[Teep] local attestation
Brendan Moran <Brendan.Moran@arm.com> Mon, 21 March 2022 11:19 UTC
Return-Path: <Brendan.Moran@arm.com>
X-Original-To: teep@ietfa.amsl.com
Delivered-To: teep@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B629F3A11FC for <teep@ietfa.amsl.com>; Mon, 21 Mar 2022 04:19:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.909
X-Spam-Level:
X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=fPPdp0jq; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=fPPdp0jq
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h1DxzHY9ExjI for <teep@ietfa.amsl.com>; Mon, 21 Mar 2022 04:19:05 -0700 (PDT)
Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-ve1eur03on0609.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe09::609]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B48913A11FA for <teep@ietf.org>; Mon, 21 Mar 2022 04:19:05 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=7lfPI2E557mtMlFhOIIjBoGy//pgzXwnzTtzb3+afR4=; b=fPPdp0jqI/YrZYLiMYaCQF+7LX0hCjwoWOcxD3/oRbc2+b+kwkCsWFag4bMKlszejuIHWJZo84OVTwhcs3VRH+UE7FhskZTONP9moewzHp6jw2XrBoWOnKxOpmVL49u/eX7levqHN0A+wBhbL1gk7gOX/C2f5tADTuCL9mSTJVs=
Received: from AM6P191CA0033.EURP191.PROD.OUTLOOK.COM (2603:10a6:209:8b::46) by DU2PR08MB7287.eurprd08.prod.outlook.com (2603:10a6:10:2d6::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5081.15; Mon, 21 Mar 2022 11:19:00 +0000
Received: from AM5EUR03FT055.eop-EUR03.prod.protection.outlook.com (2603:10a6:209:8b:cafe::6c) by AM6P191CA0033.outlook.office365.com (2603:10a6:209:8b::46) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5081.19 via Frontend Transport; Mon, 21 Mar 2022 11:19:00 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;dmarc=pass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT055.mail.protection.outlook.com (10.152.17.214) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5081.14 via Frontend Transport; Mon, 21 Mar 2022 11:18:59 +0000
Received: ("Tessian outbound 18e50a6f0513:v113"); Mon, 21 Mar 2022 11:18:59 +0000
X-CheckRecipientChecked: true
X-CR-MTA-CID: f6e146e61c61da3f
X-CR-MTA-TID: 64aa7808
Received: from fd48d4f3efa5.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 04545309-8758-460D-90DC-265E2849B6D5.1; Mon, 21 Mar 2022 11:18:52 +0000
Received: from EUR05-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id fd48d4f3efa5.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Mon, 21 Mar 2022 11:18:52 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FbiAj6rncVvjbro9+eMnEGsr619tYSM4XROFpVn5t6/Jp4SMfNhcIsV5RPSkf4CFDD4tQ/GFphK+DHe64tvLP7vGWjzDPZ3KZRnn94+LHRSDDNwDniVVsbs8gaHIsCU0RSzST8vhhhx+evh7AiymPq8t27YY2vvrMsHg/xrA9a8K4/68XFHnKYc8CG1VeDwruI6R2JSIvrJ9BnGXlUdHbzLWWZa8P8OnVZBXWEN2XBFVFN/643YAFKWpR/zmpWYdmTDoAUuZv0QWi7lM9wtjeAZ0JbXwdfhm39IozLnvJrW3yBVJGrK9Bnm9dk1RotR2vQ8fdgfkKugs4xNtN5Estg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=7lfPI2E557mtMlFhOIIjBoGy//pgzXwnzTtzb3+afR4=; b=PpjlyIgaKgzPYvGzi+FGafV6mRcatKe3elyXdsUkmh0t1lfU2EkPCAr1U2SjclGlUqQYatOVYc/kzxflpYIquqf52GHESX1XM8xSnBVzK/qpk5GCs5GWiLDHOX9EEw6iidEWvZnunWMmRiRWkceyY2hlOKui8cCIlSeesBhBsDyfipwDVXW45aBGALOo69FsQ59oRDIf1SOaIFTZVdjkrRHlune63G9cvL3XLXFGSOiiDnElNxxV0pqWQarFelJlS+9JXhXVK7SA8PJbN31oxDXla58ZsoUmD/oigfrxwo27y8K73CNgshs09JYSpZWdSJheAZjzyA5QKuAUYLU68A==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=7lfPI2E557mtMlFhOIIjBoGy//pgzXwnzTtzb3+afR4=; b=fPPdp0jqI/YrZYLiMYaCQF+7LX0hCjwoWOcxD3/oRbc2+b+kwkCsWFag4bMKlszejuIHWJZo84OVTwhcs3VRH+UE7FhskZTONP9moewzHp6jw2XrBoWOnKxOpmVL49u/eX7levqHN0A+wBhbL1gk7gOX/C2f5tADTuCL9mSTJVs=
Received: from DBAPR08MB5576.eurprd08.prod.outlook.com (2603:10a6:10:1ae::11) by DB8PR08MB3963.eurprd08.prod.outlook.com (2603:10a6:10:a8::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5081.19; Mon, 21 Mar 2022 11:18:51 +0000
Received: from DBAPR08MB5576.eurprd08.prod.outlook.com ([fe80::cd42:90e:6b8:dc77]) by DBAPR08MB5576.eurprd08.prod.outlook.com ([fe80::cd42:90e:6b8:dc77%3]) with mapi id 15.20.5081.022; Mon, 21 Mar 2022 11:18:50 +0000
From: Brendan Moran <Brendan.Moran@arm.com>
To: "TEEP@ietf.org" <teep@ietf.org>
Thread-Topic: local attestation
Thread-Index: AQHYPRVxkPBHuNjNeEeZZa5/H4iUqA==
Date: Mon, 21 Mar 2022 11:18:50 +0000
Message-ID: <DBAPR08MB557624F9BAAD36604E4833F3EA169@DBAPR08MB5576.eurprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
suggested_attachment_session_id: e6b4ad6b-a3eb-1122-5da0-4d392973b6b1
Authentication-Results-Original: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com;
X-MS-Office365-Filtering-Correlation-Id: 0facc2d6-124a-4df5-9449-08da0b2c98f7
x-ms-traffictypediagnostic: DB8PR08MB3963:EE_|AM5EUR03FT055:EE_|DU2PR08MB7287:EE_
X-Microsoft-Antispam-PRVS: <DU2PR08MB728730E8AD296DE62AF31CABEA169@DU2PR08MB7287.eurprd08.prod.outlook.com>
x-checkrecipientrouted: true
nodisclaimer: true
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: Shdh50Mw/OeD33/dQ2hiR23B41Qr4LOkGgebY5+2MnfbjGxzz+47IGrhkbo/W2sBhCJOH+25pwmN/imZSokIhiKbZAaPidnzhPIVaV8uBXnjClmNH9GJS+ZSuXpWsnc+RBlJ3TwZl5GGqKFL0nX7GXiUS/n7tJvSETjk6ScjfkoP6WRr4iY43VW6bB0maSdyj6SB7LXK6wcmW/v/nHEVATY+J+w4UJcTTddyVF34ol5eJWUhPtNWwCWdWuLSSWq7l0XfsqHdeqFWGuEMMPqWbqEvpJqBM+ZpXnm/KuQ93R8oy3T7k1swil7AjRz60T138Xx/DI2IBd+GBdZEyQhegzmsvfyS2WKD6yiuK5rXCEGDJQeN9apD0P24YXDopcTLh0m/unlmlfvT6AoyJ6+2vaIJgmjXnpXq7a/j0AIEX+26a4DLBayxKJAtxNr4o2w+tVRvV97FM1A1K8HlpcmLr4zCSGWBej0sXPCwGA9fRKjR7qn078Sj6Mrv/m9M+mcJcvBuppQqUSErYGMpv5DeCV9xyGXy//YH9YTBAUKZIrOOTYhi9ywVsVttzXgBiMP+6BUPQBxnyoe8lFMHD8ILilY88Jxo/j6+6sVRTQ3IjhdC5rWk1+7xUdmVvhY5bX2UoqaPyNk29h8kLtb4kvAbOghJqWEjeb8Q0r8z0U++ejyI9HARFHVVwQbc0NwS/Q6TNBtaFyA6c0JtGdV1eJRLNA==
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DBAPR08MB5576.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230001)(4636009)(366004)(66946007)(91956017)(66556008)(76116006)(66476007)(66446008)(64756008)(8676002)(5660300002)(86362001)(55236004)(7116003)(508600001)(55016003)(71200400001)(6506007)(186003)(4744005)(26005)(3480700007)(38100700002)(122000001)(83380400001)(6916009)(2906002)(316002)(52536014)(38070700005)(9686003)(33656002)(7696005)(19627405001)(8936002); DIR:OUT; SFP:1101;
Content-Type: multipart/alternative; boundary="_000_DBAPR08MB557624F9BAAD36604E4833F3EA169DBAPR08MB5576eurp_"
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB8PR08MB3963
Original-Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT055.eop-EUR03.prod.protection.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs: d3238a5e-e986-4939-ba23-08da0b2c9397
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(13230001)(4636009)(40470700004)(46966006)(36840700001)(86362001)(316002)(6916009)(70206006)(70586007)(82310400004)(83380400001)(336012)(186003)(26005)(5660300002)(7116003)(3480700007)(8676002)(55016003)(6506007)(7696005)(9686003)(356005)(2906002)(8936002)(52536014)(40460700003)(19627405001)(36860700001)(33656002)(508600001)(81166007)(47076005); DIR:OUT; SFP:1101;
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Mar 2022 11:18:59.8356 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 0facc2d6-124a-4df5-9449-08da0b2c98f7
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT055.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DU2PR08MB7287
Archived-At: <https://mailarchive.ietf.org/arch/msg/teep/MAXqHgcpLepOv5IPkgpdsIDjpaE>
Subject: [Teep] local attestation
X-BeenThere: teep@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement <teep.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/teep>, <mailto:teep-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/teep/>
List-Post: <mailto:teep@ietf.org>
List-Help: <mailto:teep-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/teep>, <mailto:teep-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 21 Mar 2022 11:19:09 -0000
I was asked to propose some text on local attestation. While it may be the case that an asset must sometimes be secret from the user, it is not the case that the user should know nothing about the asset; the end user should be able to verify the authenticity and integrity of the asset. To enable this, local attestation can be used to prove integrity to the user. The user can then use that integrity check to verify authenticity, for example by checking against a signature or by verifying the expected integrity check using conventional web pki. Thanks, Brendan IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.
- [Teep] local attestation Brendan Moran
- Re: [Teep] local attestation Smith, Ned
- Re: [Teep] local attestation Brendan Moran
- Re: [Teep] local attestation Smith, Ned