Re: [Rats] About current RATS drafts

[Laurence Lundblade <[e-mail]>]

Hello,

A frame up that works for me is to think about 1) the claims, the attestation format and its details and 2) the transport / conveyance and its details.

In the TPM/TCG world the claims and attestation format is locked down by what TPM chips do today. It is a set of registers that hold hash values used to measure software.  In the EAT world, which typically implements on fully functional CPUs, the claims and attestation format is not at all locked down and our work is to define it (the eat draft).

A lot of the network and router folks have been putting TPMs into their routers and now need a way to get the TPM output off the router to the network management center. This world runs off of Yang protocols. The main interest there is a very specific Yang-based way to move TPM output. This is the yang, tuda and pubsub drafts.

The EAT use cases are more about TEE’s and lining up with end-user-application-oriented uses like FIDO and the Android key store. They make use of all the existing transports used by application protocol (mainly HTTP) so there’s no worry about defining transport.

I think a few of us see EAT as the more general and flexible attestation format that will eventually replace the TPM format. Because EAT can use CBOR and COSE which are carefully designed for constrained devices there is some hope that it can go into TPM-like HW.

The architecture draft is trying to tie the two together in a sort of unified field theory. Seems possible, but hard to me.

LL





> On Nov 1, 2019, at 5:08 AM, H Y <[e-mail]> wrote:
> 
> Hi all,
> 
> I'm Yuhei Hayashi, network security researcher of NTT in Japan. I
> learned about the existence of RATS WG at IETF 105.
> 
> I'm interested in the work of RATS WG and I'm trying to understand it.
> So, I'm firstly trying to understand which drafts contain the
> standards listed in the charter.
> 
> I will attach the result of organizing it from my own point of view.
> I'm glad if you confirm that my understanding is correct, if possible.
> 
> Thanks,
> Yuhei
> -- 
> ----------------------------------
> Yuuhei HAYASHI
> [e-mail]
> ----------------------------------
> <RATS_drafts.pdf>_______________________________________________
> RATS mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/rats