Message-ID: <4b968f77-631e-4d26-a86d-280dd9aee66e@tu-dresden.de>
Date: Mon, 21 Sep 2026 16:48:27 +0200
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Content-Language: en-US
From: Muhammad Usama Sardar <muhammad_usama.sardar@tu-dresden.de>
To: UFMRG IRTF <ufmrg@irtf.org>
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
	micalg=sha-512; boundary="------------ms050004050502020909020607"
Message-ID-Hash: RSY2M3HHPW4NMUGKGHJZ47AJHFMRPYVT
Precedence: list
Subject: [Ufmrg] =?utf-8?q?EarlyAttestationBleed=3A_Three_Critical-severity_Vulnerabi?=
	=?utf-8?q?lities_of_CVSS_=E2=89=A5_9=2E0_in_Confidential_Computing?=
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/ufmrg/ZQKdp07P4UeTushAC1q9eBBtp0s>

--------------ms050004050502020909020607
Content-Type: multipart/alternative;
 boundary="------------5ayKu9AF4ZuQcD4grr0gKaWB"

--------------5ayKu9AF4ZuQcD4grr0gKaWB
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64
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--------------5ayKu9AF4ZuQcD4grr0gKaWB
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html>
<html>
  <head>

    <meta http-equiv=3D"content-type" content=3D"text/html; charset=3DUTF=
-8">
  </head>
  <body>
    <p>Hi all,</p>
    <p># <b>Context</b></p>
    <p>At SEAL chartering time, IESG (e.g., [0]) and IETF participants
      (e.g., [1]) requested operational guidance for attested TLS. We
      did some relevant formal analysis and would like to share our
      paper presenting the results of our analysis with the RG for
      feedback and for information of other implementers to secure their
      systems.<br>
    </p>
    <p># <b>Key Findings</b> <br>
    </p>
    <p>Our paper covers the following two implementations of early
      attestation:</p>
    <p>## <b>1. Ultraviolet Cocos AI</b><br>
    </p>
    <p>Ultraviolet claimed to be the most secure attested TLS solution
      in Confidential Computing Consortium (CCC). We discovered two
      critical-severity [2] (CVSS 9.1) vulnerabilities in their
      implementation of early attestation. Published GitHub Security
      Advisories (GHSAs) [3,4] are quite detailed and explicitly cite
      arguments against draft-fossati-seat-early-attestation. So we
      won't repeat that here.=C2=A0</p>
    <p>Moreover, two CVEs of CVSS 9.1 have been issued: CVE-2026-92701
      [5] and CVE-2026-92702 [6].</p>
    <p>## <b>2. Edgeless Systems Contrast</b><br>
    </p>
    <p>Edgeless Systems was awarded second place in the cybersecurity
      category of the WirtschaftsWoche=E2=80=99s well-known "Best of Tech=
nology
      Awards" this year [7]. We analyzed its attested TLS solution named
      Contrast, and found a critical vulnerability in the CVSS range 9.0
      to the maximum possible 10.0. GHSA on this is published [8]. <br>
    </p>
    <p># <b>Discovery Methodology</b> <br>
    </p>
    <ul>
      <li>Formal analysis using state-of-the-art tool ProVerif<br>
      </li>
      <li>Implementation-level regression tests for confirmation</li>
      <li>Reviewed and confirmed by developers</li>
      <li>GHSAs published [3,4]<br>
      </li>
      <li>CVEs issued [5,6]</li>
      <li>Contrast maintainers have requested CVE for GHSA [8]; review
        by GitHub is in progress for issuing the CVE<br>
      </li>
    </ul>
    <p># <b>Ethical Considerations</b></p>
    <p>We kept the vulnerabilities under strict <i>responsible
        disclosure</i> until confirmed and published by the developers.
      Cocos AI has moved to post-handshake attestation, while Edgeless
      Systems currently maintains early attestation.</p>
    <p># <b>Paper</b> <br>
    </p>
    <p>Please see [9].<br>
    </p>
    <p># <b>Acknowledgments</b></p>
    <ul>
      <li>Cocos AI maintainers (Sammy Kerata Oina and Drasko Draskovic)</=
li>
      <li>Edgeless Systems Contrast maintainer (Markus Rudy)</li>
      <li>Bertrand Foing</li>
      <li>Rebekah Overdorf and Tobias Pulls<br>
      </li>
    </ul>
    <p>We welcome any feedback and collaborators for further research on
      this topic. We surely need your help.<br>
    </p>
    <p>Best regards, </p>
    <p>-Usama and Songbo<br>
    </p>
    <p><br>
    </p>
    <p>PS: The name is inspired from Heartbleed, which was CVSS 7.5.
      CVSS 9.1 and 9.0-10.0 is surely more bleeding than Heartbleed.</p>
    <p><br>
    </p>
    <p>[0] <a class=3D"moz-txt-link-freetext"
href=3D"https://mailarchive.ietf.org/arch/msg/seal/BJmfAFQxap4tDNfNbCbhRf=
GwJ3s/">https://mailarchive.ietf.org/arch/msg/seal/BJmfAFQxap4tDNfNbCbhRf=
GwJ3s/</a></p>
    <p>[1] <a class=3D"moz-txt-link-freetext"
href=3D"https://mailarchive.ietf.org/arch/msg/seal/oNtTWnQ409zxqYYbWHNeUf=
lcC3s/">https://mailarchive.ietf.org/arch/msg/seal/oNtTWnQ409zxqYYbWHNeUf=
lcC3s/</a></p>
    <p>[2] <a class=3D"moz-txt-link-freetext"
        href=3D"https://nvd.nist.gov/vuln-metrics/cvss">https://nvd.nist.=
gov/vuln-metrics/cvss</a></p>
    <p>[3]
      <a class=3D"moz-txt-link-freetext"
href=3D"https://github.com/ultravioletrs/cocos/security/advisories/GHSA-4=
px3-wj2x-xx47">https://github.com/ultravioletrs/cocos/security/advisories=
/GHSA-4px3-wj2x-xx47</a></p>
    <p>[4]
      <a class=3D"moz-txt-link-freetext"
href=3D"https://github.com/ultravioletrs/cocos/security/advisories/GHSA-4=
r6g-mp48-j2rw">https://github.com/ultravioletrs/cocos/security/advisories=
/GHSA-4r6g-mp48-j2rw</a></p>
    <p>[5] <a class=3D"moz-txt-link-freetext" href=3D"https://www.cve.org=
/CVERecord?id=3DCVE-2026-92701">https://www.cve.org/CVERecord?id=3DCVE-20=
26-92701</a></p>
    <p>[6] <a class=3D"moz-txt-link-freetext" href=3D"https://www.cve.org=
/CVERecord?id=3DCVE-2026-92702">https://www.cve.org/CVERecord?id=3DCVE-20=
26-92702</a></p>
    <p>[7] <a class=3D"moz-txt-link-freetext" href=3D"https://award.wiwo.=
de/bot/gewinner-2026/">https://award.wiwo.de/bot/gewinner-2026/</a></p>
    <p>[8]
<a class=3D"moz-txt-link-freetext" href=3D"https://github.com/edgelesssys=
/contrast/security/advisories/GHSA-m2qg-wrxv-h898">https://github.com/edg=
elesssys/contrast/security/advisories/GHSA-m2qg-wrxv-h898</a></p>
    <p>[9]
<a class=3D"moz-txt-link-freetext" href=3D"https://www.researchgate.net/p=
ublication/414529199_EarlyAttestationBleed_Three_Critical-severity_Vulner=
abilities_of_CVSS_90_in_Confidential_Computing">https://www.researchgate.=
net/publication/414529199_EarlyAttestationBleed_Three_Critical-severity_V=
ulnerabilities_of_CVSS_90_in_Confidential_Computing</a><br>
    </p>
    <p></p>
  </body>
</html>

--------------5ayKu9AF4ZuQcD4grr0gKaWB--

--------------ms050004050502020909020607
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms050004050502020909020607--