[Rats] Composite Evidence

"Eric Voit (evoit)" <evoit@cisco.com> Thu, 23 January 2020 00:04 UTC

Return-Path: <evoit@cisco.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B22712003F for <rats@ietfa.amsl.com>; Wed, 22 Jan 2020 16:04:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.499
X-Spam-Level:
X-Spam-Status: No, score=-14.499 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com header.b=ddknC70R; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=cisco.onmicrosoft.com header.b=CSLna83Y
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hDlJcUAinVaR for <rats@ietfa.amsl.com>; Wed, 22 Jan 2020 16:04:35 -0800 (PST)
Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E699012002E for <rats@ietf.org>; Wed, 22 Jan 2020 16:04:34 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=17825; q=dns/txt; s=iport; t=1579737874; x=1580947474; h=from:to:cc:subject:date:message-id:mime-version; bh=o030DkiKLN83VmogR3KCyE5TC+FuLEL5W3In/ROeDiU=; b=ddknC70RWveljoYk3tZ04MAWAYSuxi2hSZESj2TvMb3C1yu1dUQyxq8F Sxj4pmd2t0txYMAcood8EMfjJS0kefQWXtQjC8GibRKRQfEz4UT6lgr6I 7Wx1xsalrVGxAsyjnf5J22zqI1HWeX5oLhyC3rnSfLysvYbIHjeYSRRue Q=;
X-Files: smime.p7s : 3975
IronPort-PHdr: =?us-ascii?q?9a23=3AdANV8xxrpPeETxrXCy+N+z0EezQntrPoPwUc9p?= =?us-ascii?q?sgjfdUf7+++4j5YRyN/u1j2VnOW4iTq+lJjebbqejBYSQB+t7A1RJKa5lQT1?= =?us-ascii?q?kAgMQSkRYnBZuIF0r6MNbhbjcxG4JJU1o2t3w=3D?=
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AvEQDa4She/5ldJa1lHgELHIFwC4E?= =?us-ascii?q?lL1AFbCstIAQLKgqECINGA4sIihyLb4RigUKBEANUAgcBAQEJAwEBLQIBAYE?= =?us-ascii?q?rgxUCghokNwYOAgMNAQEEAQEBAgEFBG2FNwyFYRYRBAYTAQE3AREBBkQCBDA?= =?us-ascii?q?mAQQBDQ0GFIMFgX1NAx8PAQKTT5BlAoE5iGF1fzOCfwEBBYUMGIIFBwmBOIF?= =?us-ascii?q?TijQPGoFBP4FYhyABEgEhgw4ygiyNYIlWmCAKgjmDZ4I4kC+ad4ZNiBGbCAI?= =?us-ascii?q?EAgQFAg4BAQWBaCNncXAVgydQGA2IAQsYg1CKU3SBKYoggSIBgQ8BAQ?=
X-IronPort-AV: E=Sophos;i="5.70,351,1574121600"; d="p7s'?scan'208,217";a="618570763"
Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-9.cisco.com with ESMTP/TLS/DHE-RSA-SEED-SHA; 23 Jan 2020 00:04:33 +0000
Received: from XCH-RCD-005.cisco.com (xch-rcd-005.cisco.com [173.37.102.15]) by rcdn-core-2.cisco.com (8.15.2/8.15.2) with ESMTPS id 00N04XtN012270 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Thu, 23 Jan 2020 00:04:33 GMT
Received: from xhs-rtp-002.cisco.com (64.101.210.229) by XCH-RCD-005.cisco.com (173.37.102.15) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 22 Jan 2020 18:04:33 -0600
Received: from xhs-rcd-002.cisco.com (173.37.227.247) by xhs-rtp-002.cisco.com (64.101.210.229) with Microsoft SMTP Server (TLS) id 15.0.1473.3; Wed, 22 Jan 2020 19:04:32 -0500
Received: from NAM12-BN8-obe.outbound.protection.outlook.com (72.163.14.9) by xhs-rcd-002.cisco.com (173.37.227.247) with Microsoft SMTP Server (TLS) id 15.0.1473.3 via Frontend Transport; Wed, 22 Jan 2020 18:04:31 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=VjsSkEmdcu4UYLkSPO+rN+wceeMMnH6SUkqxYqf0hZIUtumX6+BshNqF0SxKHgp9CxhEGsySAHhcl1ElOEBkHj/PAFYGbbJmlHA2vHDpG3wEo9vQZzc4hBZvXzJI0LDjmrGmlcRE2+g59zMPBDXt7qzvnXHCgl+as6du4ptL2PC186M1asrhxzvdOq8Ga5UCg/MbLdTPOxo8M35Do/f2YrtlrY6V8uftl7cDvEnMWo+J68pWLuaYBFrzuhLobkHCgryuA5vPsFVrawjag6MCe/qkW1pKRGyM/7mdfiljk0qARC/cS0SgxXEl4w71HvgdbS3bAXjr88SEeNDZpU2qmw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uNo8Y0oJWDb9tyv99D5AbkSpmzByovqKBy27orYdSHE=; b=obIJN+BdCTlhuu45Ge44XDygTIgdNmb+nsGs6furQDVg7mKcWYEjlyrzSbuUr7MoB6cXxOqC4aBF8c3PgBZYIN1b7qHbvUYbef/067NMe7l5tJPiJ+fwg/DfgHzVQaC9td3OFvtuTNhplN2+C3vQ0nNN50ivQqF2K+TwHZbAl7jduLXp9G0+nCC0skftNumZY2ucPplm/To8RTkE5wOHpV/xSWsfsY70PvEaLVzBpkUlRo6rBV4RFGuUvx8+pnxEebkS6GeXfc7nC1DGnFbt06sFcmxG3NUKj6m2iDUviP6Vjqhl9N45zx+FteBfZxcoEX9qK1w56K+oAvzIOGXLvg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cisco.com; dmarc=pass action=none header.from=cisco.com; dkim=pass header.d=cisco.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cisco.onmicrosoft.com; s=selector2-cisco-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uNo8Y0oJWDb9tyv99D5AbkSpmzByovqKBy27orYdSHE=; b=CSLna83Ye4ao5+8Ysn6PJ9ruwbor25SS0fl6FyE1B7y6HfDP0mNzWoH6HVTstDQoXadhRMRNBkEAxSmoZZ9ygBLvokXv2vTeJBgvuRKRY5I5mZbMIul/7teYUSnaSSPeXIeB6vzH2IhThHUY7x/hwM5gT37QQdABta5JpPgieyc=
Received: from BYAPR11MB2536.namprd11.prod.outlook.com (52.135.226.32) by BYASPR01MB0013.namprd11.prod.outlook.com (52.135.235.161) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2644.28; Thu, 23 Jan 2020 00:04:30 +0000
Received: from BYAPR11MB2536.namprd11.prod.outlook.com ([fe80::20d1:96f3:bde9:17e5]) by BYAPR11MB2536.namprd11.prod.outlook.com ([fe80::20d1:96f3:bde9:17e5%5]) with mapi id 15.20.2665.017; Thu, 23 Jan 2020 00:04:30 +0000
From: "Eric Voit (evoit)" <evoit@cisco.com>
To: "Birkholz, Henk" <henk.birkholz@sit.fraunhofer.de>, Michael Richardson <mcr+ietf@sandelman.ca>, Dave Thaler <dthaler@microsoft.com>, "Smith, Ned" <ned.smith@intel.com>
CC: "rats@ietf.org" <rats@ietf.org>
Thread-Topic: Composite Evidence
Thread-Index: AdXRgB49sEcLGXWTRbyFhaWoEjRAww==
Date: Thu, 23 Jan 2020 00:04:29 +0000
Message-ID: <BYAPR11MB2536867559E1A20682A1FC2BA10F0@BYAPR11MB2536.namprd11.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=evoit@cisco.com;
x-originating-ip: [173.38.117.65]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: c8fc203f-d06c-4ee2-986e-08d79f97d1f2
x-ms-traffictypediagnostic: BYASPR01MB0013:
x-microsoft-antispam-prvs: <BYASPR01MB0013BF77C06F36E65693D47BA10F0@BYASPR01MB0013.namprd11.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:7691;
x-forefront-prvs: 029174C036
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(346002)(39860400002)(366004)(396003)(136003)(376002)(189003)(199004)(8676002)(86362001)(81156014)(478600001)(8936002)(81166006)(316002)(71200400001)(3480700007)(2906002)(110136005)(76116006)(4326008)(66946007)(66446008)(64756008)(66556008)(66476007)(66616009)(9686003)(55016002)(5660300002)(52536014)(7696005)(7116003)(6506007)(33656002)(186003)(26005); DIR:OUT; SFP:1101; SCL:1; SRVR:BYASPR01MB0013; H:BYAPR11MB2536.namprd11.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: cisco.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: EN7owLEPwD8k/UgSL7HvmwNyDlWYb9ruyTuiHUwYkX2EaJ8hGF9+YU10zjVCssOTnqWKtsIzjTFlF/sQehST/bDyTwwzFaXmx32Bwrn1FDeGoDVt2hcIE05bnpVn8VOnz8yMq6hMN87y4n56a1zILGlJmCITajN29RFz8aU0a8viJmCqt/gIkK0jWfyC1wy+SonNzRY6L514ndnGhQZeTFgT/9vBEimQ/1ZCNlqUUA4az2aVQs/grO2qjvNPO5qIy/xKiYVPX9mzH/Dq+yz2WRX1oEfx4ZxeSZD7Wkx2WstvVGQ9SJBUjTghvASWAsQmVOOxa1HTTF84NmUhgehaMPRy5TgjZS2fii3UZN8PLVXn847xuM9b0gWmBBqrYCUBVMdJ+PoYgVVPXhQ1xMbiZakjayqBWTsjA+1vTytljrmj8SaSyzVynGCRYPq2El1v
x-ms-exchange-transport-forked: True
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_045D_01D5D156.3591FC10"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: c8fc203f-d06c-4ee2-986e-08d79f97d1f2
X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Jan 2020 00:04:30.2582 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 5ae1af62-9505-4097-a69a-c1553ef7840e
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: iC3gnxBakTlQB0x4Ki/EZ+q6KJg/Npay+DVWKlLpuZci39MJw1MjLPBs/faiN2E1
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYASPR01MB0013
X-OriginatorOrg: cisco.com
X-Outbound-SMTP-Client: 173.37.102.15, xch-rcd-005.cisco.com
X-Outbound-Node: rcdn-core-2.cisco.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/2gwkcUe1HB1skg_i1tAIhg7MNN4>
Subject: [Rats] Composite Evidence
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Remote Attestation Procedures <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Jan 2020 00:04:37 -0000

Henk,         Dave,

Michael,    Ned,



I promised you a definition for Composite Evidence.  You can see my proposed 
definition directly the text below, but I am not willing yet to place it in a 
Pull Request. I thought an email thread might be helpful first.



Anyway my strawman definition for Composite Evidence is:  Evidence which 
includes multiple sub-elements of evidence, more than one of which can be 
computationally verified to have been generated by a specific Attester 
Subcomponent or Verifier.



I built this definition considering the passport model, which looks like it 
will often needs to use composite evidence.  As an example of why I believe 
this, see the use case below.



    .--------------.

    |  Verifier A  |

    '--------------'

        ^     [2]

        |     Verifier A signed Attestation Results @time(x) (

    evidence(  |  determination, hash(TpmQuote@time(x)))

    TpmQuote   |

    @time(x))  |

       [1]     V

     .-------------.                           .---------------.

     |  Attester   |<------nonce @time(y)---[3]|  Verifier B   |

     |    .-----.  |                           |       /       |

     |    | Tpm |  |[4]-composite evidence ( ->| Relying Party |

     |    '-----'  |      TpmQuote@time(y),    '---------------'

     '-------------'      TpmQuote@time(x),

                          Verifier A signed Attestation Results @time(x) )





In the example above, evidence at time x is generated and signed within a TPM. 
This would *not* be composite evidence.   This evidence would be evaluated by 
Verifier A, signed, and returned as Attestation Results to the Attester.   A 
subsequent request from a Relying Party at time y could pull three 
independently signed elements of evidence from the Attester.  These three 
would comprise the composite evidence which when taken together would allow 
Verifier B / Relying Party to evaluate the current trustworthiness of the 
Attester.



Does this definition meet your needs?



Thanks,

Eric