[Rats] FW: New Version Notification for draft-tschofenig-rats-psa-token-08.txt

[Thomas Fossati <[e-mail]>]

Hi all,

The PSA token is now phrased as a EAT profile, using 3 EAT claims from
the IANA pre-registration list, instead of the private ones we have been
using until -07.

We have tried to diligently tick all the boxes in Section 5 ("Profiles")
of the EAT document -- we also added a discussion about the freshness
model that the PSA token assumes.  (Is this something that could be
added to Section 5?)

This is not a WG item, but reviews from WG members would be greatly
appreciated.  We want to get this right as it is likely to become a
blueprint for other profile documents.

Cheers, thank you!

On 24/03/2021, 10:08, "[e-mail]" <[e-mail]> wrote:
>
> A new version of I-D, draft-tschofenig-rats-psa-token-08.txt has been
> successfully submitted by Thomas Fossati and posted to the IETF
> repository.
>
> Name:         draft-tschofenig-rats-psa-token
> Revision:     08
> Title:                Arm's Platform Security Architecture (PSA) Attestation Token
> Document date:        2021-03-24
> Group:                Individual Submission
> Pages:                22
> URL:            https://www.ietf.org/archive/id/draft-tschofenig-rats-psa-token-08.txt
> Status:         https://datatracker.ietf.org/doc/draft-tschofenig-rats-psa-token/
> Html:           https://www.ietf.org/archive/id/draft-tschofenig-rats-psa-token-08.html
> Htmlized:       https://tools.ietf.org/html/draft-tschofenig-rats-psa-token-08
> Diff:           https://www.ietf.org/rfcdiff?url2=draft-tschofenig-rats-psa-token-08
>
> Abstract:
>    The Platform Security Architecture (PSA) is a family of hardware and
>    firmware security specifications, as well as open-source reference
>    implementations, to help device makers and chip manufacturers build
>    best-practice security into products.  Devices that are PSA compliant
>    are able to produce attestation tokens as described in this memo,
>    which are the basis for a number of different protocols, including
>    secure provisioning and network access control.  This document
>    specifies the PSA attestation token structure and semantics.
>
>    The PSA attestation token is a profiled Entity Attestation Token
>    (EAT).
>
>    This specification describes what claims are used in an attestation
>    token generated by PSA compliant systems, how these claims get
>    serialized to the wire, and how they are cryptographically protected.
>
>
>
> Please note that it may take a couple of minutes from the time of
> submission until the htmlized version and diff are available at
> tools.ietf.org.
>
> The IETF Secretariat

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.