[Seat] Re: Comments on draft-fossati-seat-early-attestation-03

Nathanael Ritz <nathanritz@gmail.com> Tue, 17 March 2026 02:21 UTC

Return-Path: <nathanritz@gmail.com>
X-Original-To: seat@mail2.ietf.org
Delivered-To: seat@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id E25BBCBBEC7C for <seat@mail2.ietf.org>; Mon, 16 Mar 2026 19:21:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.098
X-Spam-Level:
X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 12z3zZcz0-Lf for <seat@mail2.ietf.org>; Mon, 16 Mar 2026 19:21:03 -0700 (PDT)
Received: from mail-dl1-x1236.google.com (mail-dl1-x1236.google.com [IPv6:2607:f8b0:4864:20::1236]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id AB728CBBEB77 for <seat@ietf.org>; Mon, 16 Mar 2026 19:20:47 -0700 (PDT)
Received: by mail-dl1-x1236.google.com with SMTP id a92af1059eb24-126ea4e9694so1734876c88.1 for <seat@ietf.org>; Mon, 16 Mar 2026 19:20:47 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1773714041; cv=none; d=google.com; s=arc-20240605; b=LHt8EIhxdRUrdqjTbxkzHySM5ZCqPiMVLtuuVwT7qxtxSnbVfYgTCoZAFjHXAl+Wl9 qgBFTcqClay332Gd3brFnMDNDvgYr1c7zcCNcfAxIavt2FYm0fELL5ckd64PbixWQkcP Rh0+BuNeK1Xw9SHc1XVDndgAjBVywxeWO0sjv9yEKeibv1mYp1bvIntLjt7j1plKCppB Ru10Zuh6nvGvffCv33C9Q7Kmzs891Q+UrKQjgI4JrqghvP11mn2sJN1zZL/CIWPzpHJd yJ/w3NSpYapVmVZLZjaWH/PcmXShAEjsN6O8VLQTjDfHpYbO5nqfxuu51OUBKFSAvI9F MbTw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:dkim-signature; bh=Uvo0S8j7fU54oscJz9LI5uaUaEiDQyXnCMqjdX5y27s=; fh=ZF0dW/4RxiHfPjtOatT76H8Ly2jYzx9d01m8yy0KHlo=; b=PSJswyCnFltaldootGoH8Xp4LXWKu/pVAEIYvA/2eTpgIqoPKDRLTr+hCM5eiVduzg wWF67TZZN5rNS8w2Q8iKEWEBQ5jUz3hkwZxeRvHMfsXSufCTJ2AefXvdTPIbrbnGR3yS ymHexf+H7PtW7ErjR/ktGnxSQd9YCLnTYY36W3NAhkB2L/S++EheFQaa1Z6Wod7fwofF gDSZbGutTdKYNj7fsG404dhCAgjC4kbQweN13yIXLF0t11ECZ6UJq/pzHMyx9l/XcuAJ 70WIdzH3wn+ZtGETb8H+C6NCmopFPcWwTwj27EgxM8Iqo2c7qWE1mrYm5N3o+zOVZXfQ 5o0g==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1773714041; x=1774318841; darn=ietf.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=Uvo0S8j7fU54oscJz9LI5uaUaEiDQyXnCMqjdX5y27s=; b=kilTiVgtWLeac3Ck2VfouSLKj73eyf2b8Hw6sVmY/WwlgxnDJW+KV8NNVGf3uiJeip DWzGsDjvQVWX+nn8UqxePl2ckdkHlFPHUn0SwQnHVC7fr9CYt3zSnKoNq29xNPmNvQLX pdBSEM9TaYMDKYTM2mbicIYgQfFWe4ttiuMwQMfOeeIrY/WOqVBVRs2IC17dm8l9AKed rw4/ks8ss9bTEGI+7667RgGFQsAmy3OoE4kqUn4YhcvEvfsRE3PhSpy5ayPx/4Ry/z4h oa8HVy1u7BbTxBkFzzl5k4g7+oJFSslDdPzBirbG5d1olHNZOp6rasG0+rlmwUiNyTRU e/cA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1773714041; x=1774318841; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=Uvo0S8j7fU54oscJz9LI5uaUaEiDQyXnCMqjdX5y27s=; b=q7vXwnyLB91/2PTeQQHyimWUCIVN/9wBv3o58RP3gi0DUmSGZr+UJ7n7pfIiqRgqUo ls6XYdkuHmUaT6+OXn3HCkPWkCAt1/XdASalMHmWuv7dx8NkS07Ti0zc0oKnSQ3PDchn xUnpzaapGpUQ/ITg5+7/jdCONSyNXyOKecreG3e8cYHZu4rC0MgXFUe0B2xQWx4Ezg0Z IRhsTDIMZ0zBSsT8ck/DMhZ6BfdmDjkvUUeXoKeDP2lt73ynF929Sj9QE93w5H+ZGnfd j7L+WIe5kw4vCJDBc83dbGNjOlyoEOi+w8Xt0HqEqTUD3mvvR++DH8EeZbHV3fLcS3uG bXIw==
X-Gm-Message-State: AOJu0Yx6IxvLDDduX9UmdrY4FGH4jbal+5loieEFAZv5bSvOxaZssMzM 1AbEexoQBGcIjLoI3HatNT5U7CFeQju0SOqK1oYKXtIhSVpc9kiHIOTo3dcCSVXIZ+l2nC+vC0H QFs0tFr/FMAtfk5MY7BjZFppShcpfwTmBY3R1
X-Gm-Gg: ATEYQzykEUYF1NL+ET0QQUaoAN3S9kkeS1uNfolMYAqNN2f4GsCcnZXDrFmKq2j+EY6 UHAdOfyi4NhsupIfcVzfVZJ7JLEYom27xozbPs4UckdtQiG3MynWZQ5sO8MHYVoKR0KKtlnM7I0 25ttVvWuqfXsJ/d+P3qbpVdmVTEuadpBqWgy8C1SvnJgKfTV76BdzxkfCALepj7v4TuZwzi5qfE 6NmLNA4RCxAareOkNHQMn3rWdwJZfRELwB3YezjbG+PyCBISrq5rTnxrL51/HyRbp1k4U+ZkJPj yOQtz26eDnPjxn17wbREiUTToWtCNBZ+cJnskvGN2nmRj/TTt7kP
X-Received: by 2002:a05:7022:301:b0:128:bae0:e03c with SMTP id a92af1059eb24-128f3e1b5d0mr7488701c88.30.1773714040816; Mon, 16 Mar 2026 19:20:40 -0700 (PDT)
MIME-Version: 1.0
References: <ec5cdd2f-5a6a-43a3-87a5-4639911b1f35@tu-dresden.de>
In-Reply-To: <ec5cdd2f-5a6a-43a3-87a5-4639911b1f35@tu-dresden.de>
From: Nathanael Ritz <nathanritz@gmail.com>
Date: Mon, 16 Mar 2026 20:20:29 -0600
X-Gm-Features: AaiRm50vffKLHiM6pq5egaaRrAupajah-Z-YGnzRuhE7cutIsbXlo8e3GzKAO1E
Message-ID: <CAHxYnaMbHY4gEamk+1jqkSnEL8FPsWZRv+JOOUMcsWkGZLPPOg@mail.gmail.com>
To: Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>
Content-Type: multipart/alternative; boundary="000000000000560a05064d2efb9d"
Message-ID-Hash: XOIJ73TBFKLWBFMPOJS6G77P73AFHKCF
X-Message-ID-Hash: XOIJ73TBFKLWBFMPOJS6G77P73AFHKCF
X-MailFrom: nathanritz@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "seat@ietf.org" <seat@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Seat] Re: Comments on draft-fossati-seat-early-attestation-03
List-Id: "Secure Evidence and Attestation Transport (SEAT) WG" <seat.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/seat/czH1IkuON0jTKHRNRqE-38o3mhY>
List-Archive: <https://mailarchive.ietf.org/arch/browse/seat>
List-Help: <mailto:seat-request@ietf.org?subject=help>
List-Owner: <mailto:seat-owner@ietf.org>
List-Post: <mailto:seat@ietf.org>
List-Subscribe: <mailto:seat-join@ietf.org>
List-Unsubscribe: <mailto:seat-leave@ietf.org>

Hello Usama,

To provide clarity to the WG, can you please cite the specific prose in the
language that proposes a change to the TLS key schedule. Simply copying the
math already present in the standard in order to derive a nonce would not
substantiate the claim you are making. Thanks.

-Nathanael

On Mon, Mar 16, 2026 at 8:09 PM Muhammad Usama Sardar <
muhammad_usama.sardar@tu-dresden.de> wrote:

> Hi,
>
> Without going into the attacks on this proposal, Section 5.1.1 [0]
> violates the SEAT charter (*emphasis* my own):
>
> The attested (D)TLS protocol extension will not modify the (D)TLS
> protocol itself. It may define (D)TLS extensions to support its goals
> but will *not* modify, add, or remove any existing protocol messages
> or *modify the key schedule*.
>
> Following the discussion in interim meeting, please bring the draft within
> the SEAT charter, or else please propose it in the TLS WG, where such
> changes are appropriate.
>
> Thanks.
>
> Best regards,
>
> -Usama
>
>
> [0]
> https://www.ietf.org/archive/id/draft-fossati-seat-early-attestation-03.html#section-5.1.1
> _______________________________________________
> Seat mailing list -- seat@ietf.org
> To unsubscribe send an email to seat-leave@ietf.org
>