Re: [Rats] About current RATS drafts

[Laurence Lundblade <[e-mail]>]

> On Nov 1, 2019, at 8:38 AM, Henk Birkholz <[e-mail]> wrote:
> 
> I do not fully follow you here, I am afraid. Which Claims can be added by the Verifer to what at which time? :) I assume you mean that the Attestation Result can include implicit assertions based on the attestation Provenance - expressed as Claims. I am not really sure, what type of claims you are implying, though.

Yes, more details are a good idea. :-) With an example of a chip made by the fictitious “Acme Chip Company”. 

Acme makes chip model X with HW and boot ROM that:
- have an attestation key programmed at the Acme factory
- prevent use of the attestation key unless
  - booted using authenticated sw
  - all HW debug facilities are turned off

Acme operates the verification service itself. When it receives attestation evidence from chip model X it knows that authenticated boot was used and all the debug modes are turned off because the attestation key would not be accessible if that wasn’t true. There would be no attestation. Further, it knows it is Acme Model X because of the particular attestation key. They only put that key in Model X device, not in Model Y or Z devices.

So, when Acme’s verification service generates an attestation result it can include these even though they were not in the attestation evidence:
debug_disable_claim = disabled
boot_state_claim = true

They are implicit claims in the attestation evidence made explicit in the attestation result.

I expect there are a number of claims that could and should work this way.

LL