[irtf-discuss] Re: [121attendees] IETF 121 HotRFC Talk Solicitation

[Muhammad Usama Sardar <[e-mail]>]

Hi,

I would like to ask for a slot. Here is the required info:

*Talk title*:
         Formal Analysis of Attested TLS for Confidential Computing

*Presenter*:
         Muhammad Usama Sardar, TU Dresden, in-person

*Short topic abstract*:
         TLS lacks any inherent mechanism for validating the security 
state of the endpoint software and its platform. To overcome this 
limitation, remote attestation can be integrated with TLS. We overview 
three different variants of such integration:

1. Pre-handshake attestation

2. Intra-handshake attestation

3. Post-handshake attestation.

We present the current state of formalization of each of the three 
variants.

*What you're looking for*:
         To seek collaborators knowledgeable in TLS, remote attestation, 
formal methods or confidential computing

*Coordinates to learn more, contact those involved, participate in 
existing mailing lists and scheduled meetings, and/or relevant formal or 
side meetings*:

  *   Muhammad Usama Sardar, [e-mail]
  *   Slack: #attested-tls on IETF slack
  * Meetings:
      o UFMRG meeting on Tuesday
      o TLS WG meeting on Friday (currently in "time-permitting")
      o RATS WG meeting on Friday
  * Side-meetings:

         1. Basic attested TLS tutorial: Tuesday 9:30-11:30, Wicklow Hall 2A

         2. Advanced TLS tutorial: Wednesday 9:30-11:30, Wicklow Hall 2A

*Any relevant drafts or helpful resources you’d like collaborators to 
look at*:

  * Pre-handshake attestation:
    https://www.researchgate.net/publication/385384309_Towards_Validation_of_TLS_13_Formal_Model_and_Vulnerabilities_in_Intel's_RA-TLS_Protocol
  * Intra-handshake attestation:
    https://datatracker.ietf.org/doc/draft-fossati-tls-attestation/
  * Post-handshake attestation: Sec. 4 in this paper
    https://www.researchgate.net/publication/367284929_SoK_Attestation_in_Confidential_Computing
  * Remote Attestation for Confidential Computing:
    https://www.researchgate.net/publication/375592777_Formal_Specification_and_Verification_of_Architecturally-defined_Attestation_Mechanisms_in_Arm_CCA_and_Intel_TDX
  * Repo for attestation: https://github.com/CCC-Attestation/formal-spec-TEE
  * Some recent slides and videos at
    https://github.com/CCC-Attestation/formal-spec-KBS
  * Slides from side-meeting at IETF 120:
    https://www.researchgate.net/publication/382489639_Presentation_Interactive_Tutorial_Attested_TLS_and_Formalization

Regards,

Usama


On 25.10.24 23:50, Liz Flynn wrote:
>
> Do you have an idea, problem space, or proposal that IETFers and 
> IRTFers should hear about?
>
> Do you want to propose IETF or IRTF work but aren’t sure if your idea 
> is ready or who else will be interested?
>
> Agenda requests are now being accepted for the Request for 
> Conversation (HotRFC) lightning talk session. Presenters will have 4 
> minutes to make their case for conversations.Interested folks can 
> contact the presenter and continue the discussion after the session.
>
> Goals include encouraging brainstorming conversations, helping new 
> work proposers find collaborators, raising awareness of relevant work 
> going on elsewhere, and promoting BarBoFs. Past HotRFC lightning talks 
> have covered a broad range of purposes, including:
>
>  *
>
>     Collaboration:proposals for new standards work or new research
>     topics that haven't been discussed elsewhere, potentially relevant
>     research that may be ready for the IETF
>
>  *
>     Notification:new topics on the agenda in a BOF, working group or
>     research group, especially cross-area IETF work
>  *
>
>     Enlightenment:updates on relevant technologies, industry advances
>     that could affect IETF participants.
>
> With strict time limits, concise talks will give viewers a sense of 
> whether they’d like to know more and, importantly, coordinates on how 
> to do so.
>
> With the current hybrid IETF meeting format, we’re going to keep 
> things simple and permit only live presentations, either on-site or 
> remote via MeetEcho. Slides must be submitted in advance.
>
> To request a slot,submit a short abstract to [e-mail] no later 
> than Friday, 2024-11-01, 2400 local meeting timethat includes the 
> following:
>
>  *
>     Talk title
>  *
>     Presenter, Affiliation, and whether you’ll be presenting in person
>     or remotely
>  *
>     Short topic abstract (topics should be IETF- or IRTF-related in
>     some way)
>  *
>     What you're looking for (education, collaborators, implementers, etc.)
>  *
>     Coordinates to learn more, contact those involved, participate in
>     existing mailing lists and scheduled meetings, and/or relevant
>     formal or side meetings.
>  *
>     Any relevant drafts or helpful resources you’d like collaborators
>     to look at
>
> To provide slides,submit ppt or pdf to [e-mail] 
> <mailto:[e-mail]>no later than Saturday, 2024-11-02, 2400 local 
> meeting time.
>
>  *
>
>     Talk abstracts and slides will be posted on the meeting agenda.
>     The agenda will be updated as requests come in.
>
> The session will beon Sunday, 2024-11-03, at 1800 local IETF meeting time
>
>  *
>
>     All talks will be presented live, whether in-person or via MeetEcho.
>
>  *
>
>     Video of the session will be recorded for later viewing.
>
> We hope you’ll tune in.
>
> -- the HotRFC team
>
> P.s. If you think holding a public side meeting would be useful for 
> people who are interested in your topic, there’s a wiki for that, at 
> https://wiki.ietf.org/meeting/121/sidemeetings.
>
>
>
> _______________________________________________
> 121attendees mailing list [e-mail]
> To unsubscribe send an email [e-mail]