <CAHxYnaMFhdET_MFAEpiMwxoV-ctQkvNhEPQDo_X-P=1biJpNOg@mail.gmail.com> <ce163cbe-02dd-4f0b-a6be-5591fbe2c23f@tu-dresden.de> <CAHxYnaM4L7N0qHrYR9Bx2Vreti2+SZ0sm6VxrX3g5DDAom=JFw@mail.gmail.com> <a3749e58-b503-47bf-b4e1-b266eb1d137d@tu-dresden.de> <473a7ba6-14a1-442a-a599-63613fd52d4d@tu-dresden.de> <CAObGJnM0oqfVnQi7iC61hw-fet-Eqzy82ipWEfZUwNZm-9BXHA@mail.gmail.com>
To: tho.ietf@gmail.com
Date: Fri, 06 Nov 2026 12:16:44 +0000
X-CM-Envelope: MS4xfKb1pAjegL/0K43oEN0nOtCSWnR05viv1/62XVOe0ZUIyyy7oMBGGrpv98AB+RW2uzcGxZ/yZc2BtEssDvssUnsxtwKYxXNqQBUjFIf4x1BgqfbsXnwB rdey2OEPrBmRq7jokzbzQuIIncRQRPY3D/KuoMwZRDTVNbQPnsOO07prFkreIB6INrmxa/Y/CtwNh1RXgb3jsMNHMHi3LIfWOpqdtkd27EOffURy0DFCSzWj 92Ix7dfa+Ol9FH6fqdBadg==
X-CM-Analysis: v=2.4 cv=PJpd+uqC c=1 sm=1 tr=0 ts=6aedc52c a=HYwohMCb0BgDs4P7jvr+tg==:617 a=xqWC_Br6kY4A:10 a=IkcTkHD0fZMA:10 a=pGLkceISAAAA:8 a=EDsJA6CywCosBQtD_qEA:9 a=XG0lpxEEV3AZ4qHP:21 a=QEXdDO2ut3YA:10
X-Spamd-Bar: ------------------
Message-ID-Hash: 6WYJDQIOY2A4PQYB5WUHSW6CQD4E4DJB
X-Message-ID-Hash: 6WYJDQIOY2A4PQYB5WUHSW6CQD4E4DJB
X-MailFrom: forwardingalgorithm@dmarc.ietf.org
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-cfrg.irtf.org-0; header-match-cfrg.irtf.org-1; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: muhammad_usama.sardar@tu-dresden.de, nathanritz@gmail.com, cfrg@ietf.org
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [CFRG] Re: On the applied cryptography of Attested TLS
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/R9lJoi0niCsj1Oth3C2VD5yQZK8>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Owner: <mailto:cfrg-owner@irtf.org>
List-Post: <mailto:cfrg@irtf.org>
List-Subscribe: <mailto:cfrg-join@irtf.org>
List-Unsubscribe: <mailto:cfrg-leave@irtf.org>

Hi Thomas,
Inline with [WN]


On Fri, Nov 6, 2026 at 9:20 AM Thomas Fossati <tho.ietf@gmail.com> wrote:
On Fri, Nov 6, 2026 at 5:03 AM Muhammad Usama Sardar
<muhammad_usama.sardar@tu-dresden.de> wrote:
> [...] More related to this RG, the Intra-handshake.fail paper [2] already has an initial cryptographic proof of insecurity. 41+ GHSAs and 16 published CVEs in [30] attest to the proof of insecurity of early attestation.


Furthermore, all of the CVEs that I sampled were simple implementation
bugs: don't make a fuss of it -- just go and fix them! ;-)
[WN] Could you indicate CVEs you sampled? I genuinely doubt that sampling covers any land.

Thanks,
Waqas


v2.46.0 | Report a Bug | By Email | System Status