IETF Logo Mail Archive

Re: [Rats] [sacm] CoSWID and EAT and CWT

"Waltermire, David A. (Fed)" <david.waltermire@nist.gov> Thu, 21 November 2019 04:29 UTC

Return-Path: <david.waltermire@nist.gov>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9ECBA120963; Wed, 20 Nov 2019 20:29:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nist.gov
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id inyemS0g_yGt; Wed, 20 Nov 2019 20:29:51 -0800 (PST)
Received: from GCC02-BL0-obe.outbound.protection.outlook.com (mail-bl2gcc02on2105.outbound.protection.outlook.com [40.107.89.105]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 035CD12095C; Wed, 20 Nov 2019 20:29:50 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=WOJkjjUgU+VNgQcMGUuI/8iYFJhvGl7rHObGbUPhO7JBqEBKYob1k29bCVzJH1FpvOKy4QEwpINH2O5cugjmTO5ZiAQ+KMa/YM4x51UMaVZc0zOGRU6ZbAgtcUHcOL71Co0mOjPx5+Gp9P0f1lUCeweMBp1qVc7mMnLBJddeVAoCKk0WoV8dXFjPyZuo7HqjLpr+GLXVWV+eBvtMSDCF0mJNQJjXwtnbLcPaN7xUI73zTbMIwEotAEHbtWxX8vLgwFPbW60Unq5wznn8wEzZj/WfT1dWB/JzOd5NRswai/AmC+7Dv/CZC5irBbjvmFFSY53KmoEQF9IBvytEtf12PQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0/fBb7i5L58f7HucHy70SVhsxXE2qr9+LVHCi1fOQ1M=; b=JfKjWYhiZtmzOc/qMFjNpvruuoN+LU54+OGALCrLxfQ5ALCSUOh/B3csjDCoiUxcLa8Cpqsysbw7484yRJl4KMauWjgsCAYakv0Qf5ImQlPAUfp6n7dzHFp0xdHO93vhDD/lJiKOREtltFlUpVCCwyF9hTgev+jua8+TBaUe+BABxz3NxT15uazirsOlf2/GjTmNjnGPDD7fa0j/xjQaaSNVMTQkOXXSLnVhEyEQa7ehsXek2zu6qgX136AdVCt7jPB0m7rRFngM3krP+uOWMQMdJLhnZfe4VrYrUsCrScTbDFrpDF0gOl+DT+EqWObYpuNz/cBdfx8ZM0wGwWgo2g==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nist.gov; dmarc=pass action=none header.from=nist.gov; dkim=pass header.d=nist.gov; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nist.gov; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0/fBb7i5L58f7HucHy70SVhsxXE2qr9+LVHCi1fOQ1M=; b=yvIS65RqRwjGFnTN5p+PvIfH1Zjdd+mW/Vh6HrNaCX7vFTCsUT2bp/4/D9bnauE9nanciLej8shoCLrhsHiZbhxE5XO4WemIWNpET/QtiEnjaHMXqY5XmJAuYv5m7Ns19AsEI1Eh9cckFVZCYjAhMoCI9+Ydsg7AEZFr4fSzjyY=
Received: from BN7PR09MB2819.namprd09.prod.outlook.com (52.135.242.24) by BN7PR09MB2690.namprd09.prod.outlook.com (52.135.242.21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2474.18; Thu, 21 Nov 2019 04:29:49 +0000
Received: from BN7PR09MB2819.namprd09.prod.outlook.com ([fe80::6d13:7512:b4df:e310]) by BN7PR09MB2819.namprd09.prod.outlook.com ([fe80::6d13:7512:b4df:e310%7]) with mapi id 15.20.2474.019; Thu, 21 Nov 2019 04:29:48 +0000
From: "Waltermire, David A. (Fed)" <david.waltermire@nist.gov>
To: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>, Ira McDonald <blueroofmusic@gmail.com>
CC: "rats@ietf.org" <rats@ietf.org>, sacm <sacm@ietf.org>, Laurence Lundblade <lgl@island-resort.com>
Thread-Topic: [sacm] [Rats] CoSWID and EAT and CWT
Thread-Index: AQHVoAcinV4l/iw9i0usrObSRdkD+6eU4bqAgAAkxTI=
Date: Thu, 21 Nov 2019 04:29:48 +0000
Message-ID: <BN7PR09MB2819D797B89183218BEFA823F04E0@BN7PR09MB2819.namprd09.prod.outlook.com>
References: <2A12D8A3-722A-44D1-8011-218C89C8B50B@island-resort.com> <CAN40gStq_v6KEe_CiGFQSUTWMjLf4RC-1HLaQzgoCN0gcixWEg@mail.gmail.com>, <CAHbuEH7v8WeO7-w8LTjVwCzRNfnEyYRgiDFumXpKNHSN5QaaKA@mail.gmail.com>
In-Reply-To: <CAHbuEH7v8WeO7-w8LTjVwCzRNfnEyYRgiDFumXpKNHSN5QaaKA@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov;
x-originating-ip: [129.6.223.126]
x-ms-publictraffictype: Email
x-ms-office365-filtering-ht: Tenant
x-ms-office365-filtering-correlation-id: e4dc4e00-ebfe-42e2-3f2d-08d76e3b71e0
x-ms-traffictypediagnostic: BN7PR09MB2690:
x-ms-exchange-purlcount: 5
x-microsoft-antispam-prvs: <BN7PR09MB2690AD8A42EC229467DACCE1F04E0@BN7PR09MB2690.namprd09.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:7691;
x-forefront-prvs: 0228DDDDD7
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(366004)(396003)(39860400002)(346002)(376002)(189003)(199004)(316002)(110136005)(19273905006)(54906003)(99286004)(105004)(102836004)(76176011)(7696005)(4326008)(54896002)(6306002)(6436002)(55016002)(486006)(236005)(53546011)(14444005)(256004)(9686003)(71190400001)(6246003)(25786009)(478600001)(8676002)(8936002)(81166006)(81156014)(76116006)(66476007)(7736002)(2906002)(66446008)(71200400001)(52536014)(74316002)(966005)(14454004)(6506007)(91956017)(229853002)(64756008)(66556008)(19627405001)(66574012)(446003)(476003)(11346002)(26005)(186003)(86362001)(66946007)(66066001)(5660300002)(3846002)(6116002)(33656002)(606006)(563064011); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR09MB2690; H:BN7PR09MB2819.namprd09.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1;
received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: c47x5D2Y5B21F5Dhw/mf+++SciC1JlHPZYnrSyOGh9P0myQudnk4XXI5DF6o+asLIyaUPH5AUgE4ERHMecnMu2JwT+PyKtDG8yVqqA+GxYL4+yPwW1n9p3RMokEIYVCgXrDDwfq3Mq/5AYAe80FUs8misazW6xC+M0Hb8qH4y2CG0cFNKG5k73Lb834XXEvVZyPQmGiati1leE6iqCqTcYLMWbpxMHSpZLGCo8tf8mWnlB9hTCxKORdj0t5/nkg8dcoaMwmSWqMwsXaCPXJQIKW78zB1xxei8WY2gUTBBnu1ckUT3u8ma2sSgib9/6tZlLnTRq9Fp4O30a2mpkmBh7fLV2vZ/6HGngj4i/FV41dz+wYJFRCQxOXqWAVVaV6EPgNB7UJgRkV1ZfadvwFcKkXaz2uG4mb9Q/ZUFWu+mZw9q6vTEljtfnpCPew5GM4hSepnqB84hbzsXTCGKHP6yHcT44LGrpr8oiL7r9/e/bY=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_BN7PR09MB2819D797B89183218BEFA823F04E0BN7PR09MB2819namp_"
MIME-Version: 1.0
X-OriginatorOrg: nist.gov
X-MS-Exchange-CrossTenant-Network-Message-Id: e4dc4e00-ebfe-42e2-3f2d-08d76e3b71e0
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2019 04:29:48.4774 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: ccvkW+QKu7uOLgPu4Lu7f7huj+AyNqb41xsulYnuB0CyrWw4fHZXifmlfr6MHJ5iQVNdBCugU9Yv6bK34cuQjQ==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR09MB2690
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/HKUTLMy843rcnhdjnLvnLx9NUuE>
Subject: Re: [Rats] [sacm] CoSWID and EAT and CWT
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Remote Attestation Procedures <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Nov 2019 04:29:53 -0000

It sounds like having a CWT claim that contains an entire CoSWID is a path forward. It may also make sense to do something similar for ISO SWID tags.

Am I right in thinking that this CWT work can be done in RATS, referencing CoSWID once it is published as a normative reference? This would allow CoSWID to go forward to the IESG, while the CoSWID CWT claim is worked in parallel in RATS.

Kathleen, if this is true, does this way forward address your CWT-related comments?

Regards,
Dave





________________________________
From: sacm <sacm-bounces@ietf.org> on behalf of Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
Sent: Wednesday, November 20, 2019 9:10 PM
To: Ira McDonald <blueroofmusic@gmail.com>
Cc: rats@ietf.org <rats@ietf.org>; sacm <sacm@ietf.org>; Laurence Lundblade <lgl@island-resort.com>
Subject: Re: [sacm] [Rats] CoSWID and EAT and CWT

Great, thanks Laurence.  If that's easier I think having the CoSWID in one claim should be ok and would have the same result as the suggestion I made.  Changing the CoSWID format is a big enough process that it shouldn't happen very often.

Best regards,
Kathleen

On Wed, Nov 20, 2019 at 8:00 PM Ira McDonald <blueroofmusic@gmail.com<mailto:blueroofmusic@gmail.com>> wrote:
Hi Laurence,

That seems like a good suggestion for a simple way to integrate CoSWID content
into EAT.

Cheers,
- Ira

Ira McDonald (Musician / Software Architect)
Co-Chair - TCG Trusted Mobility Solutions WG
Co-Chair - TCG Metadata Access Protocol SG
Chair - Linux Foundation Open Printing WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB
Blue Roof Music / High North Inc
http://sites.google.com/site/blueroofmusic<https://gcc01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsites.google.com%2Fsite%2Fblueroofmusic&data=02%7C01%7Cdavid.waltermire%40nist.gov%7C92a2dcbadd8d47661b9608d76e282847%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C1%7C637098991070417006&sdata=GDIVVIesvqqXnuU6TtLbK7GJ4eI1b1EcYSPoXsHlj04%3D&reserved=0>
http://sites.google.com/site/highnorthinc<https://gcc01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsites.google.com%2Fsite%2Fhighnorthinc&data=02%7C01%7Cdavid.waltermire%40nist.gov%7C92a2dcbadd8d47661b9608d76e282847%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C1%7C637098991070417006&sdata=7z%2BoMcYSSFD8hAYHmELqNoyGAxTBE9gknbV6kAzKWX8%3D&reserved=0>
mailto: blueroofmusic@gmail.com<mailto:blueroofmusic@gmail.com>
PO Box 221  Grand Marais, MI 49839  906-494-2434



On Wed, Nov 20, 2019 at 7:35 PM Laurence Lundblade <lgl@island-resort.com<mailto:lgl@island-resort.com>> wrote:
Hi,

I’m not on the SACM list, but did look at the archive. Hopefully I’m not out of sync.

My thought is to register one claim for CWT that is an entire CoSWID (in CDDL the concise-swid-tag).

That way CoSWID can grow and develop on its own without lots of adds and subtracts to the CWT registry. It has its own IANA registry with its own experts and such. Seems like the coupling / factoring is about right.

This would also be the way I’d like to have it in EAT attestation. We’ve done a mini version of this with the location claim<https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools.ietf.org%2Fhtml%2Fdraft-ietf-rats-eat-01%23section-3.8&data=02%7C01%7Cdavid.waltermire%40nist.gov%7C92a2dcbadd8d47661b9608d76e282847%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C1%7C637098991070426961&sdata=%2Fhi008Am2dlY6tBQHdPVVGZzEcWNmqd5MvgPOM14jE8%3D&reserved=0>.

Then if you just want to sign a CoSWID CWT style, this works pretty well too. It has a slight overhead compared to having all the CoSWID data items as direct CWT claims in that it will have an additional map layer, but that is only about three bytes.

LL

_______________________________________________
RATS mailing list
RATS@ietf.org<mailto:RATS@ietf.org>
https://www.ietf.org/mailman/listinfo/rats<https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Frats&data=02%7C01%7Cdavid.waltermire%40nist.gov%7C92a2dcbadd8d47661b9608d76e282847%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C1%7C637098991070426961&sdata=fdpXMIU%2BNkMSn3RJ4X5AsSuMU7pbokHXltsX8ZYP9E0%3D&reserved=0>
_______________________________________________
sacm mailing list
sacm@ietf.org<mailto:sacm@ietf.org>
https://www.ietf.org/mailman/listinfo/sacm<https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fsacm&data=02%7C01%7Cdavid.waltermire%40nist.gov%7C92a2dcbadd8d47661b9608d76e282847%7C2ab5d82fd8fa4797a93e054655c61dec%7C1%7C1%7C637098991070436893&sdata=okSPAqVHj9KBxPtViQdnffsfhlMF4t0%2F87PXXY78fA0%3D&reserved=0>


--

Best regards,
Kathleen

v2.23.0 | Report a Bug | By Email