Re: [EAT] [Rats] Rats and EAT
Henk Birkholz <henk.birkholz@sit.fraunhofer.de> Mon, 09 July 2018 09:55 UTC
Return-Path: <henk.birkholz@sit.fraunhofer.de>
X-Original-To: eat@ietfa.amsl.com
Delivered-To: eat@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B6F3130F4D; Mon, 9 Jul 2018 02:55:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.901
X-Spam-Level:
X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zHAfdsZHA0Ri; Mon, 9 Jul 2018 02:55:25 -0700 (PDT)
Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E6CD5130DDF; Mon, 9 Jul 2018 02:55:24 -0700 (PDT)
Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w699tLwM012608 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 9 Jul 2018 11:55:22 +0200
Received: from [134.102.163.216] (134.102.163.216) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.399.0; Mon, 9 Jul 2018 11:55:16 +0200
From: Henk Birkholz <henk.birkholz@sit.fraunhofer.de>
To: Yaron Sheffer <yaronf.ietf@gmail.com>, Laurence Lundblade <lgl@island-resort.com>, rats@ietf.org, eat@ietf.org
References: <0236DCF5-8B9D-4721-B169-8DCBC6B4CFBC@island-resort.com> <f81f30bd-28c4-f915-18d7-028f0e3cb2da@gmail.com> <e8cad7be-49fb-f95d-fad5-4e0830060caf@sit.fraunhofer.de>
Message-ID: <0820ad7b-23d2-b6db-229f-f793843be76c@sit.fraunhofer.de>
Date: Mon, 09 Jul 2018 11:49:34 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0
MIME-Version: 1.0
In-Reply-To: <e8cad7be-49fb-f95d-fad5-4e0830060caf@sit.fraunhofer.de>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 8bit
X-Originating-IP: [134.102.163.216]
Archived-At: <https://mailarchive.ietf.org/arch/msg/eat/q2AklUqu8d-nKKBII3mW17cBqlY>
Subject: Re: [EAT] [Rats] Rats and EAT
X-BeenThere: eat@ietf.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: EAT - Entity Attestation Token <eat.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/eat>, <mailto:eat-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/eat/>
List-Post: <mailto:eat@ietf.org>
List-Help: <mailto:eat-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/eat>, <mailto:eat-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Jul 2018 09:55:28 -0000
Replying to myself: > https://trustedcomputinggroup.org/wp-content/uploads/TCG-TNC-Architecture-for-Interoperability-Version-2.0-Revision-13-.pdf (somehow got an extra char in to that string) On 07/09/2018 11:47 AM, Henk Birkholz wrote: > Hello Yaron, > > the TNC architecture was revised and update to 2.0 last year. You can > find the current detailed architecture diagram in this document on page > 20 (Figure 5). > >> https://trustedcomputinggroup.org/wp-content/uploads/TCG-TNC-Architecture-for-Interoperability-Version-2.0-Raevision-13-.pdf >> > > There is also this freshly minted RFC that makes use of the architecture > (RFC 5792, called IF-M in TCG lingo): > >> https://datatracker.ietf.org/doc/rfc8412/ > > > Viele Grüße, > > Henk > > On 07/07/2018 11:51 PM, Yaron Sheffer wrote: >> I'm a bit surprised that nobody's mentioning the work done by the IETF >> NEA working group <https://datatracker.ietf.org/wg/nea/about/>. Yes, >> it's been some time ago, but the people involved were (to the best of >> my knowledge) involved with the TCG community. >> >> NEA was about desktop machines and NAC rather than mobile devices, but >> hey, by now we should be looking for solutions that encompass both >> technologies! >> >> See this diagram >> <https://wiki.strongswan.org/projects/1/wiki/trustednetworkconnect> on >> how the complex NEA/TNC architecture fits together, including the TPM. >> >> Thanks, >> >> Yaron >> >> >> On 06/07/18 22:20, Laurence Lundblade wrote: >>> Hey EAT and Rats folks, just became aware of IETF attestation work >>> running in parallel. Seems like EAT is focused more on an independent >>> signed, self-secured data structure with a lot of clams. Rats, seems >>> more TPM and full protocol centric, but I’m still reading. >>> >>> Here’s a list of attestation work that Diego and Henk made: >>> https://datatracker.ietf.org/doc/draft-pastor-i2nsf-nsf-remote-attestation/ >>> >>> https://datatracker.ietf.org/doc/draft-birkholz-i2nsf-tuda/ >>> https://datatracker.ietf.org/doc/draft-mandyam-eat/ >>> https://datatracker.ietf.org/doc/draft-mandyam-tokbind-attest/ >>> https://datatracker.ietf.org/doc/draft-birkholz-reference-ra-interaction-model/ >>> >>> https://datatracker.ietf.org/doc/draft-birkholz-yang-basic-remote-attestation/ >>> >>> https://datatracker.ietf.org/doc/draft-birkholz-attestation-terminology/ >>> >>> A couple of other interesting non-TPM “attestation" technologies: >>> - FIDO >>> <https://www.w3.org/Submission/2015/SUBM-fido-key-attestation-20151120/> does >>> attestation of FIDO authenticators >>> - Android KeyStore >>> <https://developer.android.com/training/articles/security-key-attestation> uses >>> the term to mean proving the provenance of a stored key >>> - IEEE 802.1AR is kind of an attestation too >>> >>> FYI, the IETF attestation events I know of so far are: >>> - I’ll present EAT at HotRFC Sunday around 18:00 >>> - Secdispatch discussion of EAT (and Rats?) Monday at 15:30 (At >>> least I hope; no confirmation yet) >>> - EAT BarBof Monday at 18:00 >>> - Rats BarBof Thursday after dinner >>> >>> I will attend them all :-) >>> >>> LL >> >> >> >> _______________________________________________ >> Rats mailing list >> Rats@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >>
- Re: [EAT] [Rats] Rats and EAT Russ Housley
- Re: [EAT] [Rats] Rats and EAT Yaron Sheffer
- Re: [EAT] [Rats] Rats and EAT Henk Birkholz
- Re: [EAT] [Rats] Rats and EAT Henk Birkholz
- [EAT] Rats and EAT Laurence Lundblade
- Re: [EAT] [Rats] Rats and EAT Diego Lopez
- Re: [EAT] [Rats] Rats and EAT Yaron Sheffer
- Re: [EAT] [Rats] Rats and EAT Hannes Tschofenig
- Re: [EAT] [Rats] Rats and EAT Diego Lopez
- Re: [EAT] [Rats] Rats and EAT Hannes Tschofenig
- Re: [EAT] [Rats] Rats and EAT Laurence Lundblade
- Re: [EAT] [Rats] Rats and EAT Hannes Tschofenig
- Re: [EAT] [Rats] Rats and EAT Laurence Lundblade
- Re: [EAT] [Rats] Rats and EAT Diego R. Lopez
- Re: [EAT] [Rats] Rats and EAT Michael Richardson
- Re: [EAT] [Rats] Rats and EAT Michael Richardson
- Re: [EAT] [Rats] Rats and EAT Laurence Lundblade
- Re: [EAT] [Rats] Rats and EAT Yaron Sheffer
- Re: [EAT] [Rats] Rats and EAT Henk Birkholz