Return-Path: X-Original-To: seat@mail2.ietf.org Delivered-To: seat@mail2.ietf.org Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 7766A11F6B234 for ; Mon, 27 Jul 2026 11:57:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1785178644; bh=4svi4AErPxyE3BRkQy5TwbK5bvzquncLOx2+N3Zzabk=; h=Date:Subject:To:CC:References:From:In-Reply-To; b=QP5DqwyH8lKvbmBiMXjPaBsUQQGeNWJrxsGT4F4/XwsT5+FKA7diF9zNwehEjvj8V 46NBnjYtWvznXAM0CplKMCet5zdLPt3hszHj1uP8eoM7DT2bqgIGFr1cfEfkRI4tV6 WEkjd+NefC4tJvoN/1ZrCB25TkCzdE9kFP7a7tuk= X-Virus-Scanned: amavisd-new at ietf.org X-Spam-Flag: NO X-Spam-Score: -4.398 X-Spam-Level: X-Spam-Status: No, score=-4.398 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=tu-dresden.de Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4YBd6J78SI2A for ; Mon, 27 Jul 2026 11:57:23 -0700 (PDT) Received: from mailout3.zih.tu-dresden.de (mailout3.zih.tu-dresden.de [141.30.67.74]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id A633011F6B1D1 for ; Mon, 27 Jul 2026 11:57:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=tu-dresden.de; s=dkim2022; h=Content-Type:In-Reply-To:From:References:CC:To :Subject:MIME-Version:Date:Message-ID:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=DQqF861e093QpoaglkRg3kVToVCVIw2v0xZgrlCVYn8=; b=XRwGMuB2p/q86zVRI94Fycw5lj w66PaZOV0o3oBVLZ/sGgjN+M7She2kdLPpcRkqj6hrXEuKuWQLCUBgCexH4DAdpXdCpRM+cUykkZd 9anUgV+dZ3d6txhMQ2TaMqmRmz0tUM8+yaFFB8v/u0GysBBlEyqI+EG50YcL3mt0vWIHytmW49DKn aL4PyhuU2XbuUxyjiVDiQEOFjcP/BJ6nTueSR0idtpGONTICLX63vWqr+/Y5F6fnwqMltWX73CUSr 1g8Nr6y4Jvyo6u8VTc7tLa7LoE6uHOEd8T2qwxPncq/3zR/EDgRJdhsOQ9lrSSRcXJvjzYCtDbyx/ AhO8Qvvg==; Received: from msx-t422.msx.ad.zih.tu-dresden.de ([172.26.35.139] helo=msx.tu-dresden.de) by mailout3.zih.tu-dresden.de with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1woQVp-00HBFq-35; Mon, 27 Jul 2026 20:57:21 +0200 Received: from [10.12.5.228] (141.76.13.149) by msx-t422.msx.ad.zih.tu-dresden.de (172.26.35.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.45; Mon, 27 Jul 2026 20:57:08 +0200 Message-ID: Date: Mon, 27 Jul 2026 20:57:02 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: Nathanael Ritz References: <5f361893-bc32-4737-9578-fdb3ad7be3f9@tu-dresden.de> <9F03163D-B0F9-40DD-A4AB-69C151B872D6@aiven.io> <76b504ae-5692-4f31-a9d2-025974b12339@tu-dresden.de> <5fb42c5c-825b-472b-8455-ce893011ade5@tu-dresden.de> Content-Language: en-US From: Muhammad Usama Sardar In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-512; boundary="------------ms060707030602020305050509" X-ClientProxiedBy: msx-t420.msx.ad.zih.tu-dresden.de (172.26.35.137) To msx-t422.msx.ad.zih.tu-dresden.de (172.26.35.139) X-TUD-Virus-Scanned: mailout3.zih.tu-dresden.de Message-ID-Hash: KS2S5GIOMFT2RPK4JBB5SFZMNLPSQRL4 X-Message-ID-Hash: KS2S5GIOMFT2RPK4JBB5SFZMNLPSQRL4 X-MailFrom: muhammad_usama.sardar@tu-dresden.de X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: "seat@ietf.org" , "ufmrg@irtf.org" , Markus Rudy X-Mailman-Version: 3.3.9rc6 Precedence: list Subject: =?utf-8?q?=5BSeat=5D_Re=3A_Comments_on_formal_analysis_of_relay_attacks_in_i?= =?utf-8?q?ntra-handshake_attestation_=28CVE-2026-33697=29?= List-Id: "Secure Evidence and Attestation Transport (SEAT) WG" Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: --------------ms060707030602020305050509 Content-Type: multipart/alternative; boundary="------------HiwSXbY6tDNpX8iPUjoPPIs9" --------------HiwSXbY6tDNpX8iPUjoPPIs9 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 SGkgTmF0aGFuYWVsLA0KDQpXZSB3aWxsIGJlIGhhcHB5IHRvIHJldmlldyB5b3VyIGFydGlm YWN0cyBpZiB5b3Ugd291bGQgYmUgbW9yZSBwcmVjaXNlLiANCkFzIGl0IGlzIG5vdywgdGhl cmUgc2VlbXMgdG8gYmUgbm90aGluZyBjb25jcmV0ZSB0aGF0IHdlIGNvdWxkIHV0aWxpemUg DQp0byBpbXByb3ZlIHRoZSBhcnRpZmFjdHMuIFlvdSBzZWVtIHRvIGNyaXRpY2l6ZSAjMiBi dXQgdGhlbiB1c2UgdGhlIHNhbWUgDQppbiB5b3VyIGNvZGUuIFNvbWV0aGluZyB1c2VmdWwg bWF5IGJlIHRvIHJldmVydCAjMSwgYW5kIHNob3cgYSBmaXggZm9yIA0KIzIgdGhhdCB5b3Ug cHJvcG9zZS4gV2UgY2FuIHRoZW4gY2hlY2sgdGhlIHByb3Bvc2VkIGNoYW5nZS4gSG9wZWZ1 bGx5LCANCnlvdSBjYW4gY2xhcmlmeSB5b3VyIHBlcnNwZWN0aXZlIG1vcmUgcHJlY2lzZWx5 Lg0KDQpPbiAyNy4wNy4yNiAxMzo1NSwgTmF0aGFuYWVsIFJpdHogd3JvdGU6DQo+IFRvcCBw b3N0aW5nLCBmb2xsb3dpbmcgdXAgb24gTWFya3VzJ3MgbGF0ZXN0IGNvbW1lbnRzIHJlZ2Fy ZGluZyB0aGUgDQo+IGNvdW50ZXItZXhhbXBsZXMgZm9yICJMZXZlbCAzIiBiaW5kaW5nIGFu ZCB3aGV0aGVyIGhhbmRzaGFrZSBzZWNyZXQgDQo+IGNvcnJlbGF0aW9uIGhvbGRzIGFjcm9z cyB0aGUgZW50aXJlIHNlc3Npb24uDQpBcyBqdXN0IGNsYXJpZmllZCB0byBNYXJrdXMsIHRo ZSBkaXN0aW5jdGlvbiBiZXR3ZWVuIC9oYW5kc2hha2Ugc2VjcmV0LyANCmFuZCAvaGFuZHNo YWtlIHRyYWZmaWMgc2VjcmV0cy8gaXMgY3JpdGljYWwgaW4gVExTIDEuMyBrZXkgc2NoZWR1 bGUuDQo+IEkgcmVjZW50bHkgZXZhbHVhdGVkIGEgc3RyZWFtbGluZWQgbW9kZWwgdGhhdCBz dHJpcHMgb3V0IHRoZSANCj4gbm9uLXN0YW5kYXJkIGR1YWwtc2lnbmVkIGBDVl9FeHRgIGNv bnN0cnVjdCBhbmQgdGhlIHJlZHVuZGFudCANCj4gZXBoZW1lcmFsIHNlbGYtc2lnbmF0dXJl cywgcmV2ZXJ0aW5nIHRvIGEgY2xlYW4sIHN0YW5kYXJkIFRMUyAxLjMgDQo+IGBDVihzZylg IG1lc3NhZ2Ugc2lnbmVkIHNvbGVseSBieSB0aGUgZXBoZW1lcmFsIGtleS4NClJlbW92aW5n IHRoZSBzZWNvbmQgc2lnbmF0dXJlLCB0aGUgY2xpZW50IG1heSBnZXQgbm8gZ3VhcmFudGVl IG9mIHRoZSANCmluZnJhc3RydWN0dXJlIG93bmVyIGFuZCBkaXZlcnNpb24gYXR0YWNrcyBt YXkgYXBwbHkgWzMsNF0uDQo+IENydWNpYWxseSwgaXQgYmluZHMgdGhlIGZ1bGwgc2VjdXJp dHkgY29udGV4dOKAlGAoaGFuZHNoYWtlX3NlY3JldCwgDQo+IElEX1MsIHB1YkxUSywgcHVi RUspYOKAlGRpcmVjdGx5IGludG8gdGhlIFRFRS1zaWduZWQgcXVvdGUgKGByZGF0YWApIFsw XS4NClRoZXJlIGlzIGEgcG90ZW50aWFsIHJpc2sgdGhvdWdoLiBUaGUgVGFyZ2V0IEVudmly b25tZW50IG5lZWRzIHRvIHNlbmQgDQpoYW5kc2hha2Vfc2VjcmV0IHRvIHRoZSBBdHRlc3Rp bmcgRW52aXJvbm1lbnQuDQo+ICMjIDIuIE90aGVyIG5vbi1jb25mb3JtYW50IEtleSBTY2hl ZHVsZSBpc3N1ZXMNCj4NCj4gV2hlbiBleGFtaW5pbmcgaG93IHRoZSBiaW5kZXIgZnVuY3Rp b25zIHRvIGNvcnJlbGF0ZSB0aGVzZSBzZWNyZXRzLCBJIA0KPiBmb3VuZCB0aGUgb3JpZ2lu YWwgbW9kZWwgaW50cm9kdWNlcyB0d28gZXhwbGljaXQga2V5IHNjaGVkdWxlIA0KPiBtb2Rp ZmljYXRpb25zIHRoYXQgYXJlIGNvbXBsZXRlbHkgYWJzZW50IGZyb20gc3RhbmRhcmQgVExT IGFuZCB3b3VsZCANCj4gcHJvZHVjZSBub24tY29uZm9ybWFudCB2YWx1ZXMgdGhlIG1vbWVu dCB0aGV5IGFyZSB3aXJlZCB1cCBpbiByZWFsIA0KPiBpbXBsZW1lbnRhdGlvbnM6DQoNCldl IGFyZSBub3QgYXdhcmUgb2YgUHJvVmVyaWYgY29kZSB3aXJlZCB1cCBpbiByZWFsIGltcGxl bWVudGF0aW9uLiBJdCBpcyANCnR5cGljYWxseSBhbiBhYnN0cmFjdGlvbiByZWFzb25hYmxl IGZvciB0aGUgcHJvYmxlbSBhdCBoYW5kLiBDb3VsZCB5b3UgDQpwbGVhc2Ugc2hhcmUgc29t ZSByZWZlcmVuY2Ugd2hlcmUgUHJvVmVyaWYgd2FzIHdpcmVkIHVwIGluIHJlYWwgDQppbXBs ZW1lbnRhdGlvbj8NCg0KPiAqICoqYGtkZl9leHBgIGRlcml2ZXMgYW4gZXhwb3J0ZXIgZnJv bSB0aGUgSGFuZHNoYWtlIFNlY3JldDoqKiDCoFRoZSANCj4gY29uc3RydWN0aW9uIGRlcml2 ZXMgYW4gZXhwb3J0ZXIgZGlyZWN0bHkgZnJvbSBgaHNgLiBSRkMgOTg0NiDCpzcuNSANCj4g cGVybWl0cyBvbmx5IGBlYXJseV9leHBvcnRlcl9zZWNyZXRgIG9yIGBleHBvcnRlcl9zZWNy ZXRgIGFzIHRoZSANCj4gZXhwb3J0ZXIgaW5wdXQsIGRlZmluaW5nIGEgc3RyaWN0IHR3by1z dGFnZSBjb25zdHJ1Y3Rpb246IA0KPiBgRGVyaXZlLVNlY3JldChTZWNyZXQsIGxhYmVsLCAi IilgIGZvbGxvd2VkIGJ5IGBIS0RGLUV4cGFuZC1MYWJlbCguLCANCj4gImV4cG9ydGVyIiwg SGFzaChjb250ZXh0X3ZhbHVlKSlgLiBUaGUgbW9kZWxlZCBga2RmX2V4cGAgaW5zZXJ0cyBh IA0KPiBub24tc3RhbmRhcmQgdGhpcmQgc3RhZ2UsIGNoYWluaW5nIGAiaCBleHAgbWFzdGVy ImAgaW50byBhbiBgInJhIA0KPiBiaW5kZXIiYCBpbnRlcm1lZGlhdGUuDQoNCldlIGRvbid0 IHJlYWxseSBzZWUgeW91ciBwb2ludC4gQ2FuIHlvdSBleHBsYWluIHdoeSBoYXZpbmcgYW4g YWRkaXRpb25hbCANCkRlcml2ZS1TZWNyZXQgc3RhZ2UgaXMgcHJvYmxlbWF0aWMgb3Igd2hh dCBhdHRhY2sgdmVjdG9ycyBpdCBsZWFkcyB0bz8gDQpXaGF0IGltcGFjdCBkb2VzIHJlbW92 aW5nIGl0IG1ha2UgaW4gUHJvVmVyaWY/IEFuZCBpZiB5b3UgaGF2ZSANCmRpc2NvdmVyZWQg YSBzZWN1cml0eSBwcm9ibGVtLCB5b3UgbWF5IGxpa2UgdG8gcmVwb3J0IHRvIFRMUyBXRyBi ZWNhdXNlIA0KaXQgd291bGQgbGlrZWx5IGhhdmUgaW1wbGljYXRpb25zIGJleW9uZCBvdXIg d29yayBzaW5jZSB0aGlzIGlzIGhvdyB0aGUgDQpUTFMgMS4zIGtleSBzY2hlZHVsZSBpcyBi dWlsdCwgYW5kIHNldmVyYWwgcmVzZWFyY2hlcnMgaGF2ZSBkb25lIGJvdGggDQp0aGUgc3lt Ym9saWMgYW5kIGNvbXB1dGF0aW9uYWwgcHJvb2ZzIG9mIGl0Lg0KDQpUaGUgcGFwZXIgbmV2 ZXIgY2xhaW1zIHRvIGJlIHVzaW5nIHN0YW5kYXJkIG9yIGVhcmx5IGV4cG9ydGVycyBvZiAN ClJGQzk4NDYuIEluIGZhY3QsIHVzaW5nIHRoZSBmb3JtZXIgd291bGQgcHJldHR5IG11Y2gg YmVjb21lIA0KcG9zdC1oYW5kc2hha2UgYXR0ZXN0YXRpb24uIEFzIGV2ZW4gdGhlIHRpdGxl IG9mIHRoZSBwYXBlciBzYXlzLCB0aGUgDQpwYXBlciBpcyBhYm91dCBpbnRyYS1oYW5kc2hh a2UgYXR0ZXN0YXRpb24uDQoNCj4gKiAqKmBrZGZfZXNgIHJldHVybnMgYGV4cDBgIGluIHBs YWNlIG9mIGBlbXMwYDoqKiBUaGUgbW9kZWwgcmVwbGFjZXMgDQo+IHRoZSBlYXJseSBleHBv cnRlciBtYXN0ZXIgc2VjcmV0IChgZW1zMGApIHdpdGggYGV4cDBgLg0KV2UgYmVsaWV2ZSBl YXJseV9leHBvcnRlcl9zZWNyZXQgKCJlbXMwIikgaXMgY29ycmVjdGx5IGdlbmVyYXRlZC4g VGhlIA0KbWFjcm8gaW5zdGVhZCByZXR1cm5zIGVhcmx5IGV4cG9ydGVyIHZhbHVlICJleHAw IiB3aGljaCB3YXMgcmVxdWlyZWQuIFdlIA0KZG9uJ3Qgc2VlIGFueXRoaW5nIHdyb25nIGlu IHRoaXMgbW9kZWxpbmcuIFBsZWFzZSBjbGFyaWZ5IHdoYXQgeW91IHZpZXcgDQphcyB3cm9u Zy4NCj4gV2hpbGUgdGhlIHNoYXBlIHJlc2VtYmxlcyDCpzcuNSwgaXQgZm9yY2VzIHRoZSBl YXJseSBleHBvcnRlciBpbnRvIGEgDQo+IGhhbmRzaGFrZSB3aGVyZSBgcHNrID0gTm9QU0tg IGluIGJvdGggcm9sZXPigJR2aW9sYXRpbmcgwqc3LjUncyANCj4gcmVxdWlyZW1lbnQgdGhh dCBpbXBsZW1lbnRhdGlvbnMgdXNlIGBleHBvcnRlcl9zZWNyZXRgIHVubGVzcyANCj4gZXhw bGljaXRseSBzcGVjaWZpZWQgYnkgdGhlIGFwcGxpY2F0aW9uLg0KVGhpcyBzZWVtcyB0byBi ZSBtaXN1bmRlcnN0YW5kaW5nLiAiUFNLIiBpcyBhbHdheXMgdGhlcmUgaW4gdGhlIGtleSAN CnNjaGVkdWxlLCB3aGV0aGVyIHRoZSBoYW5kc2hha2UgaXMgUFNLLWJhc2VkIG9yIG5vdC4g SW4gdGhlIGZvcm1lciBjYXNlLCANCml0IGhhcyBhIHZhbHVlIGdlbmVyYXRlZCBmcm9tIHBy ZXZpb3VzIGNvbm5lY3Rpb24uIEluIHRoZSBsYXR0ZXIgY2FzZSwgDQppdCBoYXMgYSB2YWx1 ZSBvZiAnMCcuDQo+IEZ1cnRoZXJtb3JlLCBpdCBmcmVlemVzIHRoZSBsYWJlbCBhbmQgY29u dGV4dCBpbnRvIHRoZSBzY2hlZHVsZSByYXRoZXIgDQo+IHRoYW4gZXhwb3NpbmcgdGhlbSB0 byB0aGUgYXBwbGljYXRpb24sIHdoaWxlIGRpc2NhcmRpbmcgYGVtczBgIA0KPiBlbnRpcmVs eSBzbyBubyBzdGFuZGFyZCBleHBvcnRlciBjYW4gYmUgZGVyaXZlZCBkb3duc3RyZWFtLg0K DQogMS4gVGhlcmUgaXMgbm8gYXBwbGljYXRpb24gaGVyZS4gV2UgYXJlIG1vZGVsaW5nIGlu IFByb1ZlcmlmLg0KIDIuIGVhcmx5X2V4cG9ydGVyX3NlY3JldCAnZW1zMCcgaXMgbm90IGRp c2NhcmRlZC4gVGhlIGVhcmx5IGV4cG9ydGVyDQogICAgdmFsdWUgJ2V4cDAnIGlzIGluZGVl ZCBkZXJpdmVkIGZyb20gJ2VtczAnLCByZXR1cm5lZCBhbmQgdXNlZC4NCiAzLiBlYXJseV9l eHBvcnRlcl9zZWNyZXQgJ2VtczAnIGhhcyBub3RoaW5nIHRvIGRvIHdpdGggdGhlIHN0YW5k YXJkDQogICAgZXhwb3J0ZXIuDQoNCj4gSW4gYW55IGNhc2UsIHRoZSBkZW1vbnN0cmF0ZWQg bW9kZWwgdXNlcyBga2NoYCBhbmQgYGtzaGAgZGlyZWN0bHkgDQo+IHdpdGhpbiB0aGUgcmRh dGEgZmllbGQsIGNvbXBsZXRlbHkgbGVhdmluZyB0aGUga2V5IHNjaGVkdWxlIGVudGlyZWx5 IA0KPiB1bnRvdWNoZWQgd2hpbGUgdXNpbmcgc29tZXRoaW5nIGRlcml2ZWQgZnJvbSB0aGUg aGFuZHNoYWtlIHNlY3JldCwgYXMgDQo+IE1hcmt1cyBoYWQgcHJvcG9zZWQuDQpObyBmaWVs ZCBpbiBUYWJsZSAyIG9mIFszXSB1c2VzICdrY2gnIG9yICdrc2gnIGluIHJkYXRhLg0KPiAj IyAzLiBPbWlzc2lvbiBvZiBXZWJQS0kgYW5kIEhvc3QgVmFsaWRhdGlvbg0KDQpPbmUgb2Yg dGhlIENlcnRpZmljYXRlVmVyaWZ5IGlzIGZvciBleGFjdGx5IHRoaXMgcHVycG9zZS4gU28g dGhpcyBwb2ludCANCmRvZXMgbm90IGFwcGx5Lg0KDQpCZXN0IHJlZ2FyZHMsDQoNClVzYW1h LCBTbGF2YSwgYW5kIEplYW4tTWFyaWUNCg0KPg0KPiBbMF0gDQo+IGh0dHBzOi8vZ2l0aHVi LmNvbS9uYXRoYW5hZWxyaXR6L2ludHJhLWhhbmRzaGFrZS1wYXBlci9jb21taXQvYjVhNzlh ZmYzMGQyM2M1MTY5NTc4YWNjOTJjNmQ2ZmY4MTQ3ZWQyMSNkaWZmLTMxNjIyNzA0MjY5YTdi MjMwNjZiZTQzM2Y5M2NiOGVkYTBhMzNkNGI3OTNlMmQ3MmJjMDU3YTg1YjEzNWYzZTENCj4N Cj4gWzFdIA0KPiBodHRwczovL2dpdGh1Yi5jb20vbmF0aGFuYWVscml0ei9pbnRyYS1oYW5k c2hha2UtcGFwZXIvYmxvYi9iNWE3OWFmZjMwZDIzYzUxNjk1NzhhY2M5MmM2ZDZmZjgxNDdl ZDIxL2JpbmRlcjYvZnVsbF92ZXJpZmljYXRpb25fcmVzdWx0cy50eHQNCj4NCj4gWzJdIA0K PiBodHRwczovL2dpdGh1Yi5jb20vbmF0aGFuYWVscml0ei9pbnRyYS1oYW5kc2hha2UtcGFw ZXIvdHJlZS9iNWE3OWFmZjMwZDIzYzUxNjk1NzhhY2M5MmM2ZDZmZjgxNDdlZDIxL2JpbmRl cjYNCg0KWzNdIA0KaHR0cHM6Ly93d3cucmVzZWFyY2hnYXRlLm5ldC9wdWJsaWNhdGlvbi8z OTg4MzkxNDFfSWRlbnRpdHlfQ3Jpc2lzX2luX0NvbmZpZGVudGlhbF9Db21wdXRpbmdfRm9y bWFsX0FuYWx5c2lzX29mX0F0dGVzdGVkX1RMUw0KDQpbNF0gaHR0cHM6Ly9naXRodWIuY29t L0NDQy1BdHRlc3RhdGlvbi9mb3JtYWwtc3BlYy1pZC1jcmlzaXMNCg0K --------------HiwSXbY6tDNpX8iPUjoPPIs9 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Hi Nathanael,

We will be happy to review your artifacts if you would be more precise. As it is now, there seems to be nothing concrete that we could utilize to improve the artifacts. You seem to criticize #2 but then use the same in your code. Something useful may be to revert #1, and show a fix for #2 that you propose. We can then check the proposed change. Hopefully, you can clarify your perspective more precisely.

On 27.07.26 13:55, Nathanael Ritz wrote:
Top posting, following up on Markus's latest comments regarding the counter-examples for "Level 3" binding and whether handshake secret correlation holds across the entire session.
As just clarified to Markus, the distinction between handshake secret and handshake traffic secrets is critical in TLS 1.3 key schedule.
I recently evaluated a streamlined model that strips out the non-standard dual-signed `CV_Ext` construct and the redundant ephemeral self-signatures, reverting to a clean, standard TLS 1.3 `CV(sg)` message signed solely by the ephemeral key.
Removing the second signature, the client may get no guarantee of the infrastructure owner and diversion attacks may apply [3,4].
Crucially, it binds the full security context=E2=80=94`(handshake_secret, ID_S, pubLTK, pubEK)`=E2=80= =94directly into the TEE-signed quote (`rdata`) [0].
There is a potential risk though. The Target Environment needs to send handshake_secret to the Attesting Environment.
## 2. Other non-conformant Key Schedule issues
When examining how the binder functions to correlate these secrets, I found the original model introduces two explicit key schedule modifications that are completely absent from standard TLS and would produce non-conformant values the moment they are wired up in real implementations:

We are not aware of ProVerif code wired up in real implementation. It is typically an abstraction reasonable for the problem at hand. Could you please share some reference where ProVerif was wired up in real implementation?

* **`kdf_exp` derives an exporter from the Handshake Secret:** =C2=A0The construction derives an exporter directly from `hs`. RFC 9846 =C2=A77.5 permits only `early_exporter_secret` or `exporter_secret` as the exporter input, defining a strict two-stage construction: `Derive-Secret(Secret, label, "")` followed by `HKDF-Expand-Label(., "exporter", Hash(context_value))`. The modeled `kdf_exp` inserts a non-standard third stage, chaining `"h exp master"` into an `"ra binder"` intermediate.

We don't really see your point. Can you explain why having an additional Derive-Secret stage is problematic or what attack vectors it leads to? What impact does removing it make in ProVerif? And if you have discovered a security problem, you may like to report to TLS WG because it would likely have implications beyond our work since this is how the TLS 1.3 key schedule is built, and several researchers have done both the symbolic and computational proofs of it.

The paper never claims to be using standard or early exporters of RFC9846. In fact, using the former would pretty much become post-handshake attestation. As even the title of the paper says, the paper is about intra-handshake attestation.

* **`kdf_es` returns `exp0` in place of `ems0`:*= * The model replaces the early exporter master secret (`ems0`) with `exp0`.
We believe early_exporter_secret ("ems0") is correctly generated. The macro instead returns early exporter value "exp0" which was required. We don't see anything wrong in this modeling. Please clarify what you view as wrong.
While the shape resembles =C2=A77.5, it forces = the early exporter into a handshake where `psk =3D NoPSK` in both roles=E2=80=94violating =C2=A77.5's requirement that implementa= tions use `exporter_secret` unless explicitly specified by the application.
This seems to be misunderstanding. "PSK" is always there in the key schedule, whether the handshake is PSK-based or not. In the former case, it has a value generated from previous connection. In the latter case, it has a value of '0'.
Furthermore, it freezes the label and context into the schedule rather than exposing them to the application, while discarding `ems0` entirely so no standard exporter can be derived downstream.
  1. There is no application here. We are modeling in ProVerif.
    2. =
  2. early_exporter_secret 'ems0' is not discarded. The early exporter value 'exp0' is indeed derived from 'ems0', returned and used.
  3. early_exporter_secret 'ems0' has nothing to do with the standard exporter.
In any case, the demonstrated model uses `kch` and `ksh` directly within the rdata field, completely leaving the key schedule entirely untouched while using something derived from the handshake secret, as Markus had proposed.
No field in Table 2 of [3] uses 'kch' or 'ksh' in rdata.
## 3. Omission of WebPKI and Host Validation
=

One of the CertificateVerify is for exactly this purpose. So this point does not apply.

Best regards,

Usama, Slava, and Jean-Marie

[3] https://www.researchgate.net/publication/398839141= _Identity_Crisis_in_Confidential_Computing_Formal_Analysis_of_Attested_TL= S

[4] https://github.com/CCC-Attestation= /formal-spec-id-crisis

--------------HiwSXbY6tDNpX8iPUjoPPIs9-- --------------ms060707030602020305050509 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgMFADCABgkqhkiG9w0BBwEAAKCC DlwwggbmMIIEzqADAgECAhAxAnDUNb6bJJr4VtDh4oVJMA0GCSqGSIb3DQEBDAUAMIGIMQsw CQYDVQQGEwJVUzETMBEGA1UECBMKTmV3IEplcnNleTEUMBIGA1UEBxMLSmVyc2V5IENpdHkx HjAcBgNVBAoTFVRoZSBVU0VSVFJVU1QgTmV0d29yazEuMCwGA1UEAxMlVVNFUlRydXN0IFJT QSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0yMDAyMTgwMDAwMDBaFw0zMzA1MDEyMzU5 NTlaMEYxCzAJBgNVBAYTAk5MMRkwFwYDVQQKExBHRUFOVCBWZXJlbmlnaW5nMRwwGgYDVQQD ExNHRUFOVCBQZXJzb25hbCBDQSA0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA s0riIl4nW+kEWxQENTIgFK600jFAxs1QwB6hRMqvnkphfy2Q3mKbM2otpELKlgE8/3AQPYBo 7p7yeORuPMnAuA+oMGRb2wbeSaLcZbpwXgfCvnKxmq97/kQkOFX706F9O7/h0yehHhDjUdyM yT0zMs4AMBDRrAFn/b2vR3j0BSYgoQs16oSqadM3p+d0vvH/YrRMtOhkvGpLuzL8m+LTAQWv QJ92NwCyKiHspoP4mLPJvVpEpDMnpDbRUQdftSpZzVKTNORvPrGPRLnJ0EEVCHR82LL6oz91 5WkrgeCY9ImuulBn4uVsd9ZpubCgM/EXvVBlViKqusChSsZEn7juIsGIiDyaIhhLsd3amm8B S3bgK6AxdSMROND6hiHT182Lmf8C+gRHxQG9McvG35uUvRu8v7bPZiJRaT7ZC2f50P4lTlnb LvWpXv5yv7hheO8bMXltiyLweLB+VNvg+GnfL6TW3Aq1yF1yrZAZzR4MbpjTWdEdSLKvz8+0 wCwscQ81nbDOwDt9vyZ+0eJXbRkWZiqScnwAg5/B1NUD4TrYlrI4n6zFp2pyYUOiuzP+as/A Znz63GvjFK69WODR2W/TK4D7VikEMhg18vhuRf4hxnWZOy0vhfDR/g3aJbdsGac+diahjEwz yB+UKJOCyzvecG8bZ/u/U8PsEMZg07iIPi8CAwEAAaOCAYswggGHMB8GA1UdIwQYMBaAFFN5 v1qqK0rPVIDh2JvAnfKyA2bLMB0GA1UdDgQWBBRpAKHHIVj44MUbILAK3adRvxPZ5DAOBgNV HQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHSUEFjAUBggrBgEFBQcDAgYI KwYBBQUHAwQwOAYDVR0gBDEwLzAtBgRVHSAAMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2Vj dGlnby5jb20vQ1BTMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNlcnRydXN0LmNv bS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDB2BggrBgEFBQcBAQRq MGgwPwYIKwYBBQUHMAKGM2h0dHA6Ly9jcnQudXNlcnRydXN0LmNvbS9VU0VSVHJ1c3RSU0FB ZGRUcnVzdENBLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTAN BgkqhkiG9w0BAQwFAAOCAgEACgVOew2PHxM5AP1v7GLGw+3tF6rjAcx43D9Hl110Q+BABABg lkrPkES/VyMZsfuds8fcDGvGE3o5UfjSno4sij0xdKut8zMazv8/4VMKPCA3EUS0tDUoL01u gDdqwlyXuYizeXyH2ICAQfXMtS+raz7mf741CZvO50OxMUMxqljeRfVPDJQJNHOYi2pxuxgj KDYx4hdZ9G2o+oLlHhu5+anMDkE8g0tffjRKn8I1D1BmrDdWR/IdbBOj6870abYvqys1qYlP otv5N5dm+XxQ8vlrvY7+kfQaAYeO3rP1DM8BGdpEqyFVa+I0rpJPhaZkeWW7cImDQFerHW9b KzBrCC815a3WrEhNpxh72ZJZNs1HYJ+29NTB6uu4NJjaMxpk+g2puNSm4b9uVjBbPO9V6sFS G+IBqE9ckX/1XjzJtY8Grqoo4SiRb6zcHhp3mxj3oqWi8SKNohAOKnUc7RIP6ss1hqIFyv0x XZor4N9tnzD0Fo0JDIURjDPEgo5WTdti/MdGTmKFQNqxyZuT9uSI2Xvhz8p+4pCYkiZqpahZ lHqMFxdw9XRZQgrP+cgtOkWEaiNkRBbvtvLdp7MCL2OsQhQEdEbUvDM9slzZXdI7NjJokVBq 3O4pls3VD2z3L/bHVBe0rBERjyM2C/HSIh84rfmAqBgklzIOqXhd+4RzadUwggduMIIFVqAD AgECAhA/YCOTOabjcS/HTP8f2MRxMA0GCSqGSIb3DQEBDAUAMEYxCzAJBgNVBAYTAk5MMRkw FwYDVQQKExBHRUFOVCBWZXJlbmlnaW5nMRwwGgYDVQQDExNHRUFOVCBQZXJzb25hbCBDQSA0 MB4XDTI0MTExOTAwMDAwMFoXDTI2MTExOTIzNTk1OVowgdoxCzAJBgNVBAYTAkRFMRAwDgYD VQQIEwdTYWNoc2VuMSgwJgYDVQQKEx9UZWNobmlzY2hlIFVuaXZlcnNpdGFldCBEcmVzZGVu MREwDwYDVQRhEwhHT1ZERStTTjEyMDAGCSqGSIb3DQEJARYjbXVoYW1tYWRfdXNhbWEuc2Fy ZGFyQHR1LWRyZXNkZW4uZGUxDzANBgNVBAQTBlNhcmRhcjEXMBUGA1UEKhMOTXVoYW1tYWQg VXNhbWExHjAcBgNVBAMTFU11aGFtbWFkIFVzYW1hIFNhcmRhcjCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBAKhTeUVDqbjfDFmkVrgQMFC3S4O0vjW9zjlrkD8FrZ2ipCLuiNE2 XHibuTw57N2lrcWMRqjw/Tv7WqpasIHjIlvE5SJ+VuOzu5P0xLqfroT4MSlKIq1LyXkL1u09 A9EuCUxhf4Uc3Ir17VYzjS7meqv4+4yoVhnL9zepze8f0FG3EJmGJlBSJ8sD6dVxGQkDLWMf NNt/I8wkaQSFkzvd+KppPOjc4t4JtQWIHKPMKS3lbXv8RLO1jaPO9Fdfg4D/dq5I8fsnfg6y gmCL+nTsHWAXqgX8vcDVG5tz5ONzHgODtItrQWO+m4d8W16JWCbMMCFIqscZ5weRfS5dSFZk sptipqIm5tzUL3y2/VOFCiL/tofo7yA1bHnFXUGm2LkJVNx6pDZFh1G9OYPqmrjjSxL9E/ed xQ1lIe3GmBJGBUFldlP8STm3WapaatgNcuQ6HXX1HexWF14NBIguNajgOR17JxX0JS4t9o5f 3Po+Nqa/Als1Mm9Q6PACcVRhm7yH4vj3UqGcjAps6YM/HDkNoA2qsHmqZ/ya15eIORADN+ZQ O7hJYBH5TJprVdGXL7aTLNJh6xEn5V9TFcsT017ocQ5bJteN6caUay/0zPenwtabuSLR6y7e gmx8gTF4oPDUlgkaNcKAmkyzwM+IzPNIJvyxq/NI1pQRyTGUQJYyExO7AgMBAAGjggHBMIIB vTAfBgNVHSMEGDAWgBRpAKHHIVj44MUbILAK3adRvxPZ5DAdBgNVHQ4EFgQU4R79RPVSVexS +el1ZxCchmYs1akwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYI KwYBBQUHAwQGCCsGAQUFBwMCMFAGA1UdIARJMEcwOgYMKwYBBAGyMQECAQoEMCowKAYIKwYB BQUHAgEWHGh0dHBzOi8vc2VjdGlnby5jb20vU01JTUVDUFMwCQYHZ4EMAQUDAjBCBgNVHR8E OzA5MDegNaAzhjFodHRwOi8vR0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UUGVyc29uYWxD QTQuY3JsMHgGCCsGAQUFBwEBBGwwajA9BggrBgEFBQcwAoYxaHR0cDovL0dFQU5ULmNydC5z ZWN0aWdvLmNvbS9HRUFOVFBlcnNvbmFsQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dF QU5ULm9jc3Auc2VjdGlnby5jb20wLgYDVR0RBCcwJYEjbXVoYW1tYWRfdXNhbWEuc2FyZGFy QHR1LWRyZXNkZW4uZGUwDQYJKoZIhvcNAQEMBQADggIBAIxymCHDahevSfae44bVKxAKDRLh ZVraNygdRQ2RQOkz8v8b/cl5yuWR/l3yMpIrwiDWT37UQibNuoPxaZeRBjDh8ItcUP51sOAV 7zd3GwfyUJNYKmgd6LjfE8+mkXrVU2JffVjRUgiyy7eBTzvTz5PFUQh2oqWfTh/Oz3pFXV+/ 0K3eP+fNkr0gljmEZi/h0ici5cJ+Q9J/Zx6Vg9ke2qb6PIh+zeb5oL40i7FR875NX/WGKMib ojTopS5xPbo0KmN64FqgasfJW03t0wyTtcYOap6tw2RcfVpjfsXQqEfjdjyrNHH6l/TDxUoL cNlu0zkYHMYmJ6MJ6VwaHWB5hou9N0WWrcQotsfkpf7lGZSlum9jG5/uB+d3FLK00QM99XN7 RhLbLOKKuw2Xri3MEcN/LvIRDIHef4uoONAI+4bOW+1wFmGwqpHYxA/JoUXoRjojuAon8lCF uVf3tFAkQ/V8zuPxCX36gEOsyQuK3IAeS8R8qhV5Cc+dcYDKid61AluluBcUSxfKxmoK19Mm f39FTD+bJpBCiEAdJuZfP6TD0dtBVcgJ4dBLZ4H13WBeVZRDXcxghYJcNWFHPa/qi20jmuUs CvcD4z2+LBFnVrwhOeBefYjm6zy7+9IbuomR11B4+AnLkjzTBZxcX17UMWyqVe4hZN2CsVS0 7doWTJJYMYIEWDCCBFQCAQEwWjBGMQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVy ZW5pZ2luZzEcMBoGA1UEAxMTR0VBTlQgUGVyc29uYWwgQ0EgNAIQP2Ajkzmm43Evx0z/H9jE cTANBglghkgBZQMEAgMFAKCCAc8wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG 9w0BCQUxDxcNMjYwNzI3MTg1NzAyWjBPBgkqhkiG9w0BCQQxQgRAeaUeaEq0tNHnvQyqmj4V b7Bv95uGQkHfwfUratA3d6ZD3dv5YGrxFTjO8ESZPP2aZpJaHoHTMWDgQa6HPIE0bDBpBgkr BgEEAYI3EAQxXDBaMEYxCzAJBgNVBAYTAk5MMRkwFwYDVQQKExBHRUFOVCBWZXJlbmlnaW5n MRwwGgYDVQQDExNHRUFOVCBQZXJzb25hbCBDQSA0AhA/YCOTOabjcS/HTP8f2MRxMGsGCyqG SIb3DQEJEAILMVygWjBGMQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2lu ZzEcMBoGA1UEAxMTR0VBTlQgUGVyc29uYWwgQ0EgNAIQP2Ajkzmm43Evx0z/H9jEcTBsBgkq hkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYI KoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMA0G CSqGSIb3DQEBAQUABIICAIwlruUdRETlAAHwSLxuopGBBucjY5PSYSTlAGHXwAFQzQQoJQeI YLKvnTTRN1iZZEJEQ7HdcwlntlX9xMzOdpe4l89NQLMAlPUW8lKm5FyrN5k9bv6ZEEJWGZQ1 +9xxPoILEddE6gOalaL+8o8hWeW4jOr9gLvIKnLt/lyL5UH+WPfBeY0Dq7jjwa5ePYkxWTaB haP7LZUS/gToWh1jJVANjGo9Kc126l0bIGNDTqXh74PKt6eKiwNH42BKaHgeHUexyvdUhj24 H1IrzWHMsV7ndSoiFeg0uqD9bXWElQTRxqNT+nS8Hu5C86Ygh8GO1J52mzocdksxwZbEcEop oeQdJaa7cjyWy37aD5Xik+KigmRNWAzaMx/3Dm22IJGhEuP0SIjFngE5oDl9CpKk6WY0i53z bblVx0SFZcWdEWSkE+lYoMi1/XQL0wLpgliUIOSitkBMk9E0E7CqvVyp7XNspwpVkeg42svb Ngmctrjl/y799xIhyelV9NUvqgNya2TOmaYBn8Q9ZGnqJmP1nMk8hki8UI4n4tNUUhjdKn+8 gPX1d5n5fNoF2ZUodfH4MOEtPndzeGw1Mt2tDZuabpBgKtyLuUWjwf+BBhpkg5MOFszLPTu/ pirXjAwFpyFgAJMhFJktR4FoocjjEU/7cemD8VHnRB+h5+8uuWz4EHAHAAAAAAAA --------------ms060707030602020305050509--