Re: [Rats] using symmetric keys in an Endorsement/Verifier flow

[Russ Housley <[e-mail]>]

Maybe something should be said in the Security Considerations that the design in this document does not cover Endorsements should have confidentially protection such as ones that employ symmetric keys.

Russ


> On Feb 8, 2021, at 3:35 PM, Laurence Lundblade <[e-mail]> wrote:
> 
> So the proposal is to say nothing about when/if Endorsements should have confidentially protection in the architecture document, right?  This leaves it up to the designer/implementor/user of symmetric verification keys to figure this out on their own. I’m fine with this.
> 
> (Note that I was only suggesting a security considerations statement like “if endorsements carry symmetric keys for verification the endorsements should have confidentially protection”.  Given that the UCCS draft has paragraphs about integrity and confidentially, then a statement like this seems appropriate).
> 
> I'm happy it is closed.
> 
> LL
> 
> 
>> On Feb 8, 2021, at 10:32 AM, Smith, Ned <[e-mail]> wrote:
>> 
>> +1 "Endorsements with symmetric verification keys should write another document"
>> 
>> This is a reason to re-charter. It would allow drafts that address the corner of the diagram that was ruled out of scope during chartering discussion to be written and adopted as a way to clarify content that isn't appropriate to include in an architecture draft.
>> 
>> -Ned
>> 
>> On 2/5/21, 1:40 PM, "RATS on behalf of Michael Richardson" <[e-mail] on behalf of [e-mail]> wrote:
>> 
>> 
>>   In https://github.com/ietf-rats-wg/architecture/issues/162 it was argued that
>>   we needed to be clear that:
>> 
>>     "Endorsements should have confidentiality protection when carrying
>>     symmetric verification keys. "
>> 
>>   but, many of the Architecture Design Team didn't feel that the architecture
>>   was intended to provide any kind of specification on Endorsements.
>>   Within the dataflow diagram:
>>     https://www.ietf.org/archive/id/draft-ietf-rats-architecture-09.html#dataflow
>>     (attached below, for those who use a fixed-width font)
>>   That only the "Evidence" and "Attestation Results", which are between
>>   solid-lined entities was really in scope.  That the rest was for future
>>   documents.
>> 
>>   We felt that this requirement went into the Design Requirements which the
>>   IETF usually tries to stay out of, sticking to Functional Requirements.
>>   Further, we felt that the Functional Requirements in the RATS Architecture
>>   should not even cover Endorsements.
>>   At least, not in this edition of the document.
>> 
>>   The recommendation is that those who need to do Endorsements with symmetric
>>   verifification keys should write another document in which this topic would
>>   get adequately dealt with.
>> 
>> 
>> 
>>     ************   *************    ************    *****************
>>     * Endorser *   * Reference *    * Verifier *    * Relying Party *
>>     ************   * Value     *    *  Owner   *    *  Owner        *
>>        |           * Provider  *    ************    *****************
>>        |           *************          |                 |
>>        |                  |               |                 |
>>        |Endorsements      |Reference      |Appraisal        |Appraisal
>>        |                  |Values         |Policy           |Policy for
>>        |                  |               |for              |Attestation
>>        .-----------.      |               |Evidence         |Results
>>                    |      |               |                 |
>>                    |      |               |                 |
>>                    v      v               v                 |
>>                  .---------------------------.              |
>>           .----->|          Verifier         |------.       |
>>           |      '---------------------------'      |       |
>>           |                                         |       |
>>           |                              Attestation|       |
>>           |                              Results    |       |
>>           | Evidence                                |       |
>>           |                                         |       |
>>           |                                         v       v
>>     .----------.                                .---------------.
>>     | Attester |                                | Relying Party |
>>     '----------'                                '---------------'
>> 
>> 
>> _______________________________________________
>> RATS mailing list
>> [e-mail]
>> https://www.ietf.org/mailman/listinfo/rats
> 
> _______________________________________________
> RATS mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/rats