IETF Logo Mail Archive

[Lake] Re: [Ufmrg] Relay Attacks in Intra-handshake Attestation for Confidential Agentic AI Systems

Mališa Vučinić <malisa.vucinic@inria.fr> Wed, 04 March 2026 17:59 UTC

Return-Path: <malisa.vucinic@inria.fr>
X-Original-To: lake@mail2.ietf.org
Delivered-To: lake@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 6611AC456869 for <lake@mail2.ietf.org>; Wed, 4 Mar 2026 09:59:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -4.395
X-Spam-Level:
X-Spam-Status: No, score=-4.395 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=inria.fr
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q7JwLPk0O3uW for <lake@mail2.ietf.org>; Wed, 4 Mar 2026 09:59:00 -0800 (PST)
Received: from mail3-relais-sop.national.inria.fr (mail3-relais-sop.national.inria.fr [192.134.164.104]) (using TLSv1.2 with cipher ECDHE-ECDSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 00AE6C456852 for <lake@ietf.org>; Wed, 4 Mar 2026 09:58:59 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=inria.fr; s=dc; h=from:message-id:mime-version:subject:date:in-reply-to:cc: to:references; bh=+BWT4NBBuBZj3pPKBqC9qSm7J74xRlWnvdgdDb+KJXc=; b=eG9ivEhE13zK58ZyajMXRZuz92VqcXr7muX7P/B9poD2R+wIz1wVmOn9 7AbqbtP5ALnwg60ELpbL3Wki89o2k6sysZvH3KcPJaQJeCFj3BMEk2wss 0kh5CTJIDqX/6pHGlR5Tia8y/yv6zs6r8Spxd2PZJpX30qv4uv/VS0COf o=;
X-CSE-ConnectionGUID: rwRnDPd5R824kGramdo6Tg==
X-CSE-MsgGUID: uotAuWXgQyiexSkjTTFEpA==
Authentication-Results: mail3-relais-sop.national.inria.fr; dkim=none (message not signed) header.i=none; spf=SoftFail smtp.mailfrom=malisa.vucinic@inria.fr; dmarc=fail (p=none dis=none) d=inria.fr
X-IronPort-AV: E=Sophos;i="6.21,324,1763420400"; d="scan'208,217";a="140428042"
Received: from unknown (HELO smtpclient.apple) ([31.204.253.99]) by mail3-relais-sop.national.inria.fr with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 04 Mar 2026 18:58:59 +0100
From: Mališa Vučinić <malisa.vucinic@inria.fr>
Message-Id: <01B0CB6C-803D-4A2B-BB96-F654B7A4094D@inria.fr>
Content-Type: multipart/alternative; boundary="Apple-Mail=_ECFC80D2-1EF6-49D8-961E-E971C45613D9"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3826.700.81.1.4\))
Date: Wed, 04 Mar 2026 18:58:47 +0100
In-Reply-To: <CAGL5yWa6v7awcJv7GAoJ96jgAM7Vy4T4j9nSkiLReUs7zm91Rg@mail.gmail.com>
To: Paul Wouters <paul.wouters=40aiven.io@dmarc.ietf.org>
References: <5521ffe4-4f9f-4470-93a2-644841713996@tu-dresden.de> <f40756f9-a7d3-4d3e-a744-1e273d96c496@tu-dresden.de> <2386e955-426e-4e19-ace2-0220d6552be4@tu-dresden.de> <CAGL5yWa6v7awcJv7GAoJ96jgAM7Vy4T4j9nSkiLReUs7zm91Rg@mail.gmail.com>
X-Mailer: Apple Mail (2.3826.700.81.1.4)
Message-ID-Hash: PF6SNFZDCMU6S7TWU6WYOSESEVKND6AG
X-Message-ID-Hash: PF6SNFZDCMU6S7TWU6WYOSESEVKND6AG
X-MailFrom: malisa.vucinic@inria.fr
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>, "lake@ietf.org" <lake@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Lake] Re: [Ufmrg] Relay Attacks in Intra-handshake Attestation for Confidential Agentic AI Systems
List-Id: Lightweight Authenticated Key Exchange <lake.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/lake/qmZq5zyDVtYLUQh5wbd_VcVY8ao>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lake>
List-Help: <mailto:lake-request@ietf.org?subject=help>
List-Owner: <mailto:lake-owner@ietf.org>
List-Post: <mailto:lake@ietf.org>
List-Subscribe: <mailto:lake-join@ietf.org>
List-Unsubscribe: <mailto:lake-leave@ietf.org>

Hi Paul,

My understanding is that Usama will use the slot during the Shenzhen meeting to present the formal analysis of draft-ietf-lake-ra, i.e. attested EDHOC. We are looking forward to understanding better how the attacks on attested TLS reflect over to attested EDHOC. 

Mališa

> On Mar 4, 2026, at 15:11, Paul Wouters <paul.wouters=40aiven.io@dmarc.ietf.org> wrote:
> 
> How does this relate to lake? From what I can tell, Cocos AI used regular TLS over TCP?

v2.46.0 | Report a Bug | By Email | System Status