[Seat] Re: FW: New Version Notification for draft-fossati-seat-early-attestation-06.txt

[Chengxin Huang <[e-mail]>]

Hello Nathanael and Ionut,

I think members should be welcome to share their opinion and formal
analysis effort they have done for the request for feedback by authors,
even if someone else managed to do it or share it before them.

I disagree with your argument for CVE-2026-33697. [CVE] includes link to
security advisory [GHSA], which includes link to SEAT email [SEAT], which
includes G3 property. So it is not that straight-forward, but it is
essentially there.

Maybe I have missed something, but I haven't seen anyone disagreeing to the
threat model of intra-handshake.fail. So please share evidence of "we
didn't agree to them, as a working group".

I don't believe I made any uncivil commentary and if it was perceived so, I
am sincerely sorry for the phrasing.I intended to say that [CVE] is useful
for the security considerations of draft and that it would be helpful to
consider the properties to address CVE-2026-33697 in the use cases draft. I
was just mentioning him possibly in the rough.

There are several news of exploits in the media: just google it, for
example, [Register] and [HN].

Best regards, Chengxin Huang

[CVE] https://www.cve.org/CVERecord?id=CVE-2026-33697

[GHSA]
https://github.com/ultravioletrs/cocos/security/advisories/GHSA-vfgg-mvxx-mgg7

[SEAT]
https://mailarchive.ietf.org/arch/msg/seat/x3eQxFjQFJLceae6l4_NgXnmsDY/

[intra-fail]
https://www.researchgate.net/publication/408219182_Intra-handshakefail_CVE-2026-33697_High-severity_CVE_in_Attested_TLS

[Register]
https://www.theregister.com/security/2026/07/04/confidential-computings-trust-mechanism-is-broken-the-fix-may-not-exist/5266056

[HN]
https://hackernoon.com/attested-tls-was-supposed-to-be-the-last-trust-boundary-it-isnt-formal-methods-show-how

On Tue, Aug 11, 2026 at 11:11 AM Nathanael Ritz <[e-mail]>
wrote:

> Well, I imagine some regular readers know the drill by now. I have some
> comments to share inline with [NR]:
>
> On Mon, Aug 10, 2026 at 8:31 PM Chengxin Huang <[e-mail]>
> wrote:
>
>> Hello everyone,
>>
>> I agree that this draft uses a naive binder, and CVE-2026-33697 is
>> trivially applicable on this draft, because there is no secret in the
>> binder of Sec. 5.1.1. So even without doing any formal analysis, it is
>> obvious to me.
>>
>> But since it was requested by the authors to "demonstrate" it, I went
>> ahead and tried `rdata = (pubEK,log_SH)` in [client] and [server] for this
>> draft in the commit `819bb7f` in [repo]. Property G3 returns false,
>> confirming the correctness of formal models.
>>
>
> [NR]: These models were made exclusively for an expired and withdrawn
> individual I-D and a fixed set of existing implementations that do not
> include the specifications for Early Attestation. I’m afraid these models
> are entirely unsuitable for properly evaluating the new work under
> discussion with the SEAT WG.
>
>
>> <snip>
>> Regarding the attacker capabilities, Section 6.1 of [intra-fail] is
>> "clearly" stating those and [repo] is even formalizing it. What is the
>> ambiguity in it?
>>
>
> [NR]: I do not believe there is any particular ambiguity. But that doesn't
> necessarily mean the working group has reached a consensus on the subject
> matter either.
>
>
>>
>> It seems that Nathanael is probably the only one denying the
>> vulnerability CVE-2026-33697 that all vendors and draft authors have
>> publicly acknowledged [intra-fail-id], and widely accepted and was being
>> wildly exploited. I am yet to see any technical substance in his potential
>> denial.
>>
>
> [NR]: I do not believe that ad hominem remarks are part of the accepted
> mailing list procedure guidelines...
> https://mailarchive.ietf.org/arch/msg/seat/gBUocKWAXF6LBDRfpvR6_8HGKck/
>
> Cheers,
> Nathanael
>
>
>>
>> I have also not seen any technical substance for his conclusion
>> "draft-fossati-seat-early-attestation-06 was applied to binder 7" and
>> "README was updated to suggest that draft-fossati-seat-early-attestation-06
>> is represented by what the page labels as "binder 7""
>>
>
>> Best regards,
>> Chengxin Huang
>>
>>
>> [repo] https://github.com/muhammad-usama-sardar/intra-handshake.fail
>>
>> [intra-fail]
>> https://www.researchgate.net/publication/408219182_Intra-handshakefail_CVE-2026-33697_High-severity_CVE_in_Attested_TLS
>>
>> [client]
>> https://github.com/muhammad-usama-sardar/intra-handshake.fail/blob/819bb7f20ac458b27c9be2c91cce1e72b8b5f4f7/binder7/tls-lib-simple.pvl#L684
>>
>> [server]
>> https://github.com/muhammad-usama-sardar/intra-handshake.fail/blob/819bb7f20ac458b27c9be2c91cce1e72b8b5f4f7/binder7/tls-lib-simple.pvl#L774
>>
>> [intra-fail-id]
>> https://www.ietf.org/archive/id/draft-intra-handshake-fail-04.html#section-5
>>
>>