IETF Logo Mail Archive

Re: [Rats] EAT Profiles

Hannes Tschofenig <Hannes.Tschofenig@arm.com> Mon, 19 September 2022 14:01 UTC

Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59D78C1524C7 for <rats@ietfa.amsl.com>; Mon, 19 Sep 2022 07:01:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.909
X-Spam-Level:
X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=y9NtNexO; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=y9NtNexO
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VvEPTfoJi4cA for <rats@ietfa.amsl.com>; Mon, 19 Sep 2022 07:01:18 -0700 (PDT)
Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-eopbgr130071.outbound.protection.outlook.com [40.107.13.71]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CFFC6C14EB1C for <rats@ietf.org>; Mon, 19 Sep 2022 06:59:46 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass; b=U2DLIlQwtWlZ9ziEUrmiXe4sCgQ04rsvDrNfrX7UVJCAkAuHJLbltikOGvOS+DJGksxEDP1OOvNZaDqelLaaK1ydG0VP9lcfNXRwGCkkkx/t78UEW1CT+okiMR6gtKc6l6Z9MzHT+EUaBv0Syxgu8mtTTuq/g8RjOS9s4TpToM0wYTv5vShJjkCmfdofYf6LUCfLsxz09noV2mEyE0sCkPUUWo0/Pw+UWoZfAy+TqyxK5uIJSWQIFxKgAPVcWczb5boAafiZ612D5gHiklTfPognCniqUmgp6RJbrKFzDjwQ1SUYunxSggMf4Qit7mx0fPRZlOdbK7w3wto4jyizTw==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=sI5PggoP8kNVsoGjAHR1kxK9GseWSUkYsrc+ZJeMjP0=; b=ZgHZT8Hye7vtlBPBDjCDBwEqmX5wpWzyHj7d/cobBQna206MO6Jkl84Ni1icMD6iTH64qhOs0W88Apo2S9ko5SmSrLv1v41VAA71iZP9ClRXpdn51PsKPbOI66w0jCSXC+zEksQmotXJjjAtL5b0X1TAg8Kcs3PqJxLmOMEPOHt6L3lwFrePMgHYcYQ5rR4jFQR3pdwP3ORUczQvF0M9jega6l14u3NWHj020kCEnR+dKw512AX+zdjMLmhDFGs36/dOiicCybg3iGRE7pq0OVU0nVDGD7xWKJ8c1GQQIXckwgkGEGjTka7vuok8y5AP12jNQiuE7zFRWe8D6WEpKA==
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is 63.35.35.123) smtp.rcpttodomain=ietf.org smtp.mailfrom=arm.com; dmarc=pass (p=none sp=none pct=100) action=none header.from=arm.com; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com; arc=pass (0 oda=1 ltdi=1 spf=[1,1,smtp.mailfrom=arm.com] dkim=[1,1,header.d=arm.com] dmarc=[1,1,header.from=arm.com])
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=sI5PggoP8kNVsoGjAHR1kxK9GseWSUkYsrc+ZJeMjP0=; b=y9NtNexOC+qtwcIiW3Ff0zDaCD5j91T2WbJZDM/u25l6DkXRqvCzBfeR+yMb5DiXDqaG8ePzXxPQHvCz2tc/g2N2pl2Wjm1fMMoJRxFJ1VZrYKAeven+3O3tdKOJniiMPsWHYpKLMj5Kb1jtGEFBLo9fEeNp/lZyg+CpuxdnbDY=
Received: from AM5PR0601CA0058.eurprd06.prod.outlook.com (2603:10a6:206::23) by AM9PR08MB6033.eurprd08.prod.outlook.com (2603:10a6:20b:286::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5632.21; Mon, 19 Sep 2022 13:59:42 +0000
Received: from AM7EUR03FT027.eop-EUR03.prod.protection.outlook.com (2603:10a6:206:0:cafe::a2) by AM5PR0601CA0058.outlook.office365.com (2603:10a6:206::23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5632.21 via Frontend Transport; Mon, 19 Sep 2022 13:59:42 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;dmarc=pass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; pr=C
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM7EUR03FT027.mail.protection.outlook.com (100.127.140.124) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5632.12 via Frontend Transport; Mon, 19 Sep 2022 13:59:42 +0000
Received: ("Tessian outbound e2c58cd9a6bb:v124"); Mon, 19 Sep 2022 13:59:42 +0000
X-CheckRecipientChecked: true
X-CR-MTA-CID: bf70e1fa1dad5675
X-CR-MTA-TID: 64aa7808
Received: from 4a53f9a9ad93.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id AE94D536-990F-47F2-A46E-6A70921684EE.1; Mon, 19 Sep 2022 13:59:35 +0000
Received: from EUR04-HE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 4a53f9a9ad93.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Mon, 19 Sep 2022 13:59:35 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QSB56sCh7FqFwu2cXTj6XFADFuElBAVhdEEvGatLu9K1ZYfZZT3UJEXeo+9753E3Pv5pFVMUZ0OxD9mhqLo2VF+PYTRVAIn4XQkFWGzOfhnQvl4s81oSOUl+Y8LMV4wsdvuSePlF+hw10X/obatdZ1D2LuPB/Xm7slbJ9ed+OtdQCy9qWcKvaHiEP8RDpjgWf0NUxEppVE2rifl4LdzXtZedj7Mf8nS5VHvxC27zh+jZ34jYfcf4x5eLWhBE5wr4LULR3TH7xs05gdtd0sWX2IyBpkOCbCaQ8LKye3px4m924unW9k0woORe1uFB+IQJ/bsgfaFaml4Ee/IMcrFJjA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=sI5PggoP8kNVsoGjAHR1kxK9GseWSUkYsrc+ZJeMjP0=; b=BDOpRCnCBY7nHD9Eu7ySif7RhZ+QlQ75tE1bAPBp2aspdcq4K0DgicK+MLWfBiz7CBzZDXy+lwbycy5Xxs+NaHhe/buqTVmwLkmGsGVO76v7BIRM667Sybmg1QxnqqiENaQYGdeGazlEuH7JSYTetAfxMizkvu5j3TIsp5lEvuGa/A3kHLdSmHrZX+dY3hF04S7eRsEyYfXDgmT9e9rckC98KCrVEZ74gqfIO++GPm2lGDImgDnvRQSpgmWWrkEYEPYMSCuZsWvFNFuNGDQgOBDLba8FLT+jZeZw7/pbRFYYPpKx/Irs8k8lE7zPkPa64+KdLDh05ef/ANruhXG5Og==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=sI5PggoP8kNVsoGjAHR1kxK9GseWSUkYsrc+ZJeMjP0=; b=y9NtNexOC+qtwcIiW3Ff0zDaCD5j91T2WbJZDM/u25l6DkXRqvCzBfeR+yMb5DiXDqaG8ePzXxPQHvCz2tc/g2N2pl2Wjm1fMMoJRxFJ1VZrYKAeven+3O3tdKOJniiMPsWHYpKLMj5Kb1jtGEFBLo9fEeNp/lZyg+CpuxdnbDY=
Received: from AS8PR08MB5911.eurprd08.prod.outlook.com (2603:10a6:20b:292::17) by DU0PR08MB8231.eurprd08.prod.outlook.com (2603:10a6:10:3b0::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5612.22; Mon, 19 Sep 2022 13:59:32 +0000
Received: from AS8PR08MB5911.eurprd08.prod.outlook.com ([fe80::2032:b95:7890:303b]) by AS8PR08MB5911.eurprd08.prod.outlook.com ([fe80::2032:b95:7890:303b%8]) with mapi id 15.20.5632.019; Mon, 19 Sep 2022 13:59:31 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: Michael Richardson <mcr+ietf@sandelman.ca>, "rats@ietf.org" <rats@ietf.org>
Thread-Topic: [Rats] EAT Profiles
Thread-Index: AQHYyEuC1ToiOxtxD0CrmJtWlazaGq3iMc4AgAAMGwCABF9ZQIAAJruAgAAJGOA=
Date: Mon, 19 Sep 2022 13:59:31 +0000
Message-ID: <AS8PR08MB59113255A745996F12976039FA4D9@AS8PR08MB5911.eurprd08.prod.outlook.com>
References: <71934.1663019954@dooku> <DBBPR08MB5915AC23726BF997EB9E44C4FA489@DBBPR08MB5915.eurprd08.prod.outlook.com> <19805.1663344806@dooku> <AS8PR08MB5911DB2FE9608541698983B0FA4D9@AS8PR08MB5911.eurprd08.prod.outlook.com> <636099.1663593501@dooku>
In-Reply-To: <636099.1663593501@dooku>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ts-tracking-id: 95D282128386D24988C797C4891BE945.0
Authentication-Results-Original: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com;
x-ms-traffictypediagnostic: AS8PR08MB5911:EE_|DU0PR08MB8231:EE_|AM7EUR03FT027:EE_|AM9PR08MB6033:EE_
X-MS-Office365-Filtering-Correlation-Id: 106d05f5-8a25-4eba-9f32-08da9a47339e
x-checkrecipientrouted: true
nodisclaimer: true
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: AVZuTqCcjz3ItAIXMPt36f8FipaDdukRFt74sTq1ZsltgZ1xomNbgQv2orEpsS4eXSJIMN/pwoPMbVj0ai0ileBP1ztIh711Ogs/TTwpgcii0J9gC8Ys0RN2855jNscQ408VsC8LknUdA2cQ3YeorIIbMWFawbgToAi/4gpGFRPxOGu3vgTlAxOpC2J72dpW/G/kCetb4BCIvbQsy4TU2WDvY8lXRnf+OnVn91q/LA2RcEH1lo1TgnQC5e6aIKZPpHKcWxKV0dw1MzoaxP+zHWL9b2zAP+6qs5V++4QVc02wa+o/u4xK8iEIRBU31fRj+dAbJA9Nxzum4z+2SrBBJCUjWfrVJ9yDpLWtHtLf3Rq5dX79TUBFJu27yUjpOjIGDA4Ol6GGE40GjiJHD3ivUmB7rq65ST6b7JYVsfGluMivSrBXpXlj6pQ1L3AkAN8zJSewLQKb5KRzgmuFvB0IrzN9/HxITTKv9yIkz9vPFzcuxS8SzD3kqPUXvwU6vCffnnxyyEemzQiDaZsT7aU3Xjm3oo06OoTjxKa0hDJt9nVxPXGfSVkKaf4m47wA4PP5YJM8JHMkuEkKVAiHP2K8tlAJ0JlxfDzb0x4XjtEwZ5HvFEIjkYofPqUJZhzkJgml8v8zTHEVahqofs1JC+Bo98Qvy6PM32B2nMOZ3P5Iaf2fDZDLegM6U+2MGsEw1BuO/8AdU7DnsPvAq9gLclmWwtjeDgOK9K1LTkc0NyUp0q5OWCqlGBTMM6VJ9CjWp17gySuH09cHVXGuxU5S7xJIWA==
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:AS8PR08MB5911.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230022)(4636009)(376002)(396003)(346002)(136003)(366004)(39860400002)(451199015)(64756008)(38100700002)(110136005)(478600001)(8676002)(66446008)(316002)(83380400001)(71200400001)(122000001)(6506007)(26005)(55016003)(38070700005)(2906002)(66556008)(52536014)(5660300002)(33656002)(66946007)(41300700001)(9686003)(76116006)(186003)(66476007)(8936002)(7696005)(86362001)(66899012); DIR:OUT; SFP:1101;
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU0PR08MB8231
Original-Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM7EUR03FT027.eop-EUR03.prod.protection.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs: cea783dc-89df-4bd2-746e-08da9a472d2e
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(13230022)(4636009)(376002)(136003)(39860400002)(396003)(346002)(451199015)(36840700001)(46966006)(70206006)(70586007)(5660300002)(8676002)(110136005)(86362001)(8936002)(316002)(33656002)(47076005)(82740400003)(36860700001)(83380400001)(52536014)(7696005)(41300700001)(6506007)(81166007)(478600001)(336012)(186003)(9686003)(356005)(26005)(66899012)(55016003)(40480700001)(82310400005)(2906002); DIR:OUT; SFP:1101;
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Sep 2022 13:59:42.5110 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 106d05f5-8a25-4eba-9f32-08da9a47339e
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-AuthSource: AM7EUR03FT027.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9PR08MB6033
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/avk-0niOsm62b0iIHjeFwpJnis4>
Subject: Re: [Rats] EAT Profiles
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Remote ATtestation procedureS <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 19 Sep 2022 14:01:20 -0000

Hi Michael,

For Trusted Firmware M, which comes with an attestation service, we have re-used a CBOR library and re-used a COSE library. That's a good start.

For the AISS attestation token profile we have re-used the same CBOR, and COSE library but then also re-used the ctoken library from Laurence. We could have re-used his ctoken library for the PSA token implementation but it did not exist at the time when we worked on the attestation service for TF-M.

I would argue that this is a lot of re-use.

Ciao
Hannes

Hannes Tschofenig <Hannes.Tschofenig@arm.com> wrote:
    > [Hannes] We have created a library that produced an EAT based on our
    > profile and it was not too complex.

You missed the point.
You create *A* library that deals with *your* profile.

So, we need N libraries for N-profiles, and since the EAT document has quite a large number of possible combinations, each use of EAT will wind up with its own library.  There will be no reuse, which was the point of doing this work.




IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

v2.23.0 | Report a Bug | By Email