IETF Logo Mail Archive

[Rats] Re: Clarifications in draft-ietf-rats-eat

Laurence Lundblade <lgl@island-resort.com> Sun, 13 April 2025 18:59 UTC

Return-Path: <lgl@island-resort.com>
X-Original-To: rats@mail2.ietf.org
Delivered-To: rats@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 786F41B7799C for <rats@mail2.ietf.org>; Sun, 13 Apr 2025 11:59:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (1024-bit key) header.d=island-resort.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TinK_Lk0FJgO for <rats@mail2.ietf.org>; Sun, 13 Apr 2025 11:59:20 -0700 (PDT)
Received: from sender4-pp-f112.zoho.com (sender4-pp-f112.zoho.com [136.143.188.112]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id BD9871B77995 for <rats@ietf.org>; Sun, 13 Apr 2025 11:59:20 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1744570755; cv=none; d=zohomail.com; s=zohoarc; b=BZTBdVTg97jrKQAqvI5phVykZyJlbI6sYBN9yoAQd+KmH5v6EjTpiIXQukEF6Q42JOpmH2Axhlw87a3FKnPH2Y1ZjaS9Gmn2M7YG5NmO04GT0VTdO3vPdbFZgHGCBBvVZAqN87cRGH4nezGPxR6MZKcpuG0Y+jBgn0FDhKtl3hc=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1744570755; h=Content-Type:Content-Transfer-Encoding:Cc:Cc:Date:Date:From:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:Subject:To:To:Message-Id:Reply-To; bh=DxQmdBO/gjQc5tNgKojPSG4Vl0MiAdS9CGXKqptc7Ko=; b=hYRCBespjU3e2kRqR+7hK0ExMwj4ngRGWBYHghOf9YK0wm1k/dORKkT7IySkBaktrZ587NHNBMQzyDsoY2Kwve+R8TmLFjm08NXP85PC+2yFa/Go3FIPFjmVrp4cgWboevVC93ZMJdwL5qQHobgX0O2NA1JK5YS5ucfIzmsPgvY=
ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass header.i=island-resort.com; spf=pass smtp.mailfrom=lgl@island-resort.com; dmarc=pass header.from=<lgl@island-resort.com>
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1744570755; s=island; d=island-resort.com; i=lgl@island-resort.com; h=Content-Type:Mime-Version:Subject:Subject:From:From:In-Reply-To:Date:Date:Cc:Cc:Content-Transfer-Encoding:Message-Id:Message-Id:References:To:To:Reply-To; bh=DxQmdBO/gjQc5tNgKojPSG4Vl0MiAdS9CGXKqptc7Ko=; b=cHPptDIt51nRgc4V7U5zyKW8YS8rqIlq/6/t6tuGGoLroDxjjcZlIKbvTWjkmDz7 xoBmenh15cTZogBJjpttfraEcSTPMrIkCljJ9jAFKOXl5LVaMywgGVgQFbOqdcfdNnC oOiLzNFxUNXTAVFcVwGe9rh3ikaNx8aIqqVFxozA=
Received: by mx.zohomail.com with SMTPS id 1744570754104207.6720136806025; Sun, 13 Apr 2025 11:59:14 -0700 (PDT)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.300.61.1.2\))
From: Laurence Lundblade <lgl@island-resort.com>
In-Reply-To: <69c22eaa-6bc4-4b58-92a1-4974199788fb@tu-dresden.de>
Date: Sun, 13 Apr 2025 11:59:01 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <B869F946-3392-4439-9716-37754D9C7102@island-resort.com>
References: <4abff904-74ef-473f-8b80-6ba563018744@tu-dresden.de> <D6C150AF-DB13-439C-862E-93CEBF573F34@island-resort.com> <LV8PR02MB100170F5C089781552960B6D0F2B62@LV8PR02MB10017.namprd02.prod.outlook.com> <bd70a904-8675-43d6-8113-13ef9107450d@tu-dresden.de> <7064A6AB-4629-43B7-A071-986CEF1423C5@island-resort.com> <28b5751b-cec6-4a7f-a696-8ac2b55c6345@tu-dresden.de> <BB8DD5ED-8815-4BFB-AF2C-84F16E21877E@island-resort.com> <69c22eaa-6bc4-4b58-92a1-4974199788fb@tu-dresden.de>
To: Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>
X-Mailer: Apple Mail (2.3774.300.61.1.2)
X-ZohoMailClient: External
Message-ID-Hash: LPIVYD6U5N3K3DY65FXGBBL3W67JQMJ5
X-Message-ID-Hash: LPIVYD6U5N3K3DY65FXGBBL3W67JQMJ5
X-MailFrom: lgl@island-resort.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-rats.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: Jeremy O'Donoghue <jodonogh@qti.qualcomm.com>, "rats@ietf.org" <rats@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Rats] Re: Clarifications in draft-ietf-rats-eat
List-Id: Remote ATtestation procedureS <rats.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/0kx0WxQQfwsYqVSk7lq_fYejp3I>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Owner: <mailto:rats-owner@ietf.org>
List-Post: <mailto:rats@ietf.org>
List-Subscribe: <mailto:rats-join@ietf.org>
List-Unsubscribe: <mailto:rats-leave@ietf.org>

Hi Usama,

I wrote that text.

I don’t think anyone is going to not use SGX or base their key provisioning architecture on this sentence.

We’ve given you a listen. I don’t think further debate here is going to change anything.

LL


(An attestation key BCP as a separate doc might be a good idea, but it seems like a ton of work. I have done full scale projects for key provisioning in my time at Qualcomm. I don’t think the topic is well understood here).




> On Apr 11, 2025, at 3:28 PM, Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de> wrote:
> 
> On 11.04.25 23:26, Laurence Lundblade wrote:
> 
>> The purpose of the paragraph is to high light the difference between attestation and other security goals such as authentication.
> And I am arguing that the text in draft is not doing that accurately. I have provided one counter-example where it does not hold.
>> Keys are only mentioned to contribute to this purpose.
> 
> Keys are the only thing that I see in that paragraph. Am I missing something?
> 
> Could you provide me with an authentic reference of where the text comes from?
> 
> Do you have any other example of difference other than keys?
> 
>> Your text is correct,
> Thanks.

v2.46.0 | Report a Bug | By Email | System Status