Re: [Rats] CoTS and CoRIM

Yogesh Deshpande <Yogesh.Deshpande@arm.com> Thu, 14 December 2023 11:31 UTC

Return-Path: <Yogesh.Deshpande@arm.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8BEEC14F60F for <rats@ietfa.amsl.com>; Thu, 14 Dec 2023 03:31:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.904
X-Spam-Level:
X-Spam-Status: No, score=-1.904 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b="5CUhlTpa"; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b="5CUhlTpa"
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x2xX37n_64-D for <rats@ietfa.amsl.com>; Thu, 14 Dec 2023 03:31:11 -0800 (PST)
Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2070.outbound.protection.outlook.com [40.107.22.70]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D9A4C14F5FB for <rats@ietf.org>; Thu, 14 Dec 2023 03:31:10 -0800 (PST)
ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass; b=bO/S6oh/3AWh8+td07giC3E+MAvgTGKioWFbx+yzFOcArj2mPoN7D4cKUS195GRnjrBCpI0smO93ndxfko63LoeXTBkQQZ0s5mJfvCChNmC6nT8e6o7bo3UBuuHJxqpeOZIG6reW0aNU2aPM+0rD/UBpPFY5N5sYDXgj1TVmiQeHEYIhkIcdqQ5NnZD54bt7SYgRlsK2HPHW/U1huTLuV5duM/NCu0g9gMCXhtsLDlM/s6KJuucz5EM/dcwKJ3ltAv1qE5w0OENbHTDy0Q5paz13Ka/cNtbkhotCPfSa2e+/jrGNZAl0+EbUhFF5WsjJ+x0Bmknj4jS4GJ5+jH5SxQ==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=MGJxuFJ5yxQUZU/geEVzAHGamgYwwc+iG2iODWyObzM=; b=cZLwg86tC0dC7QUympzftnyLRBXgwiUR3DrpHuTr33Bd6JActVQBbmkbnQZ9ps1P2XukF+3s66mAiGEvrbbCbEP9Plb8NCtaKXLYO0uRh6cj3Yz7nmnvxjwXsVEy6m3SSZBUf7pYNndnlGV+8li3EqG4+l6vcu24gm7n6bha5BVtOrfUv+ZS0cK1231dgvPoSX84z1I2JTZTwR8S8kmTVwATKfZb0dllYrQLu2c8uwW3Bg3rFRdCxCdxdmkb0wHt8f5n87JibFdAVbQrPupK/sh8e5VmWmLGhujuYa5JOF/Xc6NzwzNP33rGDfMkqStjm66IeU+CBnPyJVosWntCzg==
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is 63.35.35.123) smtp.rcpttodomain=ietf.org smtp.mailfrom=arm.com; dmarc=pass (p=none sp=none pct=100) action=none header.from=arm.com; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com; arc=pass (0 oda=1 ltdi=1 spf=[1,1,smtp.mailfrom=arm.com] dkim=[1,1,header.d=arm.com] dmarc=[1,1,header.from=arm.com])
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MGJxuFJ5yxQUZU/geEVzAHGamgYwwc+iG2iODWyObzM=; b=5CUhlTpaYvSbaDr1waH3xp7KJH2fMdqCqkwVpA6o93+wTY2EQXmVJC7g1qeV1xfmF85y68iEf+1girmQbC0vvRpYDZ0SvPMlZhKepAzToQPxDUYaws1XMmB51neptwDP4OK1dJfnHuUfS+XfQBR6w+5Ru3gWrRb7bOGsz2GldKs=
Received: from AM0PR06CA0103.eurprd06.prod.outlook.com (2603:10a6:208:fa::44) by DU5PR08MB10852.eurprd08.prod.outlook.com (2603:10a6:10:522::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28; Thu, 14 Dec 2023 11:31:07 +0000
Received: from AM3PEPF0000A78D.eurprd04.prod.outlook.com (2603:10a6:208:fa:cafe::87) by AM0PR06CA0103.outlook.office365.com (2603:10a6:208:fa::44) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28 via Frontend Transport; Thu, 14 Dec 2023 11:31:07 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;dmarc=pass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; pr=C
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM3PEPF0000A78D.mail.protection.outlook.com (10.167.16.116) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.26 via Frontend Transport; Thu, 14 Dec 2023 11:31:07 +0000
Received: ("Tessian outbound 7c4ecdadb9e7:v228"); Thu, 14 Dec 2023 11:31:07 +0000
X-CheckRecipientChecked: true
X-CR-MTA-CID: 42706e95208f355d
X-CR-MTA-TID: 64aa7808
Received: from ee8ee05f4dd1.2 by 64aa7808-outbound-1.mta.getcheckrecipient.com id DD80D897-ABEF-415D-A8D9-698AD0B2AB56.1; Thu, 14 Dec 2023 11:30:56 +0000
Received: from EUR05-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id ee8ee05f4dd1.2 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 14 Dec 2023 11:30:56 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Foip1REos6UiergDrP9/x6i744mkGFdPjj4X1387ogqyKzytcvKUT/L7zQbUXqFSNsfxT10Y8R746hiyjYoOxhFm9gEm7oz2L8HYsibQMidyr1tEIml70pPTyHIdrEgcxvA2AE0hd+F870OU8dSbWwFgs8vAfXWasL/qz4mU9kTM3IyDCLJCdb5iwh6+yI4zjLIuHODo8e+RlcEw2dDFwHiB2+Ax5IudCG0CBZdFsV1V+0eduiztcpk9eGkSwv7IHEx3qBThliSnu2/dZk1yOsZEqi1jtRheRHPW3CgdsYHCOkXRgAJtUfKNeV+qO7EVxM0q9Qtzv9LsU/wYRNrlTQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=MGJxuFJ5yxQUZU/geEVzAHGamgYwwc+iG2iODWyObzM=; b=ZiL7FX4r91UGkWHBgGL332c42CSi0eRgWEvAU1fpDgw+VjaFRxsguPIyCeEnNt+oDRkyozuvCTYdtzXtfoJJoB2VDi27VcMfRyQZEhxfc57bBDCFNfLHCg8RkJPbytPTf3dUlkgYqmtKz24xdpQMo17U5kmveORRsrS2KYs7SbMIzO8bhQcdAh/1LjCQRdmJ2AS3ndEjxJVlZCdA3VHQNCn1brAAC53ePfIG0rVsTQDXZoHt7TmCB3cSFbLcA0QNDb8urA9XsOTNyQG3ZtmJ2k2mVci2wLQigNrNYjOLn+2Z7f+YqiZCHQbK7+tfDM2/eBrHfEEgTZ2CSwL6WzeGcA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=MGJxuFJ5yxQUZU/geEVzAHGamgYwwc+iG2iODWyObzM=; b=5CUhlTpaYvSbaDr1waH3xp7KJH2fMdqCqkwVpA6o93+wTY2EQXmVJC7g1qeV1xfmF85y68iEf+1girmQbC0vvRpYDZ0SvPMlZhKepAzToQPxDUYaws1XMmB51neptwDP4OK1dJfnHuUfS+XfQBR6w+5Ru3gWrRb7bOGsz2GldKs=
Received: from AM6PR08MB4325.eurprd08.prod.outlook.com (2603:10a6:20b:71::14) by DBAPR08MB5589.eurprd08.prod.outlook.com (2603:10a6:10:1a2::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7091.28; Thu, 14 Dec 2023 11:30:53 +0000
Received: from AM6PR08MB4325.eurprd08.prod.outlook.com ([fe80::4788:ed59:38cd:bbbe]) by AM6PR08MB4325.eurprd08.prod.outlook.com ([fe80::4788:ed59:38cd:bbbe%6]) with mapi id 15.20.7091.028; Thu, 14 Dec 2023 11:30:53 +0000
From: Yogesh Deshpande <Yogesh.Deshpande@arm.com>
To: "muhammad_usama.sardar" <muhammad_usama.sardar@tu-dresden.de>, "rats@ietf.org" <rats@ietf.org>
Thread-Topic: [Rats] CoTS and CoRIM
Thread-Index: AdouAROwOiptuSqcS027iEQuheLmzQAZVk+AAAZF7kA=
Date: Thu, 14 Dec 2023 11:30:53 +0000
Message-ID: <AM6PR08MB43257B9CB8ECD1BF6768D2138E8CA@AM6PR08MB4325.eurprd08.prod.outlook.com>
References: <005701da2e02$6acec900$406c5b00$@gmx.net> <84e6047b-b87b-4053-8e5a-fb2c8347defc@tu-dresden.de>
In-Reply-To: <84e6047b-b87b-4053-8e5a-fb2c8347defc@tu-dresden.de>
Accept-Language: en-GB, en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ts-tracking-id: B3C01DB3026E724BBFC2632A029AB434.0
Authentication-Results-Original: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com;
x-ms-traffictypediagnostic: AM6PR08MB4325:EE_|DBAPR08MB5589:EE_|AM3PEPF0000A78D:EE_|DU5PR08MB10852:EE_
X-MS-Office365-Filtering-Correlation-Id: 25378dbb-adc1-4dd7-e16d-08dbfc982a22
x-ld-processed: f34e5979-57d9-4aaa-ad4d-b122a662184d,ExtAddr
x-checkrecipientrouted: true
nodisclaimer: true
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: 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
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AM6PR08MB4325.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230031)(136003)(396003)(39850400004)(346002)(366004)(376002)(230922051799003)(64100799003)(451199024)(1800799012)(186009)(2906002)(33656002)(8936002)(86362001)(9326002)(8676002)(52536014)(316002)(5660300002)(38070700009)(41300700001)(966005)(478600001)(9686003)(71200400001)(55016003)(7696005)(6506007)(83380400001)(53546011)(166002)(110136005)(38100700002)(122000001)(76116006)(66446008)(66476007)(66946007)(66556008)(64756008); DIR:OUT; SFP:1101;
Content-Type: multipart/alternative; boundary="_000_AM6PR08MB43257B9CB8ECD1BF6768D2138E8CAAM6PR08MB4325eurp_"
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBAPR08MB5589
Original-Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM3PEPF0000A78D.eurprd04.prod.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs: 8e4dc9a8-08a5-49b9-9564-08dbfc98219b
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(13230031)(4636009)(136003)(346002)(376002)(39860400002)(396003)(230922051799003)(451199024)(64100799003)(186009)(1800799012)(82310400011)(36840700001)(40470700004)(46966006)(86362001)(52536014)(8676002)(8936002)(2906002)(9326002)(5660300002)(33656002)(41300700001)(33964004)(9686003)(7696005)(6506007)(53546011)(26005)(336012)(40480700001)(966005)(478600001)(83380400001)(47076005)(55016003)(36860700001)(40460700003)(70586007)(70206006)(110136005)(81166007)(316002)(82740400003)(166002)(356005); DIR:OUT; SFP:1101;
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Dec 2023 11:31:07.4433 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 25378dbb-adc1-4dd7-e16d-08dbfc982a22
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-AuthSource: AM3PEPF0000A78D.eurprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU5PR08MB10852
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/UvojXhQ_6-Rj09i_ukyvKclOHks>
Subject: Re: [Rats] CoTS and CoRIM
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Remote ATtestation procedureS <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 14 Dec 2023 11:31:13 -0000

Hi Hannes,

To your question:

I am wondering why the two documents <draft-ietf-rats-corim> and <draft-ietf-rats-concise-ta-stores> aren’t merged.

The work on Cots started at different point in time (by different authors) and hence the CoRIM base document does refer Cots but is not fully integrated.

We will discuss the possibility and implications of such in our regular CoRIM meetings.

Regarding Trust Anchors as per RATS document (RFC 9334) to the best of my knowledge it comes under the heading of Endorsements.
https://datatracker.ietf.org/doc/html/rfc9334#name-endorsements

RATS treats Trust Anchors as a type of Endorsements.

Hope this information is helpful.

Regards,
Yogesh

From: RATS <rats-bounces@ietf.org> On Behalf Of Muhammad Usama Sardar
Sent: Thursday, December 14, 2023 8:21 AM
To: rats@ietf.org
Subject: Re: [Rats] CoTS and CoRIM


Hi Hannes,
On 13.12.23 21:24, hannes.tschofenig=40gmx.net@dmarc.ietf.org<mailto:hannes.tschofenig=40gmx.net@dmarc.ietf.org> wrote:
I am wondering why the two documents <draft-ietf-rats-corim> and <draft-ietf-rats-concise-ta-stores> aren’t merged. Reading through the RATS drafts I often get the impression that trust anchors have somehow been forgotten and were added later, as an afterthought. The RATS architecture RFC does not list trust anchors as an item in Figure 1. In some other document trust anchors are then portrait as belonging to reference values – somehow. That does not feel right to me either.

I think it is completely wrong to consider trust anchors as Reference Values. Can you name the document which presents this view?

Ciao
Hannes

Cheers,

Usama

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.