Re: [Rats] [EAT] Rats and EAT

And the use of NEA results is mentioned at least in one of the drafts on remote attestation referred in a previous message. Using NEA’s findings is certainly in our aim.

Be goode,

--
Likely to be brief and not very
elaborate as sent from my mobile
Diego R. Lopez

> On 8 Jul 2018, at 15:39, Hannes Tschofenig <Hannes.Tschofenig@arm.com> wrote:
> 
> Hi Yaron,
>  
> Eliot mentioned NEA on the mailing list. It would be interesting to hear what lessons can be learned from NEA.
>  
> Ciao
> Hannes
>  
> From: EAT [mailto:eat-bounces@ietf.org] On Behalf Of Yaron Sheffer
> Sent: 08 July 2018 06:51
> To: Laurence Lundblade; rats@ietf.org; eat@ietf.org
> Subject: Re: [EAT] [Rats] Rats and EAT
>  
> I'm a bit surprised that nobody's mentioning the work done by the IETF NEA working group. Yes, it's been some time ago, but the people involved were (to the best of my knowledge) involved with the TCG community.
> 
> NEA was about desktop machines and NAC rather than mobile devices, but hey, by now we should be looking for solutions that encompass both technologies!
> 
> See this diagram on how the complex NEA/TNC architecture fits together, including the TPM.
> 
> Thanks,
> 
>     Yaron
> 
>  
> On 06/07/18 22:20, Laurence Lundblade wrote:
> Hey EAT and Rats folks, just became aware of IETF attestation work running in parallel. Seems like EAT is focused more on an independent signed, self-secured data structure with a lot of clams. Rats, seems more TPM and full protocol centric,  but I’m still reading.
>  
> Here’s a list of attestation work that Diego and Henk made:
> https://datatracker.ietf.org/doc/draft-pastor-i2nsf-nsf-remote-attestation/
> https://datatracker.ietf.org/doc/draft-birkholz-i2nsf-tuda/
> https://datatracker.ietf.org/doc/draft-mandyam-eat/
> https://datatracker.ietf.org/doc/draft-mandyam-tokbind-attest/
> https://datatracker.ietf.org/doc/draft-birkholz-reference-ra-interaction-model/
> https://datatracker.ietf.org/doc/draft-birkholz-yang-basic-remote-attestation/
> https://datatracker.ietf.org/doc/draft-birkholz-attestation-terminology/
>  
> A couple of other interesting non-TPM “attestation" technologies:
> - FIDO does attestation of FIDO authenticators
> - Android KeyStore uses the term to mean proving the provenance of a stored key
> - IEEE 802.1AR is kind of an attestation too
>  
> FYI, the IETF attestation events I know of so far are:
>  - I’ll present EAT at HotRFC Sunday around 18:00
>  - Secdispatch discussion of EAT (and Rats?) Monday at 15:30 (At least I hope; no confirmation yet)
>  - EAT BarBof Monday at 18:00
>  - Rats BarBof Thursday after dinner
>  
> I will attend them all :-)
>  
> LL
>  
> IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.   
> _______________________________________________
> EAT mailing list
> EAT@ietf.org
> https://www.ietf.org/mailman/listinfo/eat