[Teep] Unique Identifier of TA_ID in TA_LIST for TEEP_QueryResponse

Akira Tsukamoto <akira.tsukamoto@aist.go.jp> Mon, 13 April 2020 05:46 UTC

Return-Path: <akira.tsukamoto@aist.go.jp>
X-Original-To: teep@ietfa.amsl.com
Delivered-To: teep@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C42213A0F38; Sun, 12 Apr 2020 22:46:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, MSGID_FROM_MTA_HEADER=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=aist.go.jp
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id smxUwTce0kBu; Sun, 12 Apr 2020 22:46:02 -0700 (PDT)
Received: from JPN01-TY1-obe.outbound.protection.outlook.com (mail-eopbgr1400079.outbound.protection.outlook.com [40.107.140.79]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE0793A0F37; Sun, 12 Apr 2020 22:46:01 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=nsdpUUzJXCms1aVDMGwt09lJoO/9VNTiWkSED57thNfeG0pnS5EgSYrsG1Qfvq6EYNeADiQSYMSfoiwBmno5UhsxQVX0GKqQPdlNZMh3XJZoYHf1rAZGzHEw3hr6gc1HFqIY0hywFBaa8EQHK7qcXGXs8k219isJlDMnC2KUqTpF751C+H/eLokLhBWtgjfXpNRIFXdjmjcTINPVsj0g67MOxCcUVn+1jYu5p/m6VeaPJPlC+2CJ7O4+l1GQN9Fiu5gcH1Tpt3LpGj7RrzbZ4OgXzTMmn3E98+M+7QQJ9NPNtYcgQAfu+UYpacgFrRYgM1yK1KNlZEYZ4oxZ+iWoMg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=BPSu8CUNsz2SJYb7AZoRUrBm+Wnv6y9wduSVYffjaIE=; b=I/qAIbFeVwlTXZCj2ncIP9Qbzhu0EREKeMegk/O4zTh8XY9LKxDnyTesLdpxrYu3yiCv4B0uhphTN2oMpikzsrHslw2nHOQo6IWDfD/XmMbGeBptlnVnxWRzeeIKKUSEmoF5w5/RZOgaOm1kbb6F872fXWZMpap4s0vYyyE6MrLXm+tVvqiaNH6NfGyyu5vWQBPmL3ypVv8oRMNKHIyOXwdomPVtRhGzwKuJONUlPL4Rfq+7A6eZ+SZ26pkNEwsv+UVh+r6rnsQn+FkYfsNWpmhjNCwxxG+vvQXWR6we44NURVEvbuLE8Xn3N17fonTtxo6cbbcSR50dh88NudnWmg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=aist.go.jp; dmarc=pass action=none header.from=aist.go.jp; dkim=pass header.d=aist.go.jp; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=aist.go.jp; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=BPSu8CUNsz2SJYb7AZoRUrBm+Wnv6y9wduSVYffjaIE=; b=UdXqn2gY7dLSHILwe+w0UGl/pr84wSmWAbmx3DkxD2e3GPyvIFs5F9WwYk5V+z/KIbrU+VJ2caDuO81LR33rL8AM7oJCVVob3OfBQ86/Q1wzY9qQ7IYKsAzHbdo+yfPJzJs0NJQFrVgOwkaNdjnjufaiqpNd8WMOQej/9UtyudI=
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=akira.tsukamoto@aist.go.jp;
Received: from TYAPR01MB3406.jpnprd01.prod.outlook.com (20.178.140.147) by TYAPR01MB5514.jpnprd01.prod.outlook.com (20.180.230.76) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2900.19; Mon, 13 Apr 2020 05:45:58 +0000
Received: from TYAPR01MB3406.jpnprd01.prod.outlook.com ([fe80::df1:d999:dc75:cdf2]) by TYAPR01MB3406.jpnprd01.prod.outlook.com ([fe80::df1:d999:dc75:cdf2%7]) with mapi id 15.20.2900.015; Mon, 13 Apr 2020 05:45:58 +0000
To: teep <teep@ietf.org>, suit@ietf.org
From: Akira Tsukamoto <akira.tsukamoto@aist.go.jp>
Message-ID: <7526678c-9ebc-e265-514c-435dce7595bc@aist.go.jp>
Date: Mon, 13 Apr 2020 14:45:58 +0900
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.4.1
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Language: en-US
Content-Transfer-Encoding: 7bit
X-ClientProxiedBy: TYCPR01CA0027.jpnprd01.prod.outlook.com (2603:1096:405:1::15) To TYAPR01MB3406.jpnprd01.prod.outlook.com (2603:1096:404:cc::19)
MIME-Version: 1.0
X-MS-Exchange-MessageSentRepresentingType: 1
Received: from [192.168.1.153] (217.178.18.13) by TYCPR01CA0027.jpnprd01.prod.outlook.com (2603:1096:405:1::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2900.15 via Frontend Transport; Mon, 13 Apr 2020 05:45:58 +0000
X-Originating-IP: [217.178.18.13]
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-HT: Tenant
X-MS-Office365-Filtering-Correlation-Id: 2fef47d2-6a5a-4eb0-d834-08d7df6df104
X-MS-TrafficTypeDiagnostic: TYAPR01MB5514:
X-Microsoft-Antispam-PRVS: <TYAPR01MB55146CA9125EE498E40EFF9FD8DD0@TYAPR01MB5514.jpnprd01.prod.outlook.com>
X-MS-Oob-TLC-OOBClassifiers: OLM:9508;
X-Forefront-PRVS: 037291602B
X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:TYAPR01MB3406.jpnprd01.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(10009020)(4636009)(376002)(366004)(39860400002)(136003)(396003)(346002)(450100002)(2906002)(5660300002)(31696002)(26005)(186003)(52116002)(16526019)(86362001)(66556008)(36756003)(81156014)(44832011)(956004)(478600001)(16576012)(6486002)(31686004)(8676002)(8936002)(316002)(966005)(66946007)(2616005)(66476007)(222643001); DIR:OUT; SFP:1101;
Received-SPF: None (protection.outlook.com: aist.go.jp does not designate permitted sender hosts)
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-MS-Exchange-AntiSpam-MessageData: L54ICQ4grLObfectLX+qBHMkumP5FzzT5uOX3msZUxFaErtLGLL1jpGV2edhSjJXsLKzK8+rKh79nbsXRqmMRZMZpC/MGQMHFygqCVo7ET6e0GA4sG9M76dtBQyaoolXT3MWmepB+EI8PcLcV4CESw==
X-OriginatorOrg: aist.go.jp
X-MS-Exchange-CrossTenant-Network-Message-Id: 2fef47d2-6a5a-4eb0-d834-08d7df6df104
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Apr 2020 05:45:58.5449 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 18a7fec8-652f-409b-8369-272d9ce80620
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 8POw/uxzOhjoCoIYad5fcAVGiPaPSWDWuKL70yNUZpBfm1iBL0m5PVEWUHPsbFnn4sCwzPDz5+Io1TMadKNmCMey7nWVSv2lSTWP9rhKFvg=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: TYAPR01MB5514
Archived-At: <https://mailarchive.ietf.org/arch/msg/teep/nNpoH4wROFUSu5BnXv9ZcS7JIwc>
Subject: [Teep] Unique Identifier of TA_ID in TA_LIST for TEEP_QueryResponse
X-BeenThere: teep@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement <teep.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/teep>, <mailto:teep-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/teep/>
List-Post: <mailto:teep@ietf.org>
List-Help: <mailto:teep-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/teep>, <mailto:teep-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 13 Apr 2020 05:46:06 -0000

Hi all,

I would like to restart the discussion of Unique Identifier of TA_ID in
TEEP's QueryResponse which was one of the item came up at TEEP interim meeting
last week.

The discussion started between the Hackathon in Singapore and Berlin.

This is the link to the github.
https://github.com/ietf-teep/teep-protocol/issues/4

After going though again, I started to have my preference.

The usage of TA_ID in TEEP message is to distinguish the required TA in the device
by parsing of identification id.
The it will be good to be able to match the TA with one bstr for one TA.

I started to think hash value might work.
Using the hash value from the properties of Parameters in Section 5.4.1
in SUIT CBOR Manifest for each TA.

The generating hash from adding all the properties.
These are the requited parameters.
    -  Vendor ID.
    -  Class ID. # Could be file name for SGX, uuid for op-tee. uuid is used
                   as file name in op-tee anyway
    -  Image Digest. # This is version of TA
It is up to the user who would like to add optional parameters for the seed.

We have to consider which hash function to use too, and easiest to come up
is probably sha256.
The hash value of sha256 is 32 bytes which is still going to be second largest
member than NONCE in TEEP message.
I prefer smaller bytes to reduce the teep message size but raw parameters of
all three above would be larger than 32bytes, so it may be acceptable.

The purpose of the hash value here is mainly for
prevent colliding between different TAs or different version in the TAM server.

-Akira