Re: [Rats] Call for adoption (after draft rename) for Yang module draft

Laurence Lundblade <lgl@island-resort.com> Mon, 11 November 2019 19:48 UTC

Return-Path: <lgl@island-resort.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F7B8120A43 for <rats@ietfa.amsl.com>; Mon, 11 Nov 2019 11:48:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zH-PuWpwHWut for <rats@ietfa.amsl.com>; Mon, 11 Nov 2019 11:47:59 -0800 (PST)
Received: from p3plsmtpa08-09.prod.phx3.secureserver.net (p3plsmtpa08-09.prod.phx3.secureserver.net [173.201.193.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 29373120A41 for <rats@ietf.org>; Mon, 11 Nov 2019 11:47:59 -0800 (PST)
Received: from [10.141.0.162] ([45.56.150.139]) by :SMTPAUTH: with ESMTPA id UFfKi6tpsOPjRUFfKisocb; Mon, 11 Nov 2019 12:47:58 -0700
From: Laurence Lundblade <lgl@island-resort.com>
Message-Id: <4A83CDF5-D29F-4279-8B03-E9D23299EB53@island-resort.com>
Content-Type: multipart/alternative; boundary="Apple-Mail=_FCCED239-E601-4192-B4AE-0588A187A9C9"
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
Date: Mon, 11 Nov 2019 11:47:58 -0800
In-Reply-To: <ba12a686-1b34-21a3-388c-bbe01c01a408@sandelman.ca>
Cc: rats@ietf.org
To: Michael Richardson <mcr+ietf@sandelman.ca>
References: <8B173958-FC2A-4D1D-A81C-F324AB632CD7@cisco.com> <147F9159-6055-4E55-ABDC-43DFE3498BF1@island-resort.com> <ce5f8206-74dc-36bb-0093-a93045d5c67f@sit.fraunhofer.de> <0A7E3A4F-8534-4E98-BCB7-1454E07699F4@island-resort.com> <C3AE2645-49C8-4313-BCED-02FEB576B614@cisco.com> <1C8A1884-A37D-45E3-8C11-2FC5A083B245@island-resort.com> <ba12a686-1b34-21a3-388c-bbe01c01a408@sandelman.ca>
X-Mailer: Apple Mail (2.3445.104.11)
X-CMAE-Envelope: MS4wfGCmrDU8P+EOTzGMTUAFrkuyOqX7tCPaj0iFccmeiUFOuloXg+y2ho6BqrSKd8HuRUJNNyIGYIae9x6FtGjureMGdtIb0N7iitexNdZULhCFojpXBDt6 NwYiFZ5bSNguGUTfWgbnvwSC9s5XwKtuSoKVI0OiZkuziTXzih7XvssuinU57CtLwdyA8Bpf4OQ3vviMqHzZx0o2wdN6kP3Qc9Q=
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/Ux9idSA_fhNXV5sqDPQoq6sR2Mw>
Subject: Re: [Rats] Call for adoption (after draft rename) for Yang module draft
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Remote Attestation Procedures <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Nov 2019 19:48:07 -0000

On Nov 10, 2019, at 9:20 PM, Michael Richardson <mcr+ietf@sandelman.ca>; wrote:
> 
>> 
>> I think the value add to the larger RATS effort of adding EAT support
>> to this YANG protocol is really high. It a core thing to do that helps
>> bring together the two attestation worlds and make the TPM and EAT
>> work here less like ships in the night.
> 
> Can you explain what it would mean to add EAT support for a YANG module?

The EAT is an opaque chunk of data in YANG. I’m not a YANG expert, but maybe like this:

Server                               Device
GetAttestationTypes —>
                                <- TYPE_TPM, TYPE_CWT /* bit flags */

GetAttestation(TYPE_CWT , nonce) —> 
                                <— CWT Token /* a full signed token */

I assume YANG can carry opaque binary data of moderate size.

The yang module information model would have an element for a nonce and for an opaque EAT. It would not describe any internals of the EAT. The information model for the EAT is separate in the EAT document.

LL