IETF Logo Mail Archive

[Seat] Re: [Ufmrg] Re: Re: Comments on formal analysis of relay attacks in intra-handshake attestation (CVE-2026-33697)

rachid bouziane <exelogphp@gmail.com> Wed, 22 July 2026 10:14 UTC

Return-Path: <exelogphp@gmail.com>
X-Original-To: seat@mail2.ietf.org
Delivered-To: seat@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id BF23111C1D386 for <seat@mail2.ietf.org>; Wed, 22 Jul 2026 03:14:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1784715254; bh=GYMQn9VwIxkDsPX3sCMVglIyArdp7l3AYqplXF5GZRU=; h=From:Date:Subject:To; b=F4A1veFvVW5gRBFQtrxGaLvFsdEPJTt2Pla+sqrkdKpNK1gqEEOwF57mRG5hhWjim W8u0VTQV0UWfjFUCIoweAWiRHE6GufQfjPCsk7b50ja1izfNlckxayo8+Wj/OvdsbW EqyUmnJA/SDX4auBKlkWoQpIQd2SQR7EVB/3tVp4=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d3bRT0aJGUox for <seat@mail2.ietf.org>; Wed, 22 Jul 2026 03:14:14 -0700 (PDT)
Received: from mail-yx1-xb135.google.com (mail-yx1-xb135.google.com [IPv6:2607:f8b0:4864:20::b135]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 758EA11C1D37C for <seat@ietf.org>; Wed, 22 Jul 2026 03:14:14 -0700 (PDT)
Received: by mail-yx1-xb135.google.com with SMTP id 956f58d0204a3-66899c7b57bso246361d50.1 for <seat@ietf.org>; Wed, 22 Jul 2026 03:14:14 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1784715254; cv=none; d=google.com; s=arc-20260327; b=Cl2KXs/lNv+fvOzHrHJnckeaqt477eYa1HOVZpuP4y9mHS/bh+O4E9/mhhRTEeT6VV Xrb1+mZj5J0AGNN54lo88TBsL/dFhcLpNef5dBS2BQAQchpN0mUlQib0Q+vaDF0ISLBG bxyIHeROmBT3R8n7Wwf932NsuD89d8q8zJHnkzE8xjiKJMyEVclgXpVu9Ao6Kvxjel9z 5TLjICUQ3mNLOE2VGrKupPHNyYAqgNaPi5TSQwvvmS7CzY/k2KjfWpBWeMfCrGVHD3JA iRtHtUAej+TzL43efRfjeJxPUuoYx5uVAquXdFXNt3NcINNCf5S2Bh4+xZnFu0MRf04I ljvA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=to:subject:message-id:date:from:mime-version:dkim-signature; bh=GYMQn9VwIxkDsPX3sCMVglIyArdp7l3AYqplXF5GZRU=; fh=KjJdMbtW9HbeZcGSCtNe9YX5XczbMIexW2/wH5eNFPI=; b=hpMRFoKKoHQGFWc7uJzClPmMVzC6Gs2gW1mT01bGXudG5F+HJTBkqvVItNnBcvqC0A R9vbr5QBlpxIqr3KP2bzwrIutuHeYav4dhv02XB1mK/NXPXrqXk4vohF9HQvBal43bkd ZzsBVisZ9Wf1KTBpVW9h62ASmdKRti0JY4SwDC2aXkVrJIey0Om+b4RlbgvB1/kRy9pa 20DlepcubAb+4PPzabWJ9mTn0Uh2pN5+aiPZksv/YEW7IttqD47dxAlZ4+5T6ueidEn2 BaR9s/JM8D/zJ5hGq+c+DJUA1XrcPNjdnposM3Ln5EH1u8KeTdk8QfpXIcxIacSXMUH2 8rAg==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1784715254; x=1785320054; darn=ietf.org; h=content-type:to:subject:message-id:date:from:mime-version:from:to :cc:subject:date:message-id:reply-to:content-type; bh=GYMQn9VwIxkDsPX3sCMVglIyArdp7l3AYqplXF5GZRU=; b=MODIA5kMgONs2Pefx6XUFDRHnnOo7TJBWhaiNab8XtH7wKrceti3YaiLCAyArp/7lY oud/Z0pPcPiE1VTy1yt/lfNxrwHdq59js34jmSc0r9NuH7Fe7qwjA6StsR3umwpYcAB/ WcC4GvrunFWRMIr6j7J3pi22fxZWNsY2sNsdi2dRgiRq4U8FP3ruwcyxv0Q6+ExpktdK vfoTKe29Mh+wB7NEpi9vWG/iMCzn3js6UA9XN9Kwa7e6fx+052D3uFvsISGccx35YvXP ApdsYRP9efQ4KSUlv/OpiNQvyqcIy8O4gVvs0cGnNgvH9Tr171rPDCE0+usC10LwBXRr YPxg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1784715254; x=1785320054; h=content-type:to:subject:message-id:date:from:mime-version:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=GYMQn9VwIxkDsPX3sCMVglIyArdp7l3AYqplXF5GZRU=; b=HirSN0wK11BEpkKAYpcEIJjfKsGaks8sqMiSwOVWWZPobEj1ydh9+oYmoiyUqNBXQ5 qq0KJ8EgiTryJZbAEuGCSpBrmBEM+QEgWFx2be9mpB00BPjrSYZlT8XRkNm4ENvu/lR0 y57DdhL/hLYbVr5Fc/EwJjnA533Z5tKFX43L+Ir5MxV2icG4kOk+1s99o6rqMxAJx4c9 Z6hjGkDwgKZ/hxDUW2pL1uqGVkscM/a2QnFGT/iAMVB/e/GSn/k18Wt3pUu2BYiw7432 hXGX9amWkVdWVcXP2Vwa2v6RSlmEPC5Z/rzbAvkKOfJKyq2ptLuVcK2KY7nt7JkFGExZ UXgg==
X-Forwarded-Encrypted: i=1; AHgh+RoZnr0wFqpLrLbuQey/UH2PelT/MtQMpfbXyqRI8475M0TUp19fn9+KAm2S69gT6+0Lfuzg@ietf.org
X-Gm-Message-State: AOJu0YwfXuWf/HDDwXuE4YjnuOmcG0Z2xGKpd1jZRnbp0aj4WvKUT+hR J68QyVe9pNZTVaCCKKRob4JLb0M3SzgxJXeCQnp5Fb7MwSYJsrvmro72lhO0/yGvDWDx3q16j40 6BnP+A/c5tk/U8ytESnE9Ga5nMPJRuW8=
X-Gm-Gg: AR+sD10Lh4wpeAo8GNRIHZ/2mzLcsrbbwoed/IyDi76MOAp+17fbFV20CDB6gM/k0wT 2HNTO8m20kKmrnXnutiN8kRDsNSMpJpjnxqzV3mX54fkWauHXP2HspSebhisPlZvNwYzyPJYZ9+ Ycm2SBQp5ReQAyeHGS1VgFeLSMpCx1Rc6xUw1F0fnA1w7Q4pNKwd2sWRUdUs9Io/n+eiuccY1Ly Q8kSjxt1FR1fhwRdJYHUgyBbqUYA0YguIH0q2ti4+U4IuUu9N3XZkxtrqjWRkr/OMZDjs4/76Ny W5Qog6TinX2xiVQIyx+ooZfp+0/9vVano7ES2ACLRLXBrOKZAPI0YC6KAFHXBcInX1PoVgKTDeU =
X-Received: by 2002:a53:a04e:0:b0:667:91ba:9bdd with SMTP id 956f58d0204a3-6683bd9001dmr4815528d50.81.1784715253854; Wed, 22 Jul 2026 03:14:13 -0700 (PDT)
MIME-Version: 1.0
From: rachid bouziane <exelogphp@gmail.com>
Date: Wed, 22 Jul 2026 12:14:03 +0200
X-Gm-Features: AUfX_mzYZWj8pVJOTiARRBydkVwZOWBccU2cKZbiJXH5m1b56Kj5DxjrJT7q9N0
Message-ID: <CAHkvZnqoZAiMQd2NBysXj1jbsAy7jNRYrjjsJUY0sZa1KHbCag@mail.gmail.com>
To: "ufmrg@irtf.org" <ufmrg@irtf.org>, seat@ietf.org
Content-Type: multipart/alternative; boundary="000000000000bb35f20657306630"
Message-ID-Hash: OY7Z4MZHNOCLYHJ7ONSQ5AU5WKNRDXRU
X-Message-ID-Hash: OY7Z4MZHNOCLYHJ7ONSQ5AU5WKNRDXRU
X-MailFrom: exelogphp@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Seat] Re: [Ufmrg] Re: Re: Comments on formal analysis of relay attacks in intra-handshake attestation (CVE-2026-33697)
List-Id: "Secure Evidence and Attestation Transport (SEAT) WG" <seat.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/seat/CYwvM75z6rTId2A3ZZvZJmHxOig>
List-Archive: <https://mailarchive.ietf.org/arch/browse/seat>
List-Help: <mailto:seat-request@ietf.org?subject=help>
List-Owner: <mailto:seat-owner@ietf.org>
List-Post: <mailto:seat@ietf.org>
List-Subscribe: <mailto:seat-join@ietf.org>
List-Unsubscribe: <mailto:seat-leave@ietf.org>

Hi everyone
 I appreciate this work and I acknowledge the attacks in the paper
specifically severity of the attacks. The only thing I want to add is that
I would like to work together for binding via http. My draft is available
at
https://datatracker.ietf.org/doc/draft-secroot-ooda-http/04/
Rachid Bouziane

v2.46.0 | Report a Bug | By Email | System Status