From nobody Sat Jan 27 11:53:01 2018 Return-Path: X-Original-To: teep@ietf.org Delivered-To: teep@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CC0D1200B9; Sat, 27 Jan 2018 11:52:59 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: Kathleen.Moriarty.ietf@gmail.com, teep@ietf.org, dthaler@dthaler.microsoft.com, teep-chairs@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.70.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <151708277908.30950.6580063944156220095.idtracker@ietfa.amsl.com> Date: Sat, 27 Jan 2018 11:52:59 -0800 Archived-At: Subject: [Teep] teep - New Meeting Session Request for IETF 101 X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.22 List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 27 Jan 2018 19:52:59 -0000 A new meeting session request has just been submitted by Dave Thaler, a Chair of the teep working group. --------------------------------------------------------- Working Group Name: Trusted Execution Environment Provisioning Area Name: Security Area Session Requester: Dave Thaler Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 100 Conflicts to Avoid: First Priority: suit ace core mile oauth Second Priority: t2trg lwig saag tls opsawg anima Third Priority: v6ops 6man intarea People who must be present: Dave Thaler Kathleen Moriarty Nancy Cam-Winget Resources Requested: Special Requests: We are trying to charter before London and this is a placeholder for a room request. --------------------------------------------------------- From nobody Mon Jan 29 13:59:36 2018 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5A7E12D7F0 for ; Mon, 29 Jan 2018 13:59:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ECPQn-54C7PN for ; Mon, 29 Jan 2018 13:59:33 -0800 (PST) Received: from mail-pg0-x231.google.com (mail-pg0-x231.google.com [IPv6:2607:f8b0:400e:c05::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC0F912EAB4 for ; Mon, 29 Jan 2018 13:59:32 -0800 (PST) Received: by mail-pg0-x231.google.com with SMTP id 136so5528187pgd.8 for ; Mon, 29 Jan 2018 13:59:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=Uqu30eiBHHx7t0+9YdnStkIjxtrU3L5sd9o5oI62yqI=; b=A0hUuiM9/bYnfZnOW6vN99WBLDU7kXQrSb5WIPfSSk/R8tqa5gDALxR50Kmn6AdD77 4SldkLhnxNcH82Fw3aoyg6AZ2xuw21YWWU4A17KLvD+rXI9Myt9slI3QQe3mxke5TNlJ yHBSuX3c63/q5Ko8w0gtjv45rGGlHEquqd/wRlDniqQ6DvtB+oMP3Y21TcYpDsVF5G1p onGPtuWEk+bRBwN+d5QHOtPYwCBUsPpkY777ywWCaIx7E+oJcN5TXivHK8WcyGgY0DOb X6kmk6YE0kPjI0i5+VICjUZcEo6jtE8C6/sAe0STMcfEyNhY3ho3gWnt0eY4m6YEaE2v j7uQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=Uqu30eiBHHx7t0+9YdnStkIjxtrU3L5sd9o5oI62yqI=; b=D3CVrpPyriRSHr3ywxZkps/qdtakImt1n8au2Jd3RV0FB2Rhou8T24xWA0jrSVoNmP oLev6nNlrKfPxSdh8pTH6/B3PfCNglnXhFbnoW+e5FPUSxxaScJcoG2lbvoxy3D6n8rU ILQ+QGyZwprRhVtyM+2W07uKJg6lmunCGWnVu+lMZqhncEJLG55V26P18xqMgCHp35hM uNpjI64ZbqHhm8M1uyDBa+DdZWctMzGLCZNe4GzSrIuL+WU36R2lOWPMLy9Z8dimtAZd Qt2dRFmv2/i7SSCpdm0hfKuCuhVxeBFF5odFJ60sN2rKohaYiE+pCefc779nieVAcaPV 152g== X-Gm-Message-State: AKwxytfuEg4R6xDLY33Zb6hSZqnH2xIYD8cSm+KFAoF3VIemWw9EkFks KMT9nuagYUo9fTKIHHh4h3npYce/16qzz1TMPUUrFw== X-Google-Smtp-Source: AH8x226Kw5QZ4oeU3zkRJfo4PSuri5hE5KL67jrXNlG2Rse2Rq9y5LEpetGtpsL6ecIMTw5oSnQMOCY1Fsrpqd2kbpU= X-Received: by 10.101.96.78 with SMTP id b14mr22886180pgv.339.1517263172362; Mon, 29 Jan 2018 13:59:32 -0800 (PST) MIME-Version: 1.0 Received: by 10.100.186.143 with HTTP; Mon, 29 Jan 2018 13:58:51 -0800 (PST) From: Kathleen Moriarty Date: Mon, 29 Jan 2018 16:58:51 -0500 Message-ID: To: teep Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [Teep] TEEP go forward plan and charter text X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jan 2018 21:59:36 -0000 Hello, With agreement from IETF 100 that there is sufficient effort to work on TEEP and now a better understanding from GP, I think we are in a position to firm up charter text and to try to charter a working group prior to London. With that, we'll need to look at the charter text and be sure we have agreement, before I can kick off review within the IESG. I *think* the last charter text is what was entered on the TEEP page, but am open to be corrected. That should be our starting point for discussion. I think the BoF chairs will be able to assist with this process, but I'm not positive on their schedules. As such it may be a mix of the chairs and AD working on this to see if we can get agreement on charter text. https://datatracker.ietf.org/doc/charter-ietf-teep/ Copied here for your convenience: The Trusted Execution Environment (TEE) is a secure area of a processor. The TEE provides security features, such as isolated execution, integrity of Trusted Applications along with confidentiality of their assets. In general terms, the TEE offers an execution space that provides a higher level of security than a "rich" operating system and more functionality than a secure element. For example, implementations of the TEE concept have been developed by ARM, and Intel using the TrustZone and the SGX technology, respectively. To programmatically install, update, and delete applications running in the TEE, this protocol runs between a service running within the TEE, a relay application or service access point on the device's network stack and a server-side infrastructure that interacts with and optionally maintains the applications. Some tasks are security sensitive and the server side requires information about the device characteristics in form of attestation and the device-side may require information about the server. Privacy considerations have to be taken into account with authentication features and attestation. This working group aims to develop an application layer protocol providing TEEs with the following functionality, * lifecycle management of trusted applications, and * security domain management. A security domain allows a service provider's applications to be isolated so that one security domain cannot be influenced by another, unless it exposes an API to allow it. The solution approach must take a wide range of TEE and relevant technologies into account and will focus on the use of public key cryptography. The group will produce the following deliverables. First, an architecture document describing the involved entities, their relationships, assumptions, the keying framework and relevant use cases. Second, a solution document that describes the above-described functionality. The choice of encoding format(s) will be decided in the working group. The group may document several attestation technologies considering the different hardware capabilities, performance, privacy and operational properties. The group will maintain a close relationship with the GlobalPlatform, Trusted Computing Group, and other relevant standards to ensure proper use of existing TEE-relevant application layer interfaces. -- Best regards, Kathleen From nobody Tue Jan 30 19:49:39 2018 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C63B1314EA for ; Tue, 30 Jan 2018 19:49:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id loiy1bW4Km67 for ; Tue, 30 Jan 2018 19:49:33 -0800 (PST) Received: from mail-pf0-x230.google.com (mail-pf0-x230.google.com [IPv6:2607:f8b0:400e:c00::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8FF341314DE for ; Tue, 30 Jan 2018 19:49:33 -0800 (PST) Received: by mail-pf0-x230.google.com with SMTP id 17so9829393pfw.11 for ; Tue, 30 Jan 2018 19:49:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=+2GO69MN2cLY8+c50bA8QmZXse9TB9hAua4s4eNbSis=; b=ePvU6KPgHIS274J1Ue9TbLowfkKH60YNY141R3lBze5wM/AtdpCYi9tiaWPkY16hOP 8dZasKlDlTP3gF2eGPX918glUXz3wRT/iU2uejRlN0rL+zXlQgtoQqqiP/ULZn+KjBz6 DkWLtsChpBK9NPjro/5j8wZqfeu/tVRmPMt9pWYrTG5Eww/HyqK1/U1WtdCNKRNgMUsm eO30LCCzMUyyQOLM46b7qRmXZsMXeVmrytoyG54z0LEURnM3WiC/7dhJxRWSg2+Ao4km 3v7r0HiBmw2FOpiP+5EveJnoVo7ZEaeHypecfM4VgYWUi9mZ4jmePhKj8A7SWzmQiHUV up6Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=+2GO69MN2cLY8+c50bA8QmZXse9TB9hAua4s4eNbSis=; b=HsDktIiYWm24ggltRBQXpCPhE2Hp8vsMV/W6wZnKepvily5QILF7LFBCemOYpYK/vk 5YqcZhwzJTHIdZ7Ixvs3rCMLlruHsGzc5l5AHmTxAp9aTJ/3PJSnVIaMpA3fRa3AP7Xh IoGVTDovvBjEej4nTt5osZ5ug5TwjYF6K/rDIGkyg09AgBSfDyivkwTKbBqpXCw0L4Ue HpKV560s6KaVFNylOxl2OwYOuaAMOy9n8+WgHTkREyevcLoJz4z4/93ItHfvN1hzNJnn OZDPkoltElpEZfGiifrrkkm0H+HNyeZJEbxnpR7yXKOiAStafxEEVxLdd69RqCVKOdA4 wwOQ== X-Gm-Message-State: AKwxytcz5rlpr1ADFe01cZv2gdtiOnjTAf4t9W80SD9mQ7ec5jmUdoOy oQORqxJeQPNnxat2Xs22abeVNpo4/dsJbiaijwwMtA== X-Google-Smtp-Source: AH8x226iXxUyuWA/N7sUiFU87BaKkhtgP3ra1sclXETMKlv7pD0DlxcMIpMrf7FuqObxDdLUkKQfO3DEnpW8gGIT3zk= X-Received: by 10.101.102.3 with SMTP id w3mr25486157pgv.326.1517370572926; Tue, 30 Jan 2018 19:49:32 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: Dapeng Liu Date: Wed, 31 Jan 2018 03:49:22 +0000 Message-ID: To: Kathleen Moriarty Cc: teep Content-Type: multipart/alternative; boundary="089e082a1278fdf3b005640a5dd6" Archived-At: Subject: Re: [Teep] TEEP go forward plan and charter text X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jan 2018 03:49:37 -0000 --089e082a1278fdf3b005640a5dd6 Content-Type: text/plain; charset="UTF-8" Hello Kathleen, The charter looks good for me. Thanks! Regards, Dapeng Liu On Tue, Jan 30, 2018 at 5:59 AM Kathleen Moriarty < kathleen.moriarty.ietf@gmail.com> wrote: > Hello, > > With agreement from IETF 100 that there is sufficient effort to work > on TEEP and now a better understanding from GP, I think we are in a > position to firm up charter text and to try to charter a working group > prior to London. With that, we'll need to look at the charter text > and be sure we have agreement, before I can kick off review within the > IESG. > > I *think* the last charter text is what was entered on the TEEP page, > but am open to be corrected. That should be our starting point for > discussion. I think the BoF chairs will be able to assist with this > process, but I'm not positive on their schedules. As such it may be a > mix of the chairs and AD working on this to see if we can get > agreement on charter text. > > https://datatracker.ietf.org/doc/charter-ietf-teep/ > > Copied here for your convenience: > > The Trusted Execution Environment (TEE) is a secure area of a processor. > The TEE provides security features, such as isolated execution, integrity > of > Trusted Applications along with confidentiality of their assets. In general > terms, the TEE offers an execution space that provides a higher level of > security than a "rich" operating system and more functionality than a > secure > element. For example, implementations of the TEE concept have been > developed by ARM, and Intel using the TrustZone and the SGX > technology, respectively. > > To programmatically install, update, and delete applications running in the > TEE, this protocol runs between a service running within the TEE, a relay > application or service access point on the device's network stack and a > server-side infrastructure that interacts with and optionally maintains the > applications. Some tasks are security sensitive and the server side > requires > information about the device characteristics in form of attestation and the > device-side may require information about the server. > > Privacy considerations have to be taken into account with authentication > features and attestation. > > This working group aims to develop an application layer protocol providing > TEEs > with the following functionality, * lifecycle management of trusted > applications, and * security domain management. > > A security domain allows a service provider's applications to be isolated > so > that one security domain cannot be influenced by another, unless it > exposes an > API to allow it. > > The solution approach must take a wide range of TEE and relevant > technologies > into account and will focus on the use of public key cryptography. > > The group will produce the following deliverables. First, an architecture > document describing the involved entities, their relationships, > assumptions, > the keying framework and relevant use cases. Second, a solution document > that > describes the above-described functionality. The choice of encoding > format(s) > will be decided in the working group. The group may document several > attestation technologies considering the different hardware capabilities, > performance, privacy and operational properties. > > The group will maintain a close relationship with the GlobalPlatform, > Trusted > Computing Group, and other relevant standards to ensure proper use of > existing > TEE-relevant application layer interfaces. > > > -- > > Best regards, > Kathleen > > _______________________________________________ > TEEP mailing list > TEEP@ietf.org > https://www.ietf.org/mailman/listinfo/teep > --089e082a1278fdf3b005640a5dd6 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello Kathleen,

The charter looks good = for me.=C2=A0

Thanks!

Reg= ards,
Dapeng Liu

On Tue, Jan 30, 2018 at 5:59 AM Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> = wrote:
Hello,

With agreement from IETF 100 that there is sufficient effort to work
on TEEP and now a better understanding from GP, I think we are in a
position to firm up charter text and to try to charter a working group
prior to London.=C2=A0 With that, we'll need to look at the charter tex= t
and be sure we have agreement, before I can kick off review within the
IESG.

I *think* the last charter text is what was entered on the TEEP page,
but am open to be corrected.=C2=A0 That should be our starting point for discussion.=C2=A0 I think the BoF chairs will be able to assist with this process, but I'm not positive on their schedules.=C2=A0 As such it may = be a
mix of the chairs and AD working on this to see if we can get
agreement on charter text.

https://datatracker.ietf.org/doc/charter-ietf-tee= p/

Copied here for your convenience:

The Trusted Execution Environment (TEE) is a secure area of a processor. The TEE provides security features, such as isolated execution, integrity o= f
Trusted Applications along with confidentiality of their assets. In general=
terms, the TEE offers an execution space that provides a higher level of security than a "rich" operating system and more functionality th= an a secure
element. For example, implementations of the TEE concept have been
developed by ARM, and Intel using the TrustZone and the SGX
technology, respectively.

To programmatically install, update, and delete applications running in the=
TEE, this protocol runs between a service running within the TEE, a relay application or service access point on the device's network stack and a=
server-side infrastructure that interacts with and optionally maintains the=
applications. Some tasks are security sensitive and the server side require= s
information about the device characteristics in form of attestation and the=
device-side may require information about the server.

Privacy considerations have to be taken into account with authentication features and attestation.

This working group aims to develop an application layer protocol providing = TEEs
with the following functionality, * lifecycle management of trusted
applications, and * security domain management.

A security domain allows a service provider's applications to be isolat= ed so
that one security domain cannot be influenced by another, unless it exposes= an
API to allow it.

The solution approach must take a wide range of TEE and relevant technologi= es
into account and will focus on the use of public key cryptography.

The group will produce the following deliverables. First, an architecture document describing the involved entities, their relationships, assumptions= ,
the keying framework and relevant use cases. Second, a solution document th= at
describes the above-described functionality. The choice of encoding format(= s)
will be decided in the working group. The group may document several
attestation technologies considering the different hardware capabilities, performance, privacy and operational properties.

The group will maintain a close relationship with the GlobalPlatform, Trust= ed
Computing Group,=C2=A0 and other relevant standards to ensure proper use of= existing
TEE-relevant application layer interfaces.


--

Best regards,
Kathleen

_______________________________________________
TEEP mailing list
TEEP@ietf.org
https://www.ietf.org/mailman/listinfo/teep
--089e082a1278fdf3b005640a5dd6-- From nobody Wed Jan 31 08:21:49 2018 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C982B13186E for ; Wed, 31 Jan 2018 08:21:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.92 X-Spam-Level: X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gy30g7x5hGUK for ; Wed, 31 Jan 2018 08:21:45 -0800 (PST) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30078.outbound.protection.outlook.com [40.107.3.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA62D131B0A for ; Wed, 31 Jan 2018 08:18:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=vJ6r+VVNwDf5YaujKPNKgp+hWTac9PdRc6omdnxu/Z8=; b=OSTFk40RCs3zVmkMB2sxvgf18YuDbppqNS7ErLqrsCkxZL/sq81JiUFA7/5nbf49B5ihPaY2oMG0WhQ3RYIc9iwgZ0s/diuJ7oI/BxfPeuQaUtAsQycJXAQs5TlqHiiWOGWxQREkqvdZnn8w5Ctad8VqLQTUf9cSKWlO/B1osBM= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1428.eurprd08.prod.outlook.com (10.168.5.20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.444.14; Wed, 31 Jan 2018 16:18:03 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::b863:80d:692b:e64b]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::b863:80d:692b:e64b%14]) with mapi id 15.20.0444.016; Wed, 31 Jan 2018 16:18:03 +0000 From: Hannes Tschofenig To: Kathleen Moriarty , teep Thread-Topic: [Teep] TEEP go forward plan and charter text Thread-Index: AQHTmUx2xit8m12A3ECgrI2ywPIg0qOOJhjw Date: Wed, 31 Jan 2018 16:18:03 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.119.5] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1428; 7:yw7z0bmfMxtr65Cu6kPk8QwrI+YiHvx26vd9wHA9fwx11OohUyWOZ+0OxB8yXi2XHL+OL4J/8V0pw82aHvX6uuxgYJuE+WsT9HH13GF2oQ/fhO5E5mIJf5omLfosS9Sn0wN7gEOz6ZAzfgYkwdG2ahyDCoRhd4msJhrCotKVkTGyrFowB5HAebBJ1R+mV2+4RMCJROpOcWRdMsQKc2iVYjMiIpGwxNONCOZ4xuEy8/ndBkTUrNWn1f2kND4zKXnx x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 006741bd-f19e-4bfb-cb56-08d568c63440 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1428; x-ms-traffictypediagnostic: AM4PR0801MB1428: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(278428928389397)(120809045254105)(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(93006095)(93001095)(3231101)(2400082)(944501161)(3002001)(10201501046)(6055026)(6041288)(20161123564045)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(6072148)(201708071742011); SRVR:AM4PR0801MB1428; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1428; x-forefront-prvs: 056929CBB8 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(376002)(396003)(346002)(39860400002)(366004)(51914003)(199004)(189003)(495844002)(40434004)(13464003)(2950100002)(53936002)(110136005)(9686003)(99286004)(25786009)(33656002)(55016002)(6436002)(105586002)(316002)(39060400002)(7736002)(6306002)(2900100001)(74316002)(305945005)(5660300001)(102836004)(68736007)(966005)(3846002)(72206003)(3660700001)(6246003)(3280700002)(14454004)(81166006)(59450400001)(2906002)(6116002)(106356001)(8936002)(186003)(5890100001)(6506007)(66066001)(53546011)(86362001)(97736004)(76176011)(26005)(478600001)(229853002)(7696005)(5250100002)(81156014)(8676002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1428; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: oj49I7zcRN02FYovg3/xxvtYFDwPzhMx8f4Khy20ERTdggQQS0D6gqk75/YFHXsaoCeDkhmumr9ROg7pX8rC6A== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 006741bd-f19e-4bfb-cb56-08d568c63440 X-MS-Exchange-CrossTenant-originalarrivaltime: 31 Jan 2018 16:18:03.1174 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1428 Archived-At: Subject: Re: [Teep] TEEP go forward plan and charter text X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jan 2018 16:21:48 -0000 Hi Kathleen, Thanks for the update. It is good to hear that there is progress. The text below sounds good; I only have a few minor remarks: --- s/To programmatically install, update, and delete applications running in t= he TEE, this protocol runs between a service running within the TEE, a rela= y application or service access point on the device's network stack and a s= erver-side infrastructure that interacts with and optionally maintains the = applications. Some tasks are security sensitive and the server side require= s information about the device characteristics in form of attestation and t= he device-side may require information about the server./ To programmatical= ly install, update, and delete applications in a TEE, this protocol runs be= tween a service within the TEE, a relay application or service access point= on the device's network stack and a server-side infrastructure that intera= cts with and optionally maintains the applications. Some tasks are security= sensitive and the server side requires information about the device charac= teristics in form of attestation and the device-side may require informatio= n about the server. Reason: Just some wording changes to avoid repeated use of "running". --- --- s/This working group aims to develop an application layer protocol providin= g TEEs with the following functionality, * lifecycle management of trusted = applications, and * security domain management./ This working group aims to develop an application layer protocol providing = TEEs with lifecycle management of trusted applications. Reason: I would just simplify it and not go into the details. I believe tha= t this functionality is also covered in the lifecycle management of truste= d applications. --- --- s/The group will maintain a close relationship with the GlobalPlatform, Tru= sted Computing Group, and other relevant standards to ensure proper use of= existing TEE-relevant application layer interfaces./ The group will maintain a close relationship with the IETF SUIT working gro= up, GlobalPlatform, Trusted Computing Group, and other relevant standards t= o ensure proper use of existing TEE-relevant application layer interfaces. Reason: I want to explicitly state that this group has to work closely with= the SUIT WG to ensure proper alignment. --- Ciao Hannes -----Original Message----- From: TEEP [mailto:teep-bounces@ietf.org] On Behalf Of Kathleen Moriarty Sent: 29 January 2018 22:59 To: teep Subject: [Teep] TEEP go forward plan and charter text Hello, With agreement from IETF 100 that there is sufficient effort to work on TEE= P and now a better understanding from GP, I think we are in a position to f= irm up charter text and to try to charter a working group prior to London. = With that, we'll need to look at the charter text and be sure we have agre= ement, before I can kick off review within the IESG. I *think* the last charter text is what was entered on the TEEP page, but a= m open to be corrected. That should be our starting point for discussion. = I think the BoF chairs will be able to assist with this process, but I'm n= ot positive on their schedules. As such it may be a mix of the chairs and = AD working on this to see if we can get agreement on charter text. https://datatracker.ietf.org/doc/charter-ietf-teep/ Copied here for your convenience: The Trusted Execution Environment (TEE) is a secure area of a processor. The TEE provides security features, such as isolated execution, integrity o= f Trusted Applications along with confidentiality of their assets. In gener= al terms, the TEE offers an execution space that provides a higher level of= security than a "rich" operating system and more functionality than a secu= re element. For example, implementations of the TEE concept have been devel= oped by ARM, and Intel using the TrustZone and the SGX technology, respecti= vely. To programmatically install, update, and delete applications running in the= TEE, this protocol runs between a service running within the TEE, a relay = application or service access point on the device's network stack and a ser= ver-side infrastructure that interacts with and optionally maintains the ap= plications. Some tasks are security sensitive and the server side requires = information about the device characteristics in form of attestation and the= device-side may require information about the server. Privacy considerations have to be taken into account with authentication fe= atures and attestation. This working group aims to develop an application layer protocol providing = TEEs with the following functionality, * lifecycle management of trusted ap= plications, and * security domain management. A security domain allows a service provider's applications to be isolated s= o that one security domain cannot be influenced by another, unless it expos= es an API to allow it. The solution approach must take a wide range of TEE and relevant technologi= es into account and will focus on the use of public key cryptography. The group will produce the following deliverables. First, an architecture d= ocument describing the involved entities, their relationships, assumptions,= the keying framework and relevant use cases. Second, a solution document t= hat describes the above-described functionality. The choice of encoding for= mat(s) will be decided in the working group. The group may document several= attestation technologies considering the different hardware capabilities, = performance, privacy and operational properties. The group will maintain a close relationship with the GlobalPlatform, Trust= ed Computing Group, and other relevant standards to ensure proper use of e= xisting TEE-relevant application layer interfaces. -- Best regards, Kathleen _______________________________________________ TEEP mailing list TEEP@ietf.org https://www.ietf.org/mailman/listinfo/teep IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Wed Jan 31 15:13:11 2018 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4C98126D85 for ; Wed, 31 Jan 2018 15:13:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.009 X-Spam-Level: X-Spam-Status: No, score=-7.009 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nFWm5xKzqaAz for ; Wed, 31 Jan 2018 15:13:07 -0800 (PST) Received: from sabertooth01.qualcomm.com (sabertooth01.qualcomm.com [65.197.215.72]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 35FE3124BE8 for ; Wed, 31 Jan 2018 15:13:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1517440387; x=1548976387; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=uHeaTjktwWV2X3/bmHQj/LR7yIndJIxjJnZxPVy3L6I=; b=iiIRWo895cGTwhMURv58X82gUoEf9wdAyr8XhB1hHvSmlYNR7mnSy9Ta sBjINW2fPTQjiRl71hi3SzK0qErNZk4fLs3183Bv/YO6CgBXWhHJUvAfe EnrQg4mP0Bj4Vzkn0/tzH27gUwF2IdwyQclrZJqc5AgoWMBhPTMctLxqv k=; X-IronPort-AV: E=Sophos;i="5.46,441,1511856000"; d="scan'208,217";a="123256675" Received: from unknown (HELO ironmsg02-sd.qualcomm.com) ([10.53.140.142]) by sabertooth01.qualcomm.com with ESMTP; 31 Jan 2018 15:13:06 -0800 X-MGA-submission: =?us-ascii?q?MDFdss4zpxNTZaTpjNFTS7gFznaCojSl5lKYVM?= =?us-ascii?q?iaF6h20tMNDPz24iBdnVlsrVsHbz5h8wjpH26qQ6UP5KYZpjneoBfLRM?= =?us-ascii?q?63xVK6rg6YEPI7GUWfaG7T+w2kRVlSR3ALMkEUqLCQ5QBP3X5g1Q0Cu6?= =?us-ascii?q?l3?= Received: from nasanexm01h.na.qualcomm.com ([10.85.0.34]) by ironmsg02-sd.qualcomm.com with ESMTP/TLS/AES256-SHA; 31 Jan 2018 15:13:05 -0800 Received: from euamsexm01b.eu.qualcomm.com (10.251.127.41) by NASANEXM01H.na.qualcomm.com (10.85.0.34) with Microsoft SMTP Server (TLS) id 15.0.1293.2; Wed, 31 Jan 2018 15:13:04 -0800 Received: from euamsexm01a.eu.qualcomm.com (10.251.127.40) by euamsexm01b.eu.qualcomm.com (10.251.127.41) with Microsoft SMTP Server (TLS) id 15.0.1293.2; Thu, 1 Feb 2018 00:13:01 +0100 Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by euamsexm01a.eu.qualcomm.com ([10.251.127.40]) with mapi id 15.00.1293.002; Thu, 1 Feb 2018 00:13:01 +0100 From: Jeremy O'Donoghue To: Hannes Tschofenig CC: Kathleen Moriarty , teep Thread-Topic: [Teep] TEEP go forward plan and charter text Thread-Index: AQHTmUyHPSQUUr3eOk+jQzc0pOjHSKOOGsaAgABz5YA= Date: Wed, 31 Jan 2018 23:13:01 +0000 Message-ID: <407804FB-2583-4C45-A829-22B1D5869483@qti.qualcomm.com> References: In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.5.20) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [212.136.9.72] Content-Type: multipart/alternative; boundary="_000_407804FB25834C45A82922B1D5869483qtiqualcommcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Teep] TEEP go forward plan and charter text X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Jan 2018 23:13:11 -0000 --_000_407804FB25834C45A82922B1D5869483qtiqualcommcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgS2F0aGxlZW4sIFRFRVAsDQoNCkkgaGF2ZSBhIGZldyByZW1hcmtzIG9uIHRoZSBwcm9wb3Nl ZCBDaGFydGVyIHRleHQuDQoNClRoZSBzZWNvbmQgb2YgSGFubmVz4oCZIHByb3Bvc2VkIGNoYW5n ZXMgKHJlbW92YWwgb2Yg4oCcc2VjdXJpdHkgZG9tYWluIG1hbmFnZW1lbnTigJ0pIG1ha2VzIHRo ZSBmb2xsb3dpbmcgcGFyYWdyYXBoIOKAnEEgc2VjdXJpdHkgZG9tYWluIGFsbG93c+KApuKAnSBz ZWVtIG91dCBvZiBwbGFjZS4NCg0KSSBzdWdnZXN0IHRoYXQgd2UgcmVqZWN0IEhhbm5lc+KAmSBz ZWNvbmQgY2hhbmdlLg0KDQpzL0Egc2VjdXJpdHkgZG9tYWluIGFsbG93cyBhIHNlcnZpY2UgcHJv dmlkZXIncyBhcHBsaWNhdGlvbnMgdG8gYmUgaXNvbGF0ZWQgc28gdGhhdCBvbmUgc2VjdXJpdHkg ZG9tYWluIGNhbm5vdCBiZSBpbmZsdWVuY2VkIGJ5IGFub3RoZXIsIHVubGVzcyBpdCBleHBvc2Vz IGFuIEFQSSB0byBhbGxvdyBpdC4NCg0KVGhlIHNvbHV0aW9uIGFwcHJvYWNoIG11c3QgdGFrZSBh IHdpZGUgcmFuZ2Ugb2YgVEVFIGFuZCByZWxldmFudCB0ZWNobm9sb2dpZXMgaW50byBhY2NvdW50 IGFuZCB3aWxsIGZvY3VzIG9uIHRoZSB1c2Ugb2YgcHVibGljIGtleSBjcnlwdG9ncmFwaHkgLi9B IHNlY3VyaXR5IGRvbWFpbiBhbGxvd3MgYSBzZXJ2aWNlIHByb3ZpZGVyJ3MgYXBwbGljYXRpb25z IHRvIGJlIGlzb2xhdGVkIHNvIHRoYXQgb25lIHNlY3VyaXR5IGRvbWFpbiBjYW5ub3QgYmUgaW5m bHVlbmNlZCBieSBhbm90aGVyLCB1bmxlc3MgaXQgZXhwb3NlcyBhbiBBUEkgdG8gYWxsb3cgaXQu DQoNClRoZSBzb2x1dGlvbiBhcHByb2FjaCBtdXN0IHRha2UgYSB3aWRlIHJhbmdlIG9mIFRFRSBh bmQgcmVsZXZhbnQgdGVjaG5vbG9naWVzIGludG8gYWNjb3VudCBhbmQgd2lsbCBmb2N1cyBvbiB0 aGUgdXNlIG9mIHB1YmxpYyBrZXkgY3J5cHRvZ3JhcGh5IGFuZCBpbnRlcm9wZXJhYmlsaXR5IHdp dGggR2xvYmFsUGxhdGZvcm0gT1RyUC4NCg0KUmVhc29uOiBpbnRlcm9wZXJhYmlsaXR5IHdpdGgg b3RoZXIgT1RyUCBzeXN0ZW1zOyBtYWtlcyBzZW5zZSBnaXZlbiB0aGUgY28tb3BlcmF0aW9uIHdp dGggR2xvYmFsUGxhdGZvcm0gcHJvcG9zZWQgYmVsb3cuDQoNCnMvVGhlIGdyb3VwIHdpbGwgbWFp bnRhaW4gYSBjbG9zZSByZWxhdGlvbnNoaXAgd2l0aCB0aGUgSUVURiBTVUlUIHdvcmtpbmcgZ3Jv dXAsIEdsb2JhbFBsYXRmb3JtLCBUcnVzdGVkIENvbXB1dGluZyBHcm91cCwgYW5kIG90aGVyIHJl bGV2YW50IHN0YW5kYXJkcyB0byBlbnN1cmUgcHJvcGVyIHVzZSBvZiBleGlzdGluZyBURUUtcmVs ZXZhbnQgYXBwbGljYXRpb24gbGF5ZXIgaW50ZXJmYWNlcy4vVGhlIGdyb3VwIHdpbGwgbWFpbnRh aW4gYSBjbG9zZSByZWxhdGlvbnNoaXAgd2l0aCB0aGUgSUVURiBTVUlUIHdvcmtpbmcgZ3JvdXAs IEdsb2JhbFBsYXRmb3JtLCBUcnVzdGVkIENvbXB1dGluZyBHcm91cCwgYW5kIG90aGVyIHJlbGV2 YW50IHN0YW5kYXJkcyB0byBlbnN1cmUgcHJvcGVyIHVzZSBvZiBleGlzdGluZyBURUUtcmVsZXZh bnQgYXBwbGljYXRpb24gbGF5ZXIgaW50ZXJmYWNlcyBhbmQgdG8gZW5zdXJlIHRoYXQgaW50ZXJv cGVyYWJpbGl0eSBpcyBtYWludGFpbmVkIHdpdGggdGhlIHN0YW5kYXJkcyBmcm9tIHRoZXNlIGdy b3Vwcy4NCg0KUmVhc29uOiBpbnRlcm9wZXJhYmlsaXR5IGlzIHRoZSBleHBsaWNpdCBnb2FsIG9m IHJlbGF0aW9uc2hpcHMgd2l0aCBvdGhlciBncm91cHMgYWN0aXZlIGluIHRoZSBmaWVsZC4NCg0K QmVzdCByZWdhcmRzDQpKZXJlbXkNCg0KT24gMzEgSmFuIDIwMTgsIGF0IDE2OjE4LCBIYW5uZXMg VHNjaG9mZW5pZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTxtYWlsdG86SGFubmVzLlRzY2hv ZmVuaWdAYXJtLmNvbT4+IHdyb3RlOg0KDQpIaSBLYXRobGVlbiwNCg0KVGhhbmtzIGZvciB0aGUg dXBkYXRlLiBJdCBpcyBnb29kIHRvIGhlYXIgdGhhdCB0aGVyZSBpcyBwcm9ncmVzcy4NCg0KVGhl IHRleHQgYmVsb3cgc291bmRzIGdvb2Q7IEkgb25seSBoYXZlIGEgZmV3IG1pbm9yIHJlbWFya3M6 DQoNCi0tLQ0KDQpzL1RvIHByb2dyYW1tYXRpY2FsbHkgaW5zdGFsbCwgdXBkYXRlLCBhbmQgZGVs ZXRlIGFwcGxpY2F0aW9ucyBydW5uaW5nIGluIHRoZSBURUUsIHRoaXMgcHJvdG9jb2wgcnVucyBi ZXR3ZWVuIGEgc2VydmljZSBydW5uaW5nIHdpdGhpbiB0aGUgVEVFLCBhIHJlbGF5IGFwcGxpY2F0 aW9uIG9yIHNlcnZpY2UgYWNjZXNzIHBvaW50IG9uIHRoZSBkZXZpY2UncyBuZXR3b3JrIHN0YWNr IGFuZCBhIHNlcnZlci1zaWRlIGluZnJhc3RydWN0dXJlIHRoYXQgaW50ZXJhY3RzIHdpdGggYW5k IG9wdGlvbmFsbHkgbWFpbnRhaW5zIHRoZSBhcHBsaWNhdGlvbnMuIFNvbWUgdGFza3MgYXJlIHNl Y3VyaXR5IHNlbnNpdGl2ZSBhbmQgdGhlIHNlcnZlciBzaWRlIHJlcXVpcmVzIGluZm9ybWF0aW9u IGFib3V0IHRoZSBkZXZpY2UgY2hhcmFjdGVyaXN0aWNzIGluIGZvcm0gb2YgYXR0ZXN0YXRpb24g YW5kIHRoZSBkZXZpY2Utc2lkZSBtYXkgcmVxdWlyZSBpbmZvcm1hdGlvbiBhYm91dCB0aGUgc2Vy dmVyLi8gVG8gcHJvZ3JhbW1hdGljYWxseSBpbnN0YWxsLCB1cGRhdGUsIGFuZCBkZWxldGUgYXBw bGljYXRpb25zIGluIGEgVEVFLCB0aGlzIHByb3RvY29sIHJ1bnMgYmV0d2VlbiBhIHNlcnZpY2Ug d2l0aGluIHRoZSBURUUsIGEgcmVsYXkgYXBwbGljYXRpb24gb3Igc2VydmljZSBhY2Nlc3MgcG9p bnQgb24gdGhlIGRldmljZSdzIG5ldHdvcmsgc3RhY2sgYW5kIGEgc2VydmVyLXNpZGUgaW5mcmFz dHJ1Y3R1cmUgdGhhdCBpbnRlcmFjdHMgd2l0aCBhbmQgb3B0aW9uYWxseSBtYWludGFpbnMgdGhl IGFwcGxpY2F0aW9ucy4gU29tZSB0YXNrcyBhcmUgc2VjdXJpdHkgc2Vuc2l0aXZlIGFuZCB0aGUg c2VydmVyIHNpZGUgcmVxdWlyZXMgaW5mb3JtYXRpb24gYWJvdXQgdGhlIGRldmljZSBjaGFyYWN0 ZXJpc3RpY3MgaW4gZm9ybSBvZiBhdHRlc3RhdGlvbiBhbmQgdGhlIGRldmljZS1zaWRlIG1heSBy ZXF1aXJlIGluZm9ybWF0aW9uIGFib3V0IHRoZSBzZXJ2ZXIuDQoNClJlYXNvbjogSnVzdCBzb21l IHdvcmRpbmcgY2hhbmdlcyB0byBhdm9pZCByZXBlYXRlZCB1c2Ugb2YgInJ1bm5pbmciLg0KDQot LS0NCg0KLS0tDQoNCnMvVGhpcyB3b3JraW5nIGdyb3VwIGFpbXMgdG8gZGV2ZWxvcCBhbiBhcHBs aWNhdGlvbiBsYXllciBwcm90b2NvbCBwcm92aWRpbmcgVEVFcyB3aXRoIHRoZSBmb2xsb3dpbmcg ZnVuY3Rpb25hbGl0eSwgKiBsaWZlY3ljbGUgbWFuYWdlbWVudCBvZiB0cnVzdGVkIGFwcGxpY2F0 aW9ucywgYW5kICogc2VjdXJpdHkgZG9tYWluIG1hbmFnZW1lbnQuLw0KVGhpcyB3b3JraW5nIGdy b3VwIGFpbXMgdG8gZGV2ZWxvcCBhbiBhcHBsaWNhdGlvbiBsYXllciBwcm90b2NvbCBwcm92aWRp bmcgVEVFcyB3aXRoIGxpZmVjeWNsZSBtYW5hZ2VtZW50IG9mIHRydXN0ZWQgYXBwbGljYXRpb25z Lg0KDQpSZWFzb246IEkgd291bGQganVzdCBzaW1wbGlmeSBpdCBhbmQgbm90IGdvIGludG8gdGhl IGRldGFpbHMuIEkgYmVsaWV2ZSB0aGF0IHRoaXMgZnVuY3Rpb25hbGl0eSBpcyBhbHNvIGNvdmVy ZWQgaW4gdGhlICBsaWZlY3ljbGUgbWFuYWdlbWVudCBvZiB0cnVzdGVkIGFwcGxpY2F0aW9ucy4N Cg0KLS0tDQoNCi0tLQ0KDQpzL1RoZSBncm91cCB3aWxsIG1haW50YWluIGEgY2xvc2UgcmVsYXRp b25zaGlwIHdpdGggdGhlIEdsb2JhbFBsYXRmb3JtLCBUcnVzdGVkIENvbXB1dGluZyBHcm91cCwg IGFuZCBvdGhlciByZWxldmFudCBzdGFuZGFyZHMgdG8gZW5zdXJlIHByb3BlciB1c2Ugb2YgZXhp c3RpbmcgVEVFLXJlbGV2YW50IGFwcGxpY2F0aW9uIGxheWVyIGludGVyZmFjZXMuLw0KVGhlIGdy b3VwIHdpbGwgbWFpbnRhaW4gYSBjbG9zZSByZWxhdGlvbnNoaXAgd2l0aCB0aGUgSUVURiBTVUlU IHdvcmtpbmcgZ3JvdXAsIEdsb2JhbFBsYXRmb3JtLCBUcnVzdGVkIENvbXB1dGluZyBHcm91cCwg YW5kIG90aGVyIHJlbGV2YW50IHN0YW5kYXJkcyB0byBlbnN1cmUgcHJvcGVyIHVzZSBvZiBleGlz dGluZyBURUUtcmVsZXZhbnQgYXBwbGljYXRpb24gbGF5ZXIgaW50ZXJmYWNlcy4NCg0KUmVhc29u OiBJIHdhbnQgdG8gZXhwbGljaXRseSBzdGF0ZSB0aGF0IHRoaXMgZ3JvdXAgaGFzIHRvIHdvcmsg Y2xvc2VseSB3aXRoIHRoZSBTVUlUIFdHIHRvIGVuc3VyZSBwcm9wZXIgYWxpZ25tZW50Lg0KDQot LS0NCg0KQ2lhbw0KSGFubmVzDQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206 IFRFRVAgW21haWx0bzp0ZWVwLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBLYXRobGVl biBNb3JpYXJ0eQ0KU2VudDogMjkgSmFudWFyeSAyMDE4IDIyOjU5DQpUbzogdGVlcA0KU3ViamVj dDogW1RlZXBdIFRFRVAgZ28gZm9yd2FyZCBwbGFuIGFuZCBjaGFydGVyIHRleHQNCg0KSGVsbG8s DQoNCldpdGggYWdyZWVtZW50IGZyb20gSUVURiAxMDAgdGhhdCB0aGVyZSBpcyBzdWZmaWNpZW50 IGVmZm9ydCB0byB3b3JrIG9uIFRFRVAgYW5kIG5vdyBhIGJldHRlciB1bmRlcnN0YW5kaW5nIGZy b20gR1AsIEkgdGhpbmsgd2UgYXJlIGluIGEgcG9zaXRpb24gdG8gZmlybSB1cCBjaGFydGVyIHRl eHQgYW5kIHRvIHRyeSB0byBjaGFydGVyIGEgd29ya2luZyBncm91cCBwcmlvciB0byBMb25kb24u ICBXaXRoIHRoYXQsIHdlJ2xsIG5lZWQgdG8gbG9vayBhdCB0aGUgY2hhcnRlciB0ZXh0IGFuZCBi ZSBzdXJlIHdlIGhhdmUgYWdyZWVtZW50LCBiZWZvcmUgSSBjYW4ga2ljayBvZmYgcmV2aWV3IHdp dGhpbiB0aGUgSUVTRy4NCg0KSSAqdGhpbmsqIHRoZSBsYXN0IGNoYXJ0ZXIgdGV4dCBpcyB3aGF0 IHdhcyBlbnRlcmVkIG9uIHRoZSBURUVQIHBhZ2UsIGJ1dCBhbSBvcGVuIHRvIGJlIGNvcnJlY3Rl ZC4gIFRoYXQgc2hvdWxkIGJlIG91ciBzdGFydGluZyBwb2ludCBmb3IgZGlzY3Vzc2lvbi4gIEkg dGhpbmsgdGhlIEJvRiBjaGFpcnMgd2lsbCBiZSBhYmxlIHRvIGFzc2lzdCB3aXRoIHRoaXMgcHJv Y2VzcywgYnV0IEknbSBub3QgcG9zaXRpdmUgb24gdGhlaXIgc2NoZWR1bGVzLiAgQXMgc3VjaCBp dCBtYXkgYmUgYSBtaXggb2YgdGhlIGNoYWlycyBhbmQgQUQgd29ya2luZyBvbiB0aGlzIHRvIHNl ZSBpZiB3ZSBjYW4gZ2V0IGFncmVlbWVudCBvbiBjaGFydGVyIHRleHQuDQoNCmh0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2NoYXJ0ZXItaWV0Zi10ZWVwLw0KDQpDb3BpZWQgaGVyZSBm b3IgeW91ciBjb252ZW5pZW5jZToNCg0KVGhlIFRydXN0ZWQgRXhlY3V0aW9uIEVudmlyb25tZW50 IChURUUpIGlzIGEgc2VjdXJlIGFyZWEgb2YgYSBwcm9jZXNzb3IuDQpUaGUgVEVFIHByb3ZpZGVz IHNlY3VyaXR5IGZlYXR1cmVzLCBzdWNoIGFzIGlzb2xhdGVkIGV4ZWN1dGlvbiwgaW50ZWdyaXR5 IG9mIFRydXN0ZWQgQXBwbGljYXRpb25zIGFsb25nIHdpdGggY29uZmlkZW50aWFsaXR5IG9mIHRo ZWlyIGFzc2V0cy4gSW4gZ2VuZXJhbCB0ZXJtcywgdGhlIFRFRSBvZmZlcnMgYW4gZXhlY3V0aW9u IHNwYWNlIHRoYXQgcHJvdmlkZXMgYSBoaWdoZXIgbGV2ZWwgb2Ygc2VjdXJpdHkgdGhhbiBhICJy aWNoIiBvcGVyYXRpbmcgc3lzdGVtIGFuZCBtb3JlIGZ1bmN0aW9uYWxpdHkgdGhhbiBhIHNlY3Vy ZSBlbGVtZW50LiBGb3IgZXhhbXBsZSwgaW1wbGVtZW50YXRpb25zIG9mIHRoZSBURUUgY29uY2Vw dCBoYXZlIGJlZW4gZGV2ZWxvcGVkIGJ5IEFSTSwgYW5kIEludGVsIHVzaW5nIHRoZSBUcnVzdFpv bmUgYW5kIHRoZSBTR1ggdGVjaG5vbG9neSwgcmVzcGVjdGl2ZWx5Lg0KDQpUbyBwcm9ncmFtbWF0 aWNhbGx5IGluc3RhbGwsIHVwZGF0ZSwgYW5kIGRlbGV0ZSBhcHBsaWNhdGlvbnMgcnVubmluZyBp biB0aGUgVEVFLCB0aGlzIHByb3RvY29sIHJ1bnMgYmV0d2VlbiBhIHNlcnZpY2UgcnVubmluZyB3 aXRoaW4gdGhlIFRFRSwgYSByZWxheSBhcHBsaWNhdGlvbiBvciBzZXJ2aWNlIGFjY2VzcyBwb2lu dCBvbiB0aGUgZGV2aWNlJ3MgbmV0d29yayBzdGFjayBhbmQgYSBzZXJ2ZXItc2lkZSBpbmZyYXN0 cnVjdHVyZSB0aGF0IGludGVyYWN0cyB3aXRoIGFuZCBvcHRpb25hbGx5IG1haW50YWlucyB0aGUg YXBwbGljYXRpb25zLiBTb21lIHRhc2tzIGFyZSBzZWN1cml0eSBzZW5zaXRpdmUgYW5kIHRoZSBz ZXJ2ZXIgc2lkZSByZXF1aXJlcyBpbmZvcm1hdGlvbiBhYm91dCB0aGUgZGV2aWNlIGNoYXJhY3Rl cmlzdGljcyBpbiBmb3JtIG9mIGF0dGVzdGF0aW9uIGFuZCB0aGUgZGV2aWNlLXNpZGUgbWF5IHJl cXVpcmUgaW5mb3JtYXRpb24gYWJvdXQgdGhlIHNlcnZlci4NCg0KUHJpdmFjeSBjb25zaWRlcmF0 aW9ucyBoYXZlIHRvIGJlIHRha2VuIGludG8gYWNjb3VudCB3aXRoIGF1dGhlbnRpY2F0aW9uIGZl YXR1cmVzIGFuZCBhdHRlc3RhdGlvbi4NCg0KVGhpcyB3b3JraW5nIGdyb3VwIGFpbXMgdG8gZGV2 ZWxvcCBhbiBhcHBsaWNhdGlvbiBsYXllciBwcm90b2NvbCBwcm92aWRpbmcgVEVFcyB3aXRoIHRo ZSBmb2xsb3dpbmcgZnVuY3Rpb25hbGl0eSwgKiBsaWZlY3ljbGUgbWFuYWdlbWVudCBvZiB0cnVz dGVkIGFwcGxpY2F0aW9ucywgYW5kICogc2VjdXJpdHkgZG9tYWluIG1hbmFnZW1lbnQuDQoNCkEg c2VjdXJpdHkgZG9tYWluIGFsbG93cyBhIHNlcnZpY2UgcHJvdmlkZXIncyBhcHBsaWNhdGlvbnMg dG8gYmUgaXNvbGF0ZWQgc28gdGhhdCBvbmUgc2VjdXJpdHkgZG9tYWluIGNhbm5vdCBiZSBpbmZs dWVuY2VkIGJ5IGFub3RoZXIsIHVubGVzcyBpdCBleHBvc2VzIGFuIEFQSSB0byBhbGxvdyBpdC4N Cg0KVGhlIHNvbHV0aW9uIGFwcHJvYWNoIG11c3QgdGFrZSBhIHdpZGUgcmFuZ2Ugb2YgVEVFIGFu ZCByZWxldmFudCB0ZWNobm9sb2dpZXMgaW50byBhY2NvdW50IGFuZCB3aWxsIGZvY3VzIG9uIHRo ZSB1c2Ugb2YgcHVibGljIGtleSBjcnlwdG9ncmFwaHkuDQoNClRoZSBncm91cCB3aWxsIHByb2R1 Y2UgdGhlIGZvbGxvd2luZyBkZWxpdmVyYWJsZXMuIEZpcnN0LCBhbiBhcmNoaXRlY3R1cmUgZG9j dW1lbnQgZGVzY3JpYmluZyB0aGUgaW52b2x2ZWQgZW50aXRpZXMsIHRoZWlyIHJlbGF0aW9uc2hp cHMsIGFzc3VtcHRpb25zLCB0aGUga2V5aW5nIGZyYW1ld29yayBhbmQgcmVsZXZhbnQgdXNlIGNh c2VzLiBTZWNvbmQsIGEgc29sdXRpb24gZG9jdW1lbnQgdGhhdCBkZXNjcmliZXMgdGhlIGFib3Zl LWRlc2NyaWJlZCBmdW5jdGlvbmFsaXR5LiBUaGUgY2hvaWNlIG9mIGVuY29kaW5nIGZvcm1hdChz KSB3aWxsIGJlIGRlY2lkZWQgaW4gdGhlIHdvcmtpbmcgZ3JvdXAuIFRoZSBncm91cCBtYXkgZG9j dW1lbnQgc2V2ZXJhbCBhdHRlc3RhdGlvbiB0ZWNobm9sb2dpZXMgY29uc2lkZXJpbmcgdGhlIGRp ZmZlcmVudCBoYXJkd2FyZSBjYXBhYmlsaXRpZXMsIHBlcmZvcm1hbmNlLCBwcml2YWN5IGFuZCBv cGVyYXRpb25hbCBwcm9wZXJ0aWVzLg0KDQpUaGUgZ3JvdXAgd2lsbCBtYWludGFpbiBhIGNsb3Nl IHJlbGF0aW9uc2hpcCB3aXRoIHRoZSBHbG9iYWxQbGF0Zm9ybSwgVHJ1c3RlZCBDb21wdXRpbmcg R3JvdXAsICBhbmQgb3RoZXIgcmVsZXZhbnQgc3RhbmRhcmRzIHRvIGVuc3VyZSBwcm9wZXIgdXNl IG9mIGV4aXN0aW5nIFRFRS1yZWxldmFudCBhcHBsaWNhdGlvbiBsYXllciBpbnRlcmZhY2VzLg0K DQoNCi0tDQoNCkJlc3QgcmVnYXJkcywNCkthdGhsZWVuDQoNCl9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQpURUVQIG1haWxpbmcgbGlzdA0KVEVFUEBpZXRm Lm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90ZWVwDQpJTVBPUlRB TlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRz IGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUg bm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1l ZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVy c29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1h dGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQoNCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQpURUVQIG1haWxpbmcgbGlzdA0KVEVFUEBpZXRmLm9y Zw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90ZWVwDQoNCg== --_000_407804FB25834C45A82922B1D5869483qtiqualcommcom_ Content-Type: text/html; charset="utf-8" Content-ID: <3957DA76C11E9A47992625B9FC2EEC6F@qualcomm.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCkhpIEthdGhsZWVuLCBURUVQLA0KPGRpdiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SSBoYXZlIGEgZmV3IHJl bWFya3Mgb24gdGhlIHByb3Bvc2VkIENoYXJ0ZXIgdGV4dC48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPlRoZSBzZWNvbmQgb2YgSGFubmVz 4oCZIHByb3Bvc2VkIGNoYW5nZXMgKHJlbW92YWwgb2Yg4oCcc2VjdXJpdHkgZG9tYWluIG1hbmFn ZW1lbnTigJ0pIG1ha2VzIHRoZSBmb2xsb3dpbmcgcGFyYWdyYXBoIOKAnEEgc2VjdXJpdHkgZG9t YWluIGFsbG93c+KApuKAnSBzZWVtIG91dCBvZiBwbGFjZS48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkkgc3VnZ2VzdCB0aGF0IHdlIHJl amVjdCBIYW5uZXPigJkgc2Vjb25kIGNoYW5nZS48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNs YXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPnMvQSBzZWN1cml0eSBkb21haW4gYWxsb3dz IGEgc2VydmljZSBwcm92aWRlcidzIGFwcGxpY2F0aW9ucyB0byBiZSBpc29sYXRlZCBzbyB0aGF0 IG9uZSBzZWN1cml0eSBkb21haW4gY2Fubm90IGJlIGluZmx1ZW5jZWQgYnkgYW5vdGhlciwgdW5s ZXNzIGl0IGV4cG9zZXMgYW4gQVBJIHRvIGFsbG93IGl0Lg0KPHAgY2xhc3M9IiIgc3R5bGU9Im1h cmdpbi10b3A6IDBwdDsgbWFyZ2luLWJvdHRvbTogN3B0OyI+PHNwYW4gY2xhc3M9IiI+VGhlIHNv bHV0aW9uIGFwcHJvYWNoIG11c3QgdGFrZSBhIHdpZGUgcmFuZ2Ugb2YgVEVFIGFuZCByZWxldmFu dCB0ZWNobm9sb2dpZXMgaW50byBhY2NvdW50IGFuZCB3aWxsIGZvY3VzIG9uIHRoZSB1c2Ugb2Yg cHVibGljIGtleSBjcnlwdG9ncmFwaHkmbmJzcDs8L3NwYW4+PHNwYW4gY2xhc3M9IiI+Li88L3Nw YW4+QSBzZWN1cml0eQ0KIGRvbWFpbiBhbGxvd3MgYSBzZXJ2aWNlIHByb3ZpZGVyJ3MgYXBwbGlj YXRpb25zIHRvIGJlIGlzb2xhdGVkIHNvIHRoYXQgb25lIHNlY3VyaXR5IGRvbWFpbiBjYW5ub3Qg YmUgaW5mbHVlbmNlZCBieSBhbm90aGVyLCB1bmxlc3MgaXQgZXhwb3NlcyBhbiBBUEkgdG8gYWxs b3cgaXQuPC9wPg0KPHAgY2xhc3M9IiIgc3R5bGU9Im1hcmdpbi10b3A6IDBwdDsgbWFyZ2luLWJv dHRvbTogN3B0OyI+PHNwYW4gY2xhc3M9IiI+VGhlIHNvbHV0aW9uIGFwcHJvYWNoIG11c3QgdGFr ZSBhIHdpZGUgcmFuZ2Ugb2YgVEVFIGFuZCByZWxldmFudCB0ZWNobm9sb2dpZXMgaW50byBhY2Nv dW50IGFuZCB3aWxsIGZvY3VzIG9uIHRoZSB1c2Ugb2YgcHVibGljIGtleSBjcnlwdG9ncmFwaHkm bmJzcDs8L3NwYW4+PHNwYW4gY2xhc3M9IiI+YW5kIGludGVyb3BlcmFiaWxpdHkNCiB3aXRoIEds b2JhbFBsYXRmb3JtIE9UclA8L3NwYW4+PHNwYW4gY2xhc3M9IiI+Ljwvc3Bhbj48L3A+DQo8ZGl2 PlJlYXNvbjogaW50ZXJvcGVyYWJpbGl0eSB3aXRoIG90aGVyIE9UclAgc3lzdGVtczsgbWFrZXMg c2Vuc2UgZ2l2ZW4gdGhlIGNvLW9wZXJhdGlvbiB3aXRoIEdsb2JhbFBsYXRmb3JtIHByb3Bvc2Vk IGJlbG93LjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+cy88c3BhbiBj bGFzcz0iIj5UaGUgZ3JvdXAgd2lsbCBtYWludGFpbiBhIGNsb3NlIHJlbGF0aW9uc2hpcCB3aXRo IHRoZSZuYnNwOzwvc3Bhbj48c3BhbiBjbGFzcz0iIj5JRVRGIFNVSVQgd29ya2luZyBncm91cDwv c3Bhbj4sJm5ic3A7PHNwYW4gY2xhc3M9IiI+R2xvYmFsUGxhdGZvcm0sIFRydXN0ZWQgQ29tcHV0 aW5nIEdyb3VwLCBhbmQgb3RoZXIgcmVsZXZhbnQgc3RhbmRhcmRzIHRvIGVuc3VyZSBwcm9wZXIg dXNlIG9mIGV4aXN0aW5nIFRFRS1yZWxldmFudA0KIGFwcGxpY2F0aW9uIGxheWVyIGludGVyZmFj ZXMuLzwvc3Bhbj48c3BhbiBjbGFzcz0iIj5UaGUgZ3JvdXAgd2lsbCBtYWludGFpbiBhIGNsb3Nl IHJlbGF0aW9uc2hpcCB3aXRoIHRoZSZuYnNwOzwvc3Bhbj48c3BhbiBjbGFzcz0iIj5JRVRGIFNV SVQgd29ya2luZyBncm91cDwvc3Bhbj4sJm5ic3A7PHNwYW4gY2xhc3M9IiI+R2xvYmFsUGxhdGZv cm0sIFRydXN0ZWQgQ29tcHV0aW5nIEdyb3VwLCBhbmQgb3RoZXIgcmVsZXZhbnQgc3RhbmRhcmRz IHRvIGVuc3VyZSBwcm9wZXINCiB1c2Ugb2YgZXhpc3RpbmcgVEVFLXJlbGV2YW50IGFwcGxpY2F0 aW9uIGxheWVyIGludGVyZmFjZXMgYW5kIHRvIGVuc3VyZSB0aGF0IGludGVyb3BlcmFiaWxpdHkg aXMgbWFpbnRhaW5lZCB3aXRoIHRoZSBzdGFuZGFyZHMgZnJvbSB0aGVzZSBncm91cHMuPC9zcGFu PjwvZGl2Pg0KPGRpdj48c3BhbiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L3NwYW4+PC9kaXY+ DQo8ZGl2PjxzcGFuIGNsYXNzPSIiPlJlYXNvbjogaW50ZXJvcGVyYWJpbGl0eSBpcyB0aGUgZXhw bGljaXQgZ29hbCBvZiByZWxhdGlvbnNoaXBzIHdpdGggb3RoZXIgZ3JvdXBzIGFjdGl2ZSBpbiB0 aGUgZmllbGQuPC9zcGFuPjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+ QmVzdCByZWdhcmRzPC9kaXY+DQo8ZGl2PkplcmVteTwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+ DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gMzEg SmFuIDIwMTgsIGF0IDE2OjE4LCBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7PGEgaHJlZj0ibWFpbHRv Okhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20iIGNsYXNzPSIiPkhhbm5lcy5Uc2Nob2ZlbmlnQGFy bS5jb208L2E+Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2Ut bmV3bGluZSI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5IaSBLYXRobGVlbiw8YnIg Y2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpUaGFua3MgZm9yIHRoZSB1cGRhdGUuIEl0IGlzIGdv b2QgdG8gaGVhciB0aGF0IHRoZXJlIGlzIHByb2dyZXNzLjxiciBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NClRoZSB0ZXh0IGJlbG93IHNvdW5kcyBnb29kOyBJIG9ubHkgaGF2ZSBhIGZldyBtaW5v ciByZW1hcmtzOjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCi0tLTxiciBjbGFzcz0iIj4N CjxiciBjbGFzcz0iIj4NCnMvVG8gcHJvZ3JhbW1hdGljYWxseSBpbnN0YWxsLCB1cGRhdGUsIGFu ZCBkZWxldGUgYXBwbGljYXRpb25zIHJ1bm5pbmcgaW4gdGhlIFRFRSwgdGhpcyBwcm90b2NvbCBy dW5zIGJldHdlZW4gYSBzZXJ2aWNlIHJ1bm5pbmcgd2l0aGluIHRoZSBURUUsIGEgcmVsYXkgYXBw bGljYXRpb24gb3Igc2VydmljZSBhY2Nlc3MgcG9pbnQgb24gdGhlIGRldmljZSdzIG5ldHdvcmsg c3RhY2sgYW5kIGEgc2VydmVyLXNpZGUgaW5mcmFzdHJ1Y3R1cmUgdGhhdCBpbnRlcmFjdHMNCiB3 aXRoIGFuZCBvcHRpb25hbGx5IG1haW50YWlucyB0aGUgYXBwbGljYXRpb25zLiBTb21lIHRhc2tz IGFyZSBzZWN1cml0eSBzZW5zaXRpdmUgYW5kIHRoZSBzZXJ2ZXIgc2lkZSByZXF1aXJlcyBpbmZv cm1hdGlvbiBhYm91dCB0aGUgZGV2aWNlIGNoYXJhY3RlcmlzdGljcyBpbiBmb3JtIG9mIGF0dGVz dGF0aW9uIGFuZCB0aGUgZGV2aWNlLXNpZGUgbWF5IHJlcXVpcmUgaW5mb3JtYXRpb24gYWJvdXQg dGhlIHNlcnZlci4vIFRvIHByb2dyYW1tYXRpY2FsbHkNCiBpbnN0YWxsLCB1cGRhdGUsIGFuZCBk ZWxldGUgYXBwbGljYXRpb25zIGluIGEgVEVFLCB0aGlzIHByb3RvY29sIHJ1bnMgYmV0d2VlbiBh IHNlcnZpY2Ugd2l0aGluIHRoZSBURUUsIGEgcmVsYXkgYXBwbGljYXRpb24gb3Igc2VydmljZSBh Y2Nlc3MgcG9pbnQgb24gdGhlIGRldmljZSdzIG5ldHdvcmsgc3RhY2sgYW5kIGEgc2VydmVyLXNp ZGUgaW5mcmFzdHJ1Y3R1cmUgdGhhdCBpbnRlcmFjdHMgd2l0aCBhbmQgb3B0aW9uYWxseSBtYWlu dGFpbnMNCiB0aGUgYXBwbGljYXRpb25zLiBTb21lIHRhc2tzIGFyZSBzZWN1cml0eSBzZW5zaXRp dmUgYW5kIHRoZSBzZXJ2ZXIgc2lkZSByZXF1aXJlcyBpbmZvcm1hdGlvbiBhYm91dCB0aGUgZGV2 aWNlIGNoYXJhY3RlcmlzdGljcyBpbiBmb3JtIG9mIGF0dGVzdGF0aW9uIGFuZCB0aGUgZGV2aWNl LXNpZGUgbWF5IHJlcXVpcmUgaW5mb3JtYXRpb24gYWJvdXQgdGhlIHNlcnZlci48YnIgY2xhc3M9 IiI+DQo8YnIgY2xhc3M9IiI+DQpSZWFzb246IEp1c3Qgc29tZSB3b3JkaW5nIGNoYW5nZXMgdG8g YXZvaWQgcmVwZWF0ZWQgdXNlIG9mICZxdW90O3J1bm5pbmcmcXVvdDsuPGJyIGNsYXNzPSIiPg0K PGJyIGNsYXNzPSIiPg0KLS0tPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KLS0tPGJyIGNs YXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0Kcy9UaGlzIHdvcmtpbmcgZ3JvdXAgYWltcyB0byBkZXZl bG9wIGFuIGFwcGxpY2F0aW9uIGxheWVyIHByb3RvY29sIHByb3ZpZGluZyBURUVzIHdpdGggdGhl IGZvbGxvd2luZyBmdW5jdGlvbmFsaXR5LCAqIGxpZmVjeWNsZSBtYW5hZ2VtZW50IG9mIHRydXN0 ZWQgYXBwbGljYXRpb25zLCBhbmQgKiBzZWN1cml0eSBkb21haW4gbWFuYWdlbWVudC4vPGJyIGNs YXNzPSIiPg0KVGhpcyB3b3JraW5nIGdyb3VwIGFpbXMgdG8gZGV2ZWxvcCBhbiBhcHBsaWNhdGlv biBsYXllciBwcm90b2NvbCBwcm92aWRpbmcgVEVFcyB3aXRoIGxpZmVjeWNsZSBtYW5hZ2VtZW50 IG9mIHRydXN0ZWQgYXBwbGljYXRpb25zLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClJl YXNvbjogSSB3b3VsZCBqdXN0IHNpbXBsaWZ5IGl0IGFuZCBub3QgZ28gaW50byB0aGUgZGV0YWls cy4gSSBiZWxpZXZlIHRoYXQgdGhpcyBmdW5jdGlvbmFsaXR5IGlzIGFsc28gY292ZXJlZCBpbiB0 aGUgJm5ic3A7bGlmZWN5Y2xlIG1hbmFnZW1lbnQgb2YgdHJ1c3RlZCBhcHBsaWNhdGlvbnMuPGJy IGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KLS0tPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIi Pg0KLS0tPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0Kcy9UaGUgZ3JvdXAgd2lsbCBtYWlu dGFpbiBhIGNsb3NlIHJlbGF0aW9uc2hpcCB3aXRoIHRoZSBHbG9iYWxQbGF0Zm9ybSwgVHJ1c3Rl ZCBDb21wdXRpbmcgR3JvdXAsICZuYnNwO2FuZCBvdGhlciByZWxldmFudCBzdGFuZGFyZHMgdG8g ZW5zdXJlIHByb3BlciB1c2Ugb2YgZXhpc3RpbmcgVEVFLXJlbGV2YW50IGFwcGxpY2F0aW9uIGxh eWVyIGludGVyZmFjZXMuLzxiciBjbGFzcz0iIj4NClRoZSBncm91cCB3aWxsIG1haW50YWluIGEg Y2xvc2UgcmVsYXRpb25zaGlwIHdpdGggdGhlIElFVEYgU1VJVCB3b3JraW5nIGdyb3VwLCBHbG9i YWxQbGF0Zm9ybSwgVHJ1c3RlZCBDb21wdXRpbmcgR3JvdXAsIGFuZCBvdGhlciByZWxldmFudCBz dGFuZGFyZHMgdG8gZW5zdXJlIHByb3BlciB1c2Ugb2YgZXhpc3RpbmcgVEVFLXJlbGV2YW50IGFw cGxpY2F0aW9uIGxheWVyIGludGVyZmFjZXMuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0K UmVhc29uOiBJIHdhbnQgdG8gZXhwbGljaXRseSBzdGF0ZSB0aGF0IHRoaXMgZ3JvdXAgaGFzIHRv IHdvcmsgY2xvc2VseSB3aXRoIHRoZSBTVUlUIFdHIHRvIGVuc3VyZSBwcm9wZXIgYWxpZ25tZW50 LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCi0tLTxiciBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NCkNpYW88YnIgY2xhc3M9IiI+DQpIYW5uZXM8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQo8YnIgY2xhc3M9IiI+DQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLTxiciBjbGFzcz0i Ij4NCkZyb206IFRFRVAgWzxhIGhyZWY9Im1haWx0bzp0ZWVwLWJvdW5jZXNAaWV0Zi5vcmciIGNs YXNzPSIiPm1haWx0bzp0ZWVwLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSBPbiBCZWhhbGYgT2YgS2F0 aGxlZW4gTW9yaWFydHk8YnIgY2xhc3M9IiI+DQpTZW50OiAyOSBKYW51YXJ5IDIwMTggMjI6NTk8 YnIgY2xhc3M9IiI+DQpUbzogdGVlcDxiciBjbGFzcz0iIj4NClN1YmplY3Q6IFtUZWVwXSBURUVQ IGdvIGZvcndhcmQgcGxhbiBhbmQgY2hhcnRlciB0ZXh0PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNz PSIiPg0KSGVsbG8sPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KV2l0aCBhZ3JlZW1lbnQg ZnJvbSBJRVRGIDEwMCB0aGF0IHRoZXJlIGlzIHN1ZmZpY2llbnQgZWZmb3J0IHRvIHdvcmsgb24g VEVFUCBhbmQgbm93IGEgYmV0dGVyIHVuZGVyc3RhbmRpbmcgZnJvbSBHUCwgSSB0aGluayB3ZSBh cmUgaW4gYSBwb3NpdGlvbiB0byBmaXJtIHVwIGNoYXJ0ZXIgdGV4dCBhbmQgdG8gdHJ5IHRvIGNo YXJ0ZXIgYSB3b3JraW5nIGdyb3VwIHByaW9yIHRvIExvbmRvbi4gJm5ic3A7V2l0aCB0aGF0LCB3 ZSdsbCBuZWVkIHRvIGxvb2sgYXQNCiB0aGUgY2hhcnRlciB0ZXh0IGFuZCBiZSBzdXJlIHdlIGhh dmUgYWdyZWVtZW50LCBiZWZvcmUgSSBjYW4ga2ljayBvZmYgcmV2aWV3IHdpdGhpbiB0aGUgSUVT Ry48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpJICp0aGluayogdGhlIGxhc3QgY2hhcnRl ciB0ZXh0IGlzIHdoYXQgd2FzIGVudGVyZWQgb24gdGhlIFRFRVAgcGFnZSwgYnV0IGFtIG9wZW4g dG8gYmUgY29ycmVjdGVkLiAmbmJzcDtUaGF0IHNob3VsZCBiZSBvdXIgc3RhcnRpbmcgcG9pbnQg Zm9yIGRpc2N1c3Npb24uICZuYnNwO0kgdGhpbmsgdGhlIEJvRiBjaGFpcnMgd2lsbCBiZSBhYmxl IHRvIGFzc2lzdCB3aXRoIHRoaXMgcHJvY2VzcywgYnV0IEknbSBub3QgcG9zaXRpdmUgb24gdGhl aXIgc2NoZWR1bGVzLg0KICZuYnNwO0FzIHN1Y2ggaXQgbWF5IGJlIGEgbWl4IG9mIHRoZSBjaGFp cnMgYW5kIEFEIHdvcmtpbmcgb24gdGhpcyB0byBzZWUgaWYgd2UgY2FuIGdldCBhZ3JlZW1lbnQg b24gY2hhcnRlciB0ZXh0LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0 dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2NoYXJ0ZXItaWV0Zi10ZWVwLyIgY2xhc3M9 IiI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvY2hhcnRlci1pZXRmLXRlZXAvPC9h PjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkNvcGllZCBoZXJlIGZvciB5b3VyIGNvbnZl bmllbmNlOjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoZSBUcnVzdGVkIEV4ZWN1dGlv biBFbnZpcm9ubWVudCAoVEVFKSBpcyBhIHNlY3VyZSBhcmVhIG9mIGEgcHJvY2Vzc29yLjxiciBj bGFzcz0iIj4NClRoZSBURUUgcHJvdmlkZXMgc2VjdXJpdHkgZmVhdHVyZXMsIHN1Y2ggYXMgaXNv bGF0ZWQgZXhlY3V0aW9uLCBpbnRlZ3JpdHkgb2YgVHJ1c3RlZCBBcHBsaWNhdGlvbnMgYWxvbmcg d2l0aCBjb25maWRlbnRpYWxpdHkgb2YgdGhlaXIgYXNzZXRzLiBJbiBnZW5lcmFsIHRlcm1zLCB0 aGUgVEVFIG9mZmVycyBhbiBleGVjdXRpb24gc3BhY2UgdGhhdCBwcm92aWRlcyBhIGhpZ2hlciBs ZXZlbCBvZiBzZWN1cml0eSB0aGFuIGEgJnF1b3Q7cmljaCZxdW90OyBvcGVyYXRpbmcNCiBzeXN0 ZW0gYW5kIG1vcmUgZnVuY3Rpb25hbGl0eSB0aGFuIGEgc2VjdXJlIGVsZW1lbnQuIEZvciBleGFt cGxlLCBpbXBsZW1lbnRhdGlvbnMgb2YgdGhlIFRFRSBjb25jZXB0IGhhdmUgYmVlbiBkZXZlbG9w ZWQgYnkgQVJNLCBhbmQgSW50ZWwgdXNpbmcgdGhlIFRydXN0Wm9uZSBhbmQgdGhlIFNHWCB0ZWNo bm9sb2d5LCByZXNwZWN0aXZlbHkuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KVG8gcHJv Z3JhbW1hdGljYWxseSBpbnN0YWxsLCB1cGRhdGUsIGFuZCBkZWxldGUgYXBwbGljYXRpb25zIHJ1 bm5pbmcgaW4gdGhlIFRFRSwgdGhpcyBwcm90b2NvbCBydW5zIGJldHdlZW4gYSBzZXJ2aWNlIHJ1 bm5pbmcgd2l0aGluIHRoZSBURUUsIGEgcmVsYXkgYXBwbGljYXRpb24gb3Igc2VydmljZSBhY2Nl c3MgcG9pbnQgb24gdGhlIGRldmljZSdzIG5ldHdvcmsgc3RhY2sgYW5kIGEgc2VydmVyLXNpZGUg aW5mcmFzdHJ1Y3R1cmUgdGhhdCBpbnRlcmFjdHMNCiB3aXRoIGFuZCBvcHRpb25hbGx5IG1haW50 YWlucyB0aGUgYXBwbGljYXRpb25zLiBTb21lIHRhc2tzIGFyZSBzZWN1cml0eSBzZW5zaXRpdmUg YW5kIHRoZSBzZXJ2ZXIgc2lkZSByZXF1aXJlcyBpbmZvcm1hdGlvbiBhYm91dCB0aGUgZGV2aWNl IGNoYXJhY3RlcmlzdGljcyBpbiBmb3JtIG9mIGF0dGVzdGF0aW9uIGFuZCB0aGUgZGV2aWNlLXNp ZGUgbWF5IHJlcXVpcmUgaW5mb3JtYXRpb24gYWJvdXQgdGhlIHNlcnZlci48YnIgY2xhc3M9IiI+ DQo8YnIgY2xhc3M9IiI+DQpQcml2YWN5IGNvbnNpZGVyYXRpb25zIGhhdmUgdG8gYmUgdGFrZW4g aW50byBhY2NvdW50IHdpdGggYXV0aGVudGljYXRpb24gZmVhdHVyZXMgYW5kIGF0dGVzdGF0aW9u LjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoaXMgd29ya2luZyBncm91cCBhaW1zIHRv IGRldmVsb3AgYW4gYXBwbGljYXRpb24gbGF5ZXIgcHJvdG9jb2wgcHJvdmlkaW5nIFRFRXMgd2l0 aCB0aGUgZm9sbG93aW5nIGZ1bmN0aW9uYWxpdHksICogbGlmZWN5Y2xlIG1hbmFnZW1lbnQgb2Yg dHJ1c3RlZCBhcHBsaWNhdGlvbnMsIGFuZCAqIHNlY3VyaXR5IGRvbWFpbiBtYW5hZ2VtZW50Ljxi ciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkEgc2VjdXJpdHkgZG9tYWluIGFsbG93cyBhIHNl cnZpY2UgcHJvdmlkZXIncyBhcHBsaWNhdGlvbnMgdG8gYmUgaXNvbGF0ZWQgc28gdGhhdCBvbmUg c2VjdXJpdHkgZG9tYWluIGNhbm5vdCBiZSBpbmZsdWVuY2VkIGJ5IGFub3RoZXIsIHVubGVzcyBp dCBleHBvc2VzIGFuIEFQSSB0byBhbGxvdyBpdC48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+ DQpUaGUgc29sdXRpb24gYXBwcm9hY2ggbXVzdCB0YWtlIGEgd2lkZSByYW5nZSBvZiBURUUgYW5k IHJlbGV2YW50IHRlY2hub2xvZ2llcyBpbnRvIGFjY291bnQgYW5kIHdpbGwgZm9jdXMgb24gdGhl IHVzZSBvZiBwdWJsaWMga2V5IGNyeXB0b2dyYXBoeS48YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9 IiI+DQpUaGUgZ3JvdXAgd2lsbCBwcm9kdWNlIHRoZSBmb2xsb3dpbmcgZGVsaXZlcmFibGVzLiBG aXJzdCwgYW4gYXJjaGl0ZWN0dXJlIGRvY3VtZW50IGRlc2NyaWJpbmcgdGhlIGludm9sdmVkIGVu dGl0aWVzLCB0aGVpciByZWxhdGlvbnNoaXBzLCBhc3N1bXB0aW9ucywgdGhlIGtleWluZyBmcmFt ZXdvcmsgYW5kIHJlbGV2YW50IHVzZSBjYXNlcy4gU2Vjb25kLCBhIHNvbHV0aW9uIGRvY3VtZW50 IHRoYXQgZGVzY3JpYmVzIHRoZSBhYm92ZS1kZXNjcmliZWQNCiBmdW5jdGlvbmFsaXR5LiBUaGUg Y2hvaWNlIG9mIGVuY29kaW5nIGZvcm1hdChzKSB3aWxsIGJlIGRlY2lkZWQgaW4gdGhlIHdvcmtp bmcgZ3JvdXAuIFRoZSBncm91cCBtYXkgZG9jdW1lbnQgc2V2ZXJhbCBhdHRlc3RhdGlvbiB0ZWNo bm9sb2dpZXMgY29uc2lkZXJpbmcgdGhlIGRpZmZlcmVudCBoYXJkd2FyZSBjYXBhYmlsaXRpZXMs IHBlcmZvcm1hbmNlLCBwcml2YWN5IGFuZCBvcGVyYXRpb25hbCBwcm9wZXJ0aWVzLjxiciBjbGFz cz0iIj4NCjxiciBjbGFzcz0iIj4NClRoZSBncm91cCB3aWxsIG1haW50YWluIGEgY2xvc2UgcmVs YXRpb25zaGlwIHdpdGggdGhlIEdsb2JhbFBsYXRmb3JtLCBUcnVzdGVkIENvbXB1dGluZyBHcm91 cCwgJm5ic3A7YW5kIG90aGVyIHJlbGV2YW50IHN0YW5kYXJkcyB0byBlbnN1cmUgcHJvcGVyIHVz ZSBvZiBleGlzdGluZyBURUUtcmVsZXZhbnQgYXBwbGljYXRpb24gbGF5ZXIgaW50ZXJmYWNlcy48 YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQotLTxiciBjbGFzcz0i Ij4NCjxiciBjbGFzcz0iIj4NCkJlc3QgcmVnYXJkcyw8YnIgY2xhc3M9IiI+DQpLYXRobGVlbjxi ciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fPGJyIGNsYXNzPSIiPg0KVEVFUCBtYWlsaW5nIGxpc3Q8YnIgY2xh c3M9IiI+DQpURUVQQGlldGYub3JnPGJyIGNsYXNzPSIiPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby90ZWVwPGJyIGNsYXNzPSIiPg0KSU1QT1JUQU5UIE5PVElDRTogVGhl IGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50 aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5k ZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRv IG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZv ciBhbnkgcHVycG9zZSwNCiBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkg bWVkaXVtLiBUaGFuayB5b3UuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnIgY2xhc3M9IiI+DQpURUVQ IG1haWxpbmcgbGlzdDxiciBjbGFzcz0iIj4NClRFRVBAaWV0Zi5vcmc8YnIgY2xhc3M9IiI+DQpo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3RlZXA8YnIgY2xhc3M9IiI+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rp dj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_407804FB25834C45A82922B1D5869483qtiqualcommcom_-- From nobody Wed Jan 31 17:24:50 2018 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C826F12EB22 for ; Wed, 31 Jan 2018 17:24:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.209 X-Spam-Level: X-Spam-Status: No, score=-4.209 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=symc.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U6M84Eq9-t5c for ; Wed, 31 Jan 2018 17:24:44 -0800 (PST) Received: from asbsmtoutape01.symantec.com (asbsmtoutape01.symantec.com [155.64.138.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5880E126DEE for ; Wed, 31 Jan 2018 17:24:44 -0800 (PST) Received: from asbsmtmtaapi01.symc.symantec.com (asb1-f5-symc-ext-prd-snat7.net.symantec.com [10.90.75.7]) by asbsmtoutape01.symantec.com (Symantec Messaging Gateway) with SMTP id 96.33.23027.B5C627A5; Thu, 1 Feb 2018 01:24:43 +0000 (GMT) X-AuditID: 0a5af819-f416d9c0000159f3-c2-5a726c5b147b Received: from TUSXCHMBXWPI02.SYMC.SYMANTEC.COM (asb1-f5-symc-ext-prd-snat8.net.symantec.com [10.90.75.8]) by asbsmtmtaapi01.symc.symantec.com (Symantec Messaging Gateway) with SMTP id 75.33.35492.A5C627A5; Thu, 1 Feb 2018 01:24:43 +0000 (GMT) Received: from TUSXCHMBXWPI01.SYMC.SYMANTEC.COM (10.44.91.33) by TUSXCHMBXWPI02.SYMC.SYMANTEC.COM (10.44.91.34) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Wed, 31 Jan 2018 17:24:41 -0800 Received: from NAM02-CY1-obe.outbound.protection.outlook.com (10.44.128.5) by TUSXCHMBXWPI01.SYMC.SYMANTEC.COM (10.44.91.33) with Microsoft SMTP Server (TLS) id 15.0.1365.1 via Frontend Transport; Wed, 31 Jan 2018 17:24:41 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=symc.onmicrosoft.com; s=selector1-symantec-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=NiPIo5vu60ef30fQDavgZ1eQ1N+uIBi6zvXNZk9nL3k=; b=I9uLVFwMiw0qFAty8wyVSdzCtf2iHRSJVmf2OPrRyBA3mMk90Z8oSBuOkuuEhwjBkurFiviwwA2JiqPwbQ9XFXSbm/NINL1d74dS9a60JO95pvHNrtQSkrEKrvr7JX+VS7axMgHM7CPofTvKAkz/sl0G0/sbs3kGJ2EiQjarn14= Received: from CY4PR1601MB1126.namprd16.prod.outlook.com (10.172.117.12) by CY4PR1601MB1333.namprd16.prod.outlook.com (10.172.118.143) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.444.14; Thu, 1 Feb 2018 01:24:39 +0000 Received: from CY4PR1601MB1126.namprd16.prod.outlook.com ([fe80::1d32:4a2c:6c50:44ad]) by CY4PR1601MB1126.namprd16.prod.outlook.com ([fe80::1d32:4a2c:6c50:44ad%14]) with mapi id 15.20.0444.016; Thu, 1 Feb 2018 01:24:39 +0000 From: Mingliang Pei To: Jeremy O'Donoghue , Hannes Tschofenig CC: Kathleen Moriarty , teep Thread-Topic: [EXT] Re: [Teep] TEEP go forward plan and charter text Thread-Index: AQHTmq+eRaBJv5CFDUqN5x/1VlKHRaOOnLSA//+eooA= Date: Thu, 1 Feb 2018 01:24:39 +0000 Message-ID: References: <407804FB-2583-4C45-A829-22B1D5869483@qti.qualcomm.com> In-Reply-To: <407804FB-2583-4C45-A829-22B1D5869483@qti.qualcomm.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.7.7.170905 authentication-results: spf=none (sender IP is ) smtp.mailfrom=Mingliang_Pei@symantec.com; x-originating-ip: [155.64.23.5] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4PR1601MB1333; 7:wVUPq6SdMNOwE6xbT4ryEwE7291DBeVg5OZmakV4E2dkE6KYDX+gb15cNaUgSKfFpvOtAf7SzzKqQ0GWXESn9ydUse6eTwJgyYuwazOa/8aD0DXS2lBM409qgYgr1Xu+evn66HZTrmBWnNQc1QTGp5YMwdFvNXMM4VVe1ygyDbETPZS6gWxDmm+3Nde5WmFkd8zjdBLGL5dAqBTWE2TPZemGr5kU9SwRqP1ecpc6Q9U2PVy/PpYj14poD9ZkP7C/ x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-correlation-id: f784c5a1-0bf3-470c-7ee0-08d569129048 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:CY4PR1601MB1333; x-ms-traffictypediagnostic: CY4PR1601MB1333: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(180628864354917)(278428928389397)(120809045254105)(192374486261705)(258766100185102)(85827821059158); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(3002001)(93006095)(93001095)(3231101)(2400082)(944501161)(10201501046)(6041288)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(20161123564045)(6072148)(201708071742011); SRVR:CY4PR1601MB1333; BCL:0; PCL:0; RULEID:; SRVR:CY4PR1601MB1333; x-forefront-prvs: 0570F1F193 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(376002)(346002)(39860400002)(366004)(396003)(40434004)(13464003)(51914003)(495844002)(189003)(199004)(10290500003)(4326008)(2950100002)(26005)(102836004)(6246003)(3846002)(6116002)(229853002)(72206003)(2906002)(83506002)(25786009)(5250100002)(39060400002)(966005)(110136005)(58126008)(316002)(54906003)(478600001)(7736002)(76176011)(6506007)(54896002)(6486002)(6306002)(53936002)(6436002)(5660300001)(5890100001)(53546011)(3280700002)(36756003)(14454004)(99286004)(6512007)(3660700001)(66066001)(81156014)(81166006)(8936002)(59450400001)(80792005)(606006)(106356001)(86362001)(8676002)(575784001)(236005)(2900100001)(105586002)(186003)(97736004)(68736007); DIR:OUT; SFP:1101; SCL:1; SRVR:CY4PR1601MB1333; H:CY4PR1601MB1126.namprd16.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: symantec.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: ZfDHL16Fe3wwfCfoEGCXCZslPfH0uwyEfvSqJb+wCZJb3wBqpse/N+JGmfTdcJfA/4297BA+Cun5sR+hx1ESSQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_D69790AC4DAF8mingliangpeisymanteccom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: f784c5a1-0bf3-470c-7ee0-08d569129048 X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Feb 2018 01:24:39.2910 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 3b217a9b-6c58-428b-b022-5ad741ce2016 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR1601MB1333 X-OriginatorOrg: symantec.com X-Brightmail-Tracker: H4sIAAAAAAAAA01Se0hTURjn3Hu3XZej05r6ZYYyolJrKhhJRkj5x7SHhlCxjLrqTcX54M5H BqXmwHQhPlqlaaZokA/KSGmw0tRCh68sDV+pKWqFRBBLV2Tb7gT/OfzO7/F95zt8NCkdFbjT iSnpLJfCqOVCMSVWnRAduKDmVP4Vhq1B4/dNRFDBcCcVlGtIDWr4ayZDKGXzw2akNFROi5T1 9WuEsk6/iCIplfhIHKtOzGQ5v6OXxQn9b98L0pYn0NXiP/mCXDRrREXIiQYcCC26aVEREtNS /BOBRTsq2BDK5+8QvGBG8LRk0eHqQVBgMQr4yzIC/ZjebqNwIQmDhgGSV6oJaG4bc2QWEUzN lFszNC3E/jA8lWJrIsMx0N1VJbRhEp+Gukmdvfl2fBw+5+kR7wmFjsYKe1SGD0OBTmGjKbwb lr+1EDZagg9Bx7rYRkvxHIKVAXsVJ2tyqXPcXh1hV/htaib4Tm4wsVBD8GNiqDcOkTx2ga/z /+xZF6yAZ72TIj57Eda0s47/8oSS4WmHfxeM1OiQbULA7QTcKmxymBTQVrriwKfgZsOIkDeZ EHTnLQl5YT/MvJ4RlqDAyk2P4nE0rH5sJG1YgrdBX8UCxfP+8GOwhuSxLzyu/e7AftD6awDx WAkFbQbhZs8jRDciL0YTo0lOT81IZ9JY/wCFJjs51nYw1lWLVcSmJj9H9mVb3fES9fSe7EKY RnJnyd5znEoqYDKtzi4ENCmXSVplVkoSx2RfY7nUS1yGmtV0oZ00JXeTlJn3qKQ4nklnk1g2 jeU2VIJ2cs9FEaErs32f2muDhabqOq8X3rmeN6pCwrsDyiKLG7Rhp48Fi8IXuetJ6zljdaR2 SP3hwZZKv4iVOfPymfNaZ3N7/8EmC71gibwdHxrTffddVGtUmCar11zu8eSKZ9ZaeE/+2Zzo vtkpX5HPGyezq1FfP7pPGt7gXfpKTn+J9vC95yWnNAlMgA/JaZj/imKpiGgDAAA= X-Brightmail-Tracker: H4sIAAAAAAAAA02SbUhTURjHOffezbuZdVKnj0Yq0ofSmjOEJCQCi9aLkUEEK9GrW7rafNld khI0S5wvGJYOc1iaqJAueiHDxUiZGib5SljzJRVFTVMRYmVKtbu7D345/M7/+f+fc57DoUlf qyCYVmfqVbpMRhMuFFNixVn60BWNTiEzPBTFOh71EbHGoU4q1mDNim3acpLHKbnliQXJreZJ L3lj4wYhbzDNowuUQhynVGnUuSpd1LEUccannmFB9uIYunV/857AgKZtqBSJaMAxUDlbRZQi Me2LnQheVMx78ZtuBMY/NgG/WURgGjW5bRQuIWHA2k/ylccEWNpGPZl5BBNTla4MTQuxDIYm MrlD/HEqdNlrhRyT+Dw0jJcJOPbD8fCtwIR4zwnoaKlxR/3xUTCWSTmZwvtgcek5wck++Ah0 /BNzsi+eQbDS7+4iciUXOh3u7ggHwK8+C8GfFAhjc3UEPyaGRtsgybMEvs/+dWclWAove8e9 +GwSbBROe54lFCqGJj3+vTBSV4a4CQG/JaC4pNVjkkLbgxUPJ8DdphEhb+pD0FWwIOQLB2Hq /ZSHs+DL6rjnRvUIxuZTK5DMvO2yPF+F359bSI598G74WDNH8boM1gbqSJ4jofnpsoej4NXP fsSzHIxtVuF2Tz2iW1AYw6ayWr1WzzDZalm0lM3TpnEL4/ppadK0LO1r5P5rmwHtqHPrnB1h GoXv8KkYylH4Cphcl9OO9tBUeKBPX5JLwumMXnVDpcpW6ZJ1NzUq1o4IWhRsQMp8/eXI9Wjp xethAvNqN3r3Y39Edf5MUbkilMhpTVkPMudKlsksZZPx8LOOU95FS2sJJnXxpcIYy2Diaal4 V1t8ml9zye2vTsq2LGmQ7GzHSWz6hwitIeikQ/hGx4ZcS1I6FqZ7k6t6iFqn36IZ50Wdibsz LPIOOVCe6KgOp9gMJjqC1LHMf4uncM9MAwAA X-CFilter-Loop: ASB04 Archived-At: Subject: Re: [Teep] [EXT] Re: TEEP go forward plan and charter text X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Feb 2018 01:24:49 -0000 --_000_D69790AC4DAF8mingliangpeisymanteccom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi Jeremy, Kathleen and TEEP, >> to ensure that interoperability is maintained with the standards from th= ese groups. There was some prior discussion on scope and definition of =93interoperabil= ity=94 in the thread. I think the interoperability with other group standar= ds is desirable but I don=92t think we want to strongly put it a strict req= uirement because of potentially unclear scope and constraints. The previous= text looks fine to me in ensuring =93proper=94 use of existing application= layer interfaces. Best regards, Ming From: TEEP > on behalf = of Jeremy O'Donoghue > Date: Wednesday, January 31, 2018 at 3:13 PM To: Hannes Tschofenig > Cc: Kathleen Moriarty >, teep > Subject: [EXT] Re: [Teep] TEEP go forward plan and charter text Hi Kathleen, TEEP, I have a few remarks on the proposed Charter text. The second of Hannes=92 proposed changes (removal of =93security domain man= agement=94) makes the following paragraph =93A security domain allows=85=94= seem out of place. I suggest that we reject Hannes=92 second change. s/A security domain allows a service provider's applications to be isolated= so that one security domain cannot be influenced by another, unless it exp= oses an API to allow it. The solution approach must take a wide range of TEE and relevant technologi= es into account and will focus on the use of public key cryptography ./A se= curity domain allows a service provider's applications to be isolated so th= at one security domain cannot be influenced by another, unless it exposes a= n API to allow it. The solution approach must take a wide range of TEE and relevant technologi= es into account and will focus on the use of public key cryptography and in= teroperability with GlobalPlatform OTrP. Reason: interoperability with other OTrP systems; makes sense given the co-= operation with GlobalPlatform proposed below. s/The group will maintain a close relationship with the IETF SUIT working g= roup, GlobalPlatform, Trusted Computing Group, and other relevant standards= to ensure proper use of existing TEE-relevant application layer interfaces= ./The group will maintain a close relationship with the IETF SUIT working g= roup, GlobalPlatform, Trusted Computing Group, and other relevant standards= to ensure proper use of existing TEE-relevant application layer interfaces= and to ensure that interoperability is maintained with the standards from = these groups. Reason: interoperability is the explicit goal of relationships with other g= roups active in the field. Best regards Jeremy On 31 Jan 2018, at 16:18, Hannes Tschofenig > wrote: Hi Kathleen, Thanks for the update. It is good to hear that there is progress. The text below sounds good; I only have a few minor remarks: --- s/To programmatically install, update, and delete applications running in t= he TEE, this protocol runs between a service running within the TEE, a rela= y application or service access point on the device's network stack and a s= erver-side infrastructure that interacts with and optionally maintains the = applications. Some tasks are security sensitive and the server side require= s information about the device characteristics in form of attestation and t= he device-side may require information about the server./ To programmatical= ly install, update, and delete applications in a TEE, this protocol runs be= tween a service within the TEE, a relay application or service access point= on the device's network stack and a server-side infrastructure that intera= cts with and optionally maintains the applications. Some tasks are security= sensitive and the server side requires information about the device charac= teristics in form of attestation and the device-side may require informatio= n about the server. Reason: Just some wording changes to avoid repeated use of "running". --- --- s/This working group aims to develop an application layer protocol providin= g TEEs with the following functionality, * lifecycle management of trusted = applications, and * security domain management./ This working group aims to develop an application layer protocol providing = TEEs with lifecycle management of trusted applications. Reason: I would just simplify it and not go into the details. I believe tha= t this functionality is also covered in the lifecycle management of truste= d applications. --- --- s/The group will maintain a close relationship with the GlobalPlatform, Tru= sted Computing Group, and other relevant standards to ensure proper use of= existing TEE-relevant application layer interfaces./ The group will maintain a close relationship with the IETF SUIT working gro= up, GlobalPlatform, Trusted Computing Group, and other relevant standards t= o ensure proper use of existing TEE-relevant application layer interfaces. Reason: I want to explicitly state that this group has to work closely with= the SUIT WG to ensure proper alignment. --- Ciao Hannes -----Original Message----- From: TEEP [mailto:teep-bounces@ietf.org] On Behalf Of Kathleen Moriarty Sent: 29 January 2018 22:59 To: teep Subject: [Teep] TEEP go forward plan and charter text Hello, With agreement from IETF 100 that there is sufficient effort to work on TEE= P and now a better understanding from GP, I think we are in a position to f= irm up charter text and to try to charter a working group prior to London. = With that, we'll need to look at the charter text and be sure we have agre= ement, before I can kick off review within the IESG. I *think* the last charter text is what was entered on the TEEP page, but a= m open to be corrected. That should be our starting point for discussion. = I think the BoF chairs will be able to assist with this process, but I'm n= ot positive on their schedules. As such it may be a mix of the chairs and = AD working on this to see if we can get agreement on charter text. https://datatracker.ietf.org/doc/charter-ietf-teep/ Copied here for your convenience: The Trusted Execution Environment (TEE) is a secure area of a processor. The TEE provides security features, such as isolated execution, integrity o= f Trusted Applications along with confidentiality of their assets. In gener= al terms, the TEE offers an execution space that provides a higher level of= security than a "rich" operating system and more functionality than a secu= re element. For example, implementations of the TEE concept have been devel= oped by ARM, and Intel using the TrustZone and the SGX technology, respecti= vely. To programmatically install, update, and delete applications running in the= TEE, this protocol runs between a service running within the TEE, a relay = application or service access point on the device's network stack and a ser= ver-side infrastructure that interacts with and optionally maintains the ap= plications. Some tasks are security sensitive and the server side requires = information about the device characteristics in form of attestation and the= device-side may require information about the server. Privacy considerations have to be taken into account with authentication fe= atures and attestation. This working group aims to develop an application layer protocol providing = TEEs with the following functionality, * lifecycle management of trusted ap= plications, and * security domain management. A security domain allows a service provider's applications to be isolated s= o that one security domain cannot be influenced by another, unless it expos= es an API to allow it. The solution approach must take a wide range of TEE and relevant technologi= es into account and will focus on the use of public key cryptography. The group will produce the following deliverables. First, an architecture d= ocument describing the involved entities, their relationships, assumptions,= the keying framework and relevant use cases. Second, a solution document t= hat describes the above-described functionality. The choice of encoding for= mat(s) will be decided in the working group. The group may document several= attestation technologies considering the different hardware capabilities, = performance, privacy and operational properties. The group will maintain a close relationship with the GlobalPlatform, Trust= ed Computing Group, and other relevant standards to ensure proper use of e= xisting TEE-relevant application layer interfaces. -- Best regards, Kathleen _______________________________________________ TEEP mailing list TEEP@ietf.org https://clicktime.symantec.com/a/1/70vmngcZmPTPWU_c8qcm4Hxu9BtCIo0S3JyHQQjR= T_M=3D?d=3D6xPRcUZrOszZDqnJFGwfEcGCmqGLQsDTov6TGrcEHTPXN_TWSZ-Bu5wCGs2rTULt= h4WH-47Nz7WyFPPryjBaoxmWknzDjnNj_jcYfY2UkOKG2eopxEwdaO3qu4Yr0CyyShFZ5-E2-YL= tG1nOzvQxravaGKT4PjiBYqbeU1QzpyEDs-AGzwxGTmkLycI38jsTcYFSw3iOmlp0bgpni5WvuL= FW2_sXOY-S1jX16txAEECpj2qGDraRBLZy5p3wh6HTvZ-Iwy6XXImGbMe2DOUfUruzYfihDhhPB= i6DjhDntBOBAThtAnLOXDjPTbMWqyiGA_aKsM6BzHXDEE5BgVBSNjAqUOxVpxpX2y7Fg7ySmcnu= ORkT7mlfj9C2m_bm1lggso_f8UrUqPqgo-xe2jdH&u=3Dhttps%3A%2F%2Fwww.ietf.org%2Fm= ailman%2Flistinfo%2Fteep IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. _______________________________________________ TEEP mailing list TEEP@ietf.org https://clicktime.symantec.com/a/1/70vmngcZmPTPWU_c8qcm4Hxu9BtCIo0S3JyHQQjR= T_M=3D?d=3D6xPRcUZrOszZDqnJFGwfEcGCmqGLQsDTov6TGrcEHTPXN_TWSZ-Bu5wCGs2rTULt= h4WH-47Nz7WyFPPryjBaoxmWknzDjnNj_jcYfY2UkOKG2eopxEwdaO3qu4Yr0CyyShFZ5-E2-YL= tG1nOzvQxravaGKT4PjiBYqbeU1QzpyEDs-AGzwxGTmkLycI38jsTcYFSw3iOmlp0bgpni5WvuL= FW2_sXOY-S1jX16txAEECpj2qGDraRBLZy5p3wh6HTvZ-Iwy6XXImGbMe2DOUfUruzYfihDhhPB= i6DjhDntBOBAThtAnLOXDjPTbMWqyiGA_aKsM6BzHXDEE5BgVBSNjAqUOxVpxpX2y7Fg7ySmcnu= ORkT7mlfj9C2m_bm1lggso_f8UrUqPqgo-xe2jdH&u=3Dhttps%3A%2F%2Fwww.ietf.org%2Fm= ailman%2Flistinfo%2Fteep --_000_D69790AC4DAF8mingliangpeisymanteccom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <6A12F55BEB3504418A5389FDED94569D@namprd16.prod.outlook.com> Content-Transfer-Encoding: quoted-printable
Hi Jeremy, Kathleen and TEEP,

>> to ensure that interoperability is maintained with the standa= rds from these groups.

There was some prior discussion on scope and definition of =93interope= rability=94 in the thread. I think the interoperability with other group st= andards is desirable but I don=92t think we want to strongly put it a stric= t requirement because of potentially unclear scope and constraints. The previous text looks fine to me in ensuring =93p= roper=94 use of existing application layer interfaces.

Best regards,

Ming

From: TEEP <teep-bounces@ietf.org> on behalf of Jeremy O'Do= noghue <jodonogh@qti.qualco= mm.com>
Date: Wednesday, January 31, 2018 a= t 3:13 PM
To: Hannes Tschofenig <hannes.tschofenig@arm.com>
Cc: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.c= om>, teep <teep@ietf.org>=
Subject: [EXT] Re: [Teep] TEEP go f= orward plan and charter text

Hi Kathleen, TEEP,

I have a few remarks on the proposed Charter text.

The second of Hannes=92 proposed changes (removal of =93sec= urity domain management=94) makes the following paragraph =93A security dom= ain allows=85=94 seem out of place.

I suggest that we reject Hannes=92 second change.

s/A security domain allows a service provider's application= s to be isolated so that one security domain cannot be influenced by anothe= r, unless it exposes an API to allow it.

The solution approach must take a wide range of TEE and relevant technol= ogies into account and will focus on the use of public key cryptography&nbs= p;./A security domain allows a service provider's applications to be isolated so that one= security domain cannot be influenced by another, unless it exposes an API = to allow it.

The solution approach must take a wide range of TEE and relevant technol= ogies into account and will focus on the use of public key cryptography&nbs= p;and interoperability with GlobalPlatform OTrP.

Reason: interoperability with other OTrP systems; makes sense given th= e co-operation with GlobalPlatform proposed below.

s/The group will maintain a close relationship with t= he IETF SUIT working group, GlobalPlatform, Trusted Computing Group, and other relevant stan= dards to ensure proper use of existing TEE-relevant application layer interfaces./The group will maint= ain a close relationship with the IETF SUIT wo= rking group, GlobalPlatform, Trusted Computing= Group, and other relevant standards to ensure proper use of existing TEE-relevant application layer interfaces and to ensure th= at interoperability is maintained with the standards from these groups.

Reason: interoperability is the explicit goal of rela= tionships with other groups active in the field.

Best regards
Jeremy

On 31 Jan 2018, at 16:18, Hannes Tschofenig <Hannes.Tschofenig@arm.com&= gt; wrote:

Hi Kathleen,

Thanks for the update. It is good to hear that there is progress.

The text below sounds good; I only have a few minor remarks:

---

s/To programmatically install, update, and delete applications running in t= he TEE, this protocol runs between a service running within the TEE, a rela= y application or service access point on the device's network stack and a s= erver-side infrastructure that interacts with and optionally maintains the applications. Some tasks are security se= nsitive and the server side requires information about the device character= istics in form of attestation and the device-side may require information a= bout the server./ To programmatically install, update, and delete applications in a TEE, this protocol runs betw= een a service within the TEE, a relay application or service access point o= n the device's network stack and a server-side infrastructure that interact= s with and optionally maintains the applications. Some tasks are security sensitive and the server side re= quires information about the device characteristics in form of attestation = and the device-side may require information about the server.

Reason: Just some wording changes to avoid repeated use of "running&qu= ot;.

---

---

s/This working group aims to develop an application layer protocol providin= g TEEs with the following functionality, * lifecycle management of trusted = applications, and * security domain management./
This working group aims to develop an application layer protocol providing = TEEs with lifecycle management of trusted applications.

Reason: I would just simplify it and not go into the details. I believe tha= t this functionality is also covered in the  lifecycle management of t= rusted applications.

---

---

s/The group will maintain a close relationship with the GlobalPlatform, Tru= sted Computing Group,  and other relevant standards to ensure proper u= se of existing TEE-relevant application layer interfaces./
The group will maintain a close relationship with the IETF SUIT working gro= up, GlobalPlatform, Trusted Computing Group, and other relevant standards t= o ensure proper use of existing TEE-relevant application layer interfaces.<= br class=3D"">
Reason: I want to explicitly state that this group has to work closely with= the SUIT WG to ensure proper alignment.

---

Ciao
Hannes


-----Original Message-----
From: TEEP [mailto:teep= -bounces@ietf.org] On Behalf Of Kathleen Moriarty
Sent: 29 January 2018 22:59
To: teep
Subject: [Teep] TEEP go forward plan and charter text

Hello,

With agreement from IETF 100 that there is sufficient effort to work on TEE= P and now a better understanding from GP, I think we are in a position to f= irm up charter text and to try to charter a working group prior to London. =  With that, we'll need to look at the charter text and be sure we have agreement, before I can kick off revi= ew within the IESG.

I *think* the last charter text is what was entered on the TEEP page, but a= m open to be corrected.  That should be our starting point for discuss= ion.  I think the BoF chairs will be able to assist with this process,= but I'm not positive on their schedules.  As such it may be a mix of the chairs and AD working on this to see = if we can get agreement on charter text.

https://datatr= acker.ietf.org/doc/charter-ietf-teep/

Copied here for your convenience:

The Trusted Execution Environment (TEE) is a secure area of a processor. The TEE provides security features, such as isolated execution, integrity o= f Trusted Applications along with confidentiality of their assets. In gener= al terms, the TEE offers an execution space that provides a higher level of= security than a "rich" operating system and more functionality than a secure element. For example, implemen= tations of the TEE concept have been developed by ARM, and Intel using the = TrustZone and the SGX technology, respectively.

To programmatically install, update, and delete applications running in the= TEE, this protocol runs between a service running within the TEE, a relay = application or service access point on the device's network stack and a ser= ver-side infrastructure that interacts with and optionally maintains the applications. Some tasks are security se= nsitive and the server side requires information about the device character= istics in form of attestation and the device-side may require information a= bout the server.

Privacy considerations have to be taken into account with authentication fe= atures and attestation.

This working group aims to develop an application layer protocol providing = TEEs with the following functionality, * lifecycle management of trusted ap= plications, and * security domain management.

A security domain allows a service provider's applications to be isolated s= o that one security domain cannot be influenced by another, unless it expos= es an API to allow it.

The solution approach must take a wide range of TEE and relevant technologi= es into account and will focus on the use of public key cryptography.

The group will produce the following deliverables. First, an architecture d= ocument describing the involved entities, their relationships, assumptions,= the keying framework and relevant use cases. Second, a solution document t= hat describes the above-described functionality. The choice of encoding format(s) will be decided in the wor= king group. The group may document several attestation technologies conside= ring the different hardware capabilities, performance, privacy and operatio= nal properties.

The group will maintain a close relationship with the GlobalPlatform, Trust= ed Computing Group,  and other relevant standards to ensure proper use= of existing TEE-relevant application layer interfaces.


--

Best regards,
Kathleen

_______________________________________________
TEEP mailing list
TEEP@ietf.org
https://clicktime.symantec.com/a/1= /70vmngcZmPTPWU_c8qcm4Hxu9BtCIo0S3JyHQQjRT_M=3D?d=3D6xPRcUZrOszZDqnJFGwfEcG= CmqGLQsDTov6TGrcEHTPXN_TWSZ-Bu5wCGs2rTULth4WH-47Nz7WyFPPryjBaoxmWknzDjnNj_j= cYfY2UkOKG2eopxEwdaO3qu4Yr0CyyShFZ5-E2-YLtG1nOzvQxravaGKT4PjiBYqbeU1QzpyEDs= -AGzwxGTmkLycI38jsTcYFSw3iOmlp0bgpni5WvuLFW2_sXOY-S1jX16txAEECpj2qGDraRBLZy= 5p3wh6HTvZ-Iwy6XXImGbMe2DOUfUruzYfihDhhPBi6DjhDntBOBAThtAnLOXDjPTbMWqyiGA_a= KsM6BzHXDEE5BgVBSNjAqUOxVpxpX2y7Fg7ySmcnuORkT7mlfj9C2m_bm1lggso_f8UrUqPqgo-= xe2jdH&u=3Dhttps%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fteep IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you.

_______________________________________________
TEEP mailing list
TEEP@ietf.org
https://clicktime.symantec.com/a/1= /70vmngcZmPTPWU_c8qcm4Hxu9BtCIo0S3JyHQQjRT_M=3D?d=3D6xPRcUZrOszZDqnJFGwfEcG= CmqGLQsDTov6TGrcEHTPXN_TWSZ-Bu5wCGs2rTULth4WH-47Nz7WyFPPryjBaoxmWknzDjnNj_j= cYfY2UkOKG2eopxEwdaO3qu4Yr0CyyShFZ5-E2-YLtG1nOzvQxravaGKT4PjiBYqbeU1QzpyEDs= -AGzwxGTmkLycI38jsTcYFSw3iOmlp0bgpni5WvuLFW2_sXOY-S1jX16txAEECpj2qGDraRBLZy= 5p3wh6HTvZ-Iwy6XXImGbMe2DOUfUruzYfihDhhPBi6DjhDntBOBAThtAnLOXDjPTbMWqyiGA_a= KsM6BzHXDEE5BgVBSNjAqUOxVpxpX2y7Fg7ySmcnuORkT7mlfj9C2m_bm1lggso_f8UrUqPqgo-= xe2jdH&u=3Dhttps%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fteep

--_000_D69790AC4DAF8mingliangpeisymanteccom_--