IETF Logo Mail Archive

[Rats] Epochs

Hannes Tschofenig <Hannes.Tschofenig@arm.com> Thu, 29 September 2022 11:07 UTC

Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: rats@ietfa.amsl.com
Delivered-To: rats@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 362F3C14CE44 for <rats@ietfa.amsl.com>; Thu, 29 Sep 2022 04:07:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.909
X-Spam-Level:
X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=VCRgQT4R; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=VCRgQT4R
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q1dYU6T13RGb for <rats@ietfa.amsl.com>; Thu, 29 Sep 2022 04:07:12 -0700 (PDT)
Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-eopbgr80071.outbound.protection.outlook.com [40.107.8.71]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B9866C14CE38 for <rats@ietf.org>; Thu, 29 Sep 2022 04:07:11 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass; b=PCfk4D6ya8iC6gMfBvByetys8kSIo6AS9TnO2GhsuZl59dK8ba1p/Mj/bG58IPuHPbuYdxfenfGEN8bWf/zstlzK44+08+63BIl5ctdib3h3onvVgoqj1TdCyOchLvtZC+bAPKbw+vg0hmciwFFz8FjRZ0EVr88DsrzjCwc4SyG1mdkbgUlZ72GUiM3bMwEmsiC3wbtYsfQsFmuLe5i13IgX6qBYToVSVkbsDdZVoK4ZkNrgZz4JoKP31qkR15IC9fYdFWFJzGSSb7CwEODHVgrZNAUi7WWamb2awSyVmz6rpCKnw/XqKDJ5E4gis3an/xhJX9JN8bjAtjpZCSuBnQ==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Ui0ZsJ4TxONJcl5v8PsqyWT2uVjHttcBD9r62+t7mAU=; b=ju0l5w+K8RcFG+EgiqPaflsi5znwkGMVIYM8sxAIipiSQzIcYJOVTWAi4MRhzm1o9KwMfj5mToum538LirLXeusTqlodP8/S/RlWetwoeKRCyJaC9X9cGL/cfw/ggkMJIK1psDJMMcQt5Hd+YBMh80zQAThPIzOI2/7mb0FDdFvKOKao56IB04pbFjDKkbGN1mQsIioqiTnZ9UcBBMgsBoghltzLXjlHTHldKYHwnpJ132BpS9WYbWw14krZfA9nDaV30UQHAw2NesoNL2H7SqIF8gkwmXJ0dKV76kLn0OzA4phAT4UTJn50SYVC1dv5eB3iqhlW5DD35PipamSB3A==
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is 63.35.35.123) smtp.rcpttodomain=ietf.org smtp.mailfrom=arm.com; dmarc=pass (p=none sp=none pct=100) action=none header.from=arm.com; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com; arc=pass (0 oda=1 ltdi=1 spf=[1,1,smtp.mailfrom=arm.com] dkim=[1,1,header.d=arm.com] dmarc=[1,1,header.from=arm.com])
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ui0ZsJ4TxONJcl5v8PsqyWT2uVjHttcBD9r62+t7mAU=; b=VCRgQT4RAhvwGGXix+yJlTPOsDH7Fd1kgBvfI6sWoo/UvA5ZipWqFOvBtOMYJvRQLR2X3ZnAvZOLEBq9SoFAORCLHHZOFIIwoiOlUxss1mKH7ZIVZHw5rtxyv3fwV/wT1MFDEUOaPAI4wjEHkkVplEMwK9L7YcivrIgolUgVAWY=
Received: from AS9P250CA0024.EURP250.PROD.OUTLOOK.COM (2603:10a6:20b:532::29) by GV2PR08MB8510.eurprd08.prod.outlook.com (2603:10a6:150:b1::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5654.24; Thu, 29 Sep 2022 11:07:06 +0000
Received: from AM7EUR03FT013.eop-EUR03.prod.protection.outlook.com (2603:10a6:20b:532:cafe::27) by AS9P250CA0024.outlook.office365.com (2603:10a6:20b:532::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5676.20 via Frontend Transport; Thu, 29 Sep 2022 11:07:06 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;dmarc=pass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; pr=C
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM7EUR03FT013.mail.protection.outlook.com (100.127.140.191) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5676.17 via Frontend Transport; Thu, 29 Sep 2022 11:07:06 +0000
Received: ("Tessian outbound ce981123c49d:v128"); Thu, 29 Sep 2022 11:07:06 +0000
X-CheckRecipientChecked: true
X-CR-MTA-CID: d03f66889bb9ff00
X-CR-MTA-TID: 64aa7808
Received: from 1129c6651550.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 3F15F0CC-0F93-4D20-A494-86F2D1C52BC6.1; Thu, 29 Sep 2022 11:06:58 +0000
Received: from EUR04-DB3-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 1129c6651550.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 29 Sep 2022 11:06:58 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FG3eui+qOGylqZeG3WQDq/4UxNL5eOKnEWQXm3c5ilKgLtWJaAAJugR+ssdhyrjQce5wv9oL7igmHlgO431yGutqUgIv7tkXkObRYmkfT8A/6DdM0vW4ftNNtazXpcp2XVvq8Vm9EInEHmktstLXNuf6YvCQyLaPmIri6R0ZH0BOGIBbcxABcoVecmE+5VMSHkLGSjLTtUEzyk0bJKq7hAqkUZtKl5M9ny1d4oQTZirOI9flc46fKXdthtZE9L6ftNm9nWt2mii8Pm1hj5HJQT5jtpoMQq3GPwNluSyptrUO8Tg1wTnm+L+6X0vvogugVihT3cCwmGW+0Spoii45dg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Ui0ZsJ4TxONJcl5v8PsqyWT2uVjHttcBD9r62+t7mAU=; b=Haih0SEzhPYMpu77xRjyRqS8dXM14BEpb24g/x2YHLfh17Eraaq7Gbr4itb1/bDIe7nQ6acTkRlcmmwQ4apDofYAD2Any5VeBZyZNt4qtEvijo15Pu8MgpAmgdMBueW6Upy06WbTznfYy38kTAPKb2nL+Rcye6PtzwVgw56oHtj/afvRdkIPe6jPrShtjFmeEHS0tLsSq7VUmxywR/2UR8G8bglTq4KxNZqIdo9JcjaWW4QBVIns2dTUPG+Qq7sIBeRqTigEOZ+m+DuM5KHD7ekegaNppISDqZaxdNuw+mmmNpRnlVJJT9jFQH0d4UZP2Qv5yTI3rskpbD/7yEuysw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ui0ZsJ4TxONJcl5v8PsqyWT2uVjHttcBD9r62+t7mAU=; b=VCRgQT4RAhvwGGXix+yJlTPOsDH7Fd1kgBvfI6sWoo/UvA5ZipWqFOvBtOMYJvRQLR2X3ZnAvZOLEBq9SoFAORCLHHZOFIIwoiOlUxss1mKH7ZIVZHw5rtxyv3fwV/wT1MFDEUOaPAI4wjEHkkVplEMwK9L7YcivrIgolUgVAWY=
Received: from DBBPR08MB5915.eurprd08.prod.outlook.com (2603:10a6:10:20d::17) by DBBPR08MB6202.eurprd08.prod.outlook.com (2603:10a6:10:209::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5676.20; Thu, 29 Sep 2022 11:06:55 +0000
Received: from DBBPR08MB5915.eurprd08.prod.outlook.com ([fe80::d48c:61b9:7a6a:88bc]) by DBBPR08MB5915.eurprd08.prod.outlook.com ([fe80::d48c:61b9:7a6a:88bc%9]) with mapi id 15.20.5676.020; Thu, 29 Sep 2022 11:06:55 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: "rats@ietf.org" <rats@ietf.org>
Thread-Topic: Epochs
Thread-Index: AdjT8rHe6NnLOMZtThiMQDnL62doLQ==
Date: Thu, 29 Sep 2022 11:06:54 +0000
Message-ID: <DBBPR08MB5915446C7545943D39EC9607FA579@DBBPR08MB5915.eurprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ts-tracking-id: 1136A7618DB65F4792D503923AAA5B67.0
Authentication-Results-Original: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com;
x-ms-traffictypediagnostic: DBBPR08MB5915:EE_|DBBPR08MB6202:EE_|AM7EUR03FT013:EE_|GV2PR08MB8510:EE_
X-MS-Office365-Filtering-Correlation-Id: a6ecc914-ef63-43ab-da9a-08daa20abeee
x-checkrecipientrouted: true
nodisclaimer: true
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: 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
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DBBPR08MB5915.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230022)(4636009)(39860400002)(346002)(136003)(366004)(376002)(396003)(451199015)(33656002)(122000001)(3480700007)(52536014)(8936002)(38100700002)(38070700005)(186003)(83380400001)(86362001)(7696005)(478600001)(55016003)(8676002)(71200400001)(9686003)(26005)(6506007)(6916009)(316002)(7116003)(41300700001)(5660300002)(76116006)(66946007)(66556008)(66476007)(66446008)(64756008)(2906002); DIR:OUT; SFP:1101;
Content-Type: multipart/alternative; boundary="_000_DBBPR08MB5915446C7545943D39EC9607FA579DBBPR08MB5915eurp_"
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBBPR08MB6202
Original-Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM7EUR03FT013.eop-EUR03.prod.protection.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs: c4c0e900-c42c-448f-bab5-08daa20ab834
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(13230022)(4636009)(346002)(136003)(39860400002)(396003)(376002)(451199015)(40470700004)(46966006)(36840700001)(186003)(336012)(47076005)(40480700001)(9686003)(7696005)(6506007)(55016003)(2906002)(40460700003)(3480700007)(478600001)(7116003)(8676002)(70206006)(70586007)(83380400001)(41300700001)(356005)(36860700001)(26005)(8936002)(86362001)(33656002)(82310400005)(52536014)(316002)(6916009)(81166007)(82740400003)(5660300002); DIR:OUT; SFP:1101;
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Sep 2022 11:07:06.1793 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: a6ecc914-ef63-43ab-da9a-08daa20abeee
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-AuthSource: AM7EUR03FT013.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: GV2PR08MB8510
Archived-At: <https://mailarchive.ietf.org/arch/msg/rats/mi3SNs3SVfkptDB-Gro2jtpyCng>
Subject: [Rats] Epochs
X-BeenThere: rats@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Remote ATtestation procedureS <rats.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/rats>, <mailto:rats-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/rats/>
List-Post: <mailto:rats@ietf.org>
List-Help: <mailto:rats-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/rats>, <mailto:rats-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Sep 2022 11:07:16 -0000

Hi all,

I have two questions regarding the RATS architecture draft and the use of epochs.


  1.  Would you expect that all solutions support all three freshness mechanisms, namely epoch ids, timestamps and nonces?


  1.  Appendix A.3 shows an example of an epoch id but there is no description provided in that section and the description in Section 10.3 is also very generic. So, in the figure below the attester sends the epoch id and the difference between time(EG_a)-time(VG_a). How is the verifier going to use this information? I would have instead assumed that the attester sends time(EG_a)-time(IR_a).

                     .-------------.
      .----------.   | Epoch ID    |   .----------.  .---------------.
      | Attester |   | Distributor |   | Verifier |  | Relying Party |
      '----+-----'   '------+------'   '-----+----'  '-------+-------'
           |                |                |               |
        time(VG_a)          |                |               |
           |                |                |               |
           ~                |                ~               ~
           |                |                |               |
        time(IR_a) <-----I--o--I------> time(IR_v) ---> time(IR_r)
           |                |                |               |
        time(EG_a)          |                |               |
           |                |                |               |
           +---Evidence--------------------->|               |
           |   {I,time(EG_a)-time(VG_a)}     |               |



Ciao
Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

v2.23.0 | Report a Bug | By Email