From nobody Thu Aug 2 12:29:08 2018 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 35A421277C8 for ; Thu, 2 Aug 2018 12:29:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_DKIMWL_WL_MED=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I06F28mTmVQA for ; Thu, 2 Aug 2018 12:28:58 -0700 (PDT) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60072.outbound.protection.outlook.com [40.107.6.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C04941286E3 for ; Thu, 2 Aug 2018 12:28:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Sr3X4WWhp1tZN6j+9N+mgKomqgsBCmuViBm5Q4TBMkA=; b=B7VHrpm5F1hZg86NWC0m4qm8Q4LCW5vi95wArxBJNhwQoqMPRJo5P2WsEuZXZ8J4fQbv7EZ1aMnaNV9XxW3I7RjNIKmDnuhBvXOZNoZNUo5zc8ICSqzbpAKcvVfv46POHiz81ObfrocBGJiJoNH2vVcs+I+QZJy/TfzkJcWlMQI= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1789.eurprd08.prod.outlook.com (10.168.67.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1017.15; Thu, 2 Aug 2018 19:28:55 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::adfc:4f29:e0df:9e9f]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::adfc:4f29:e0df:9e9f%10]) with mapi id 15.20.1017.010; Thu, 2 Aug 2018 19:28:55 +0000 From: Hannes Tschofenig To: "teep@ietf.org" Thread-Topic: Open Issues Thread-Index: AdQqltPtfm7jQVcURYqNnIqYnr37qg== Date: Thu, 2 Aug 2018 19:28:55 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [155.64.23.36] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1789; 6:tLLqnmzGolPel+3uKb6X2+6rJiRQoezF7ZLeXD8sWPF0cQgWV7FrYzpzMUxUvbzA8f/OvBYg6ZrKGWxoFON1Ke9NLGf09PFQg68qgWyvJ9er8Arep6Y03CY4uC2x3RNxtt+r2I+GWkXTZ0S0khx8Po6GseUvtJvriRsPFzc8VQeHg5Zaa7sg0AD7UsZtK7d8BVQ9z07jaU3d/0L4hABgG5FvRsGIbSsu+ZC6lC7InORORFiZ65QsyreH/TTF6w0Kpn4PFOsBIzt6KYBX2TOtgWqB9XOquMZ28yAwY5/PzYCYr3a9xSbZec7uhQ9XxzkhCFTySjQmmuiJUa+e9pnErrRNG5QXYQruV5tw//mbiOkSetstK9ZdDaqLDsBzdd9O/25HkFFyJPpYjHXYrpjLe4qSBlAX+2G2Rr3TvK19koJm9khIvLJp6GT8v4NEOA0qdPdP+rnQqg+GADqe+1zp7A==; 5:h1pPe40fHtc+zGHzvmImivv3EBjJ5SZvwuJoDM0O/XjmTn+/nzXajsjfTQ2rqP+Ja2ieNIy8uvlYX7j439IaRTZWgKmq8CfWTJvUFdqS4OIUvUpAunjP/y/6TZbD6glDS+gG0N7/x9dtgBUYI7TyGVR96SLzUOVQDSfVMQBouQ0=; 7:CraxrXctvrZFEYIBc8Mn4ahsQgb6RUzMrq/5X6xZ1GKqfeFEwF5ShMAJaewRbY4YtcDmRcuAuJ4Muhten+tELNeBllC94TQjbvsv6BYDVvh65jAXcy21/nto6ZE+s18WlWq1vGUTS1DNufHERaJnXVVnAfSaEBPZMgR1NzwkVCluMIAiCwNStxV01LHE8J3AvoV6H9ut+YoG/BIki/M8m07RZDMQ+WXlho8UkIy81yrnpNjsvVWFNjrpj6LyPdXG x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 8f9d55d9-53a7-4499-6d04-08d5f8ae3011 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989117)(5600074)(711020)(4618075)(4534165)(4627221)(201703031133081)(201702281549075)(8990107)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1789; x-ms-traffictypediagnostic: VI1PR0801MB1789: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(166708455590820)(223705240517415)(21748063052155); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(3231311)(944501410)(52105095)(6055026)(149027)(150027)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123564045)(20161123558120)(6072148)(201708071742011)(7699016); SRVR:VI1PR0801MB1789; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1789; x-forefront-prvs: 07521929C1 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(39860400002)(376002)(346002)(366004)(396003)(53754006)(199004)(189003)(40434004)(6116002)(790700001)(5640700003)(221733001)(8676002)(81166006)(3846002)(7116003)(6436002)(25786009)(9686003)(55016002)(6306002)(54896002)(5660300001)(236005)(1730700003)(81156014)(66066001)(7736002)(97736004)(8936002)(14454004)(966005)(72206003)(105586002)(478600001)(74316002)(606006)(53936002)(33656002)(2351001)(106356001)(5250100002)(186003)(68736007)(2900100001)(86362001)(2501003)(5630700001)(7696005)(3480700004)(26005)(2906002)(5024004)(6506007)(102836004)(14444005)(316002)(6916009)(486006)(99286004)(476003)(256004); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1789; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: Pan9prR224Cpdsz6XUtI63aGS5OT3+KDSoUeQm/vB37W3Q+bpq3egXeOD8vWav7yiLW4ikAywNh22jDCSZkh1v59a4B5uzNptAkMuSxZY4fK2TTwmq/EjrgMNE8Wh3T1iX6xWmA/ad5FZe4QJNFGcRpeiYH2YJ5N9V933TNv2hwNxUCj/sVE4CKcBEdJXh/MrbwX4YxUZKpfOrHOK6xC8Clp2v6aURCN8YEsG/RjdUnZFlQsXpqKHOeF9S7SObb1c7uFx8oiwNGtQ0X8qojGkfZPI88GfopNeDpic7Aq4pqQ8KVL9AyzOfY+tVTZF7xF9czU3nBsWVgEzvHdqqF0omi0t3sOvAhfiJkMqzLk23o= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB2112AF7498F50C5AC79F7042FA2C0VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 8f9d55d9-53a7-4499-6d04-08d5f8ae3011 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Aug 2018 19:28:55.6288 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1789 Archived-At: Subject: [Teep] Open Issues X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Aug 2018 19:29:05 -0000 --_000_VI1PR0801MB2112AF7498F50C5AC79F7042FA2C0VI1PR0801MB2112_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, David, Ming and myself were chatting today about the TEEP work and we start= ed to create open issues in the working group Github repository: https://github.com/ietf-teep/architecture/issues Before updating the architecture document it would obviously be useful to f= ind an agreement on the major open issues first. Feel free to share your views on any of the issues (or add new issues). Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_VI1PR0801MB2112AF7498F50C5AC79F7042FA2C0VI1PR0801MB2112_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

David, Ming and myself were chatting today about the= TEEP work and we started to create open issues in the working group Github= repository:

https://github.com/ietf-teep/architecture/issues

 

Before updating the architecture document it would o= bviously be useful to find an agreement on the major open issues first.

 

Feel free to share your views on any of the issues (= or add new issues).

 

Ciao

Hannes

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_VI1PR0801MB2112AF7498F50C5AC79F7042FA2C0VI1PR0801MB2112_-- From nobody Tue Aug 14 12:44:30 2018 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF727130E92 for ; Tue, 14 Aug 2018 12:44:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H1UXNHU85eEI for ; Tue, 14 Aug 2018 12:44:25 -0700 (PDT) Received: from dmz-mailsec-scanner-4.mit.edu (dmz-mailsec-scanner-4.mit.edu [18.9.25.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5BAC3130E15 for ; Tue, 14 Aug 2018 12:44:25 -0700 (PDT) X-AuditID: 1209190f-1e1ff7000000252f-0d-5b733117d6dc Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-4.mit.edu (Symantec Messaging Gateway) with SMTP id EF.D0.09519.711337B5; Tue, 14 Aug 2018 15:44:24 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-2.mit.edu (8.13.8/8.9.2) with ESMTP id w7EJiKXu026249 for ; Tue, 14 Aug 2018 15:44:21 -0400 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.8/8.12.4) with ESMTP id w7EJiHLs016501 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Tue, 14 Aug 2018 15:44:19 -0400 Date: Tue, 14 Aug 2018 14:44:16 -0500 From: Benjamin Kaduk To: teep@ietf.org Message-ID: <20180814194416.GG40887@kduck.kaduk.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrOIsWRmVeSWpSXmKPExsUixG6noithWBxt0PWLx2Lpn2/MDoweS5b8 ZApgjOKySUnNySxLLdK3S+DKmNQWWHCTqeLK9gOMDYzTmboYOTkkBEwk3vYtYe1i5OIQEljM JDHv0ipmkISQwFFGibsbTSASL5kk5rQ3MIIkWARUJZZd7QbrZhNQkWjovgzWICIgKHF39RMW EFtYQFei/cgPdhCbF2jD7c0rmCFsQYmTMyFqmAW0JG78ewk0hwPIlpZY/o8DJCwqoCyxt+8Q +wRG3llIOmYh6ZiF0LGAkXkVo2xKbpVubmJmTnFqsm5xcmJeXmqRrolebmaJXmpK6SZGUBhx SvLvYJzT4H2IUYCDUYmHN+BSUbQQa2JZcWXuIUZJDiYlUd50tuJoIb6k/JTKjMTijPii0pzU 4kOMEhzMSiK8MoxAOd6UxMqq1KJ8mJQ0B4uSOO+9mvBoIYH0xJLU7NTUgtQimKwMB4eSBK+o AVCjYFFqempFWmZOCUKaiYMTZDgP0HA1kBre4oLE3OLMdIj8KUZdjj/vp05iFmLJy89LlRLn fakPVCQAUpRRmgc3BxT/Etn7a14xigO9JczrATKKB5g64Ca9AlrCBLQkWaQQZElJIkJKqoHR 8lytcfP1lveyWrui9jYuO3pN8WWi7FYZveAO67qiJUu3ibLF78z86t9zYk1/eUAGS/3XnxXx b06+Ov+PYaHVtD3aPJzRF5aVx9vv/Sh5+euOqMlBOf2uZTnpq/6zBOVrz5/McF3Tykrsn/6P d09FO4xue1w90ZmnX5907O+1Q+1RiTMidrxXYinOSDTUYi4qTgQA4y3msdoCAAA= Archived-At: Subject: [Teep] Foreshadow and SGX attestation keys? X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Aug 2018 19:44:28 -0000 Hi all, You may have seen https://foreshadowattack.eu/#paper making the rounds, including the remark "[t]he extracted remote attestation keys affect millions of devices". While the implementation flaw is of course not fatal to our goals here, it may have some impact on what level of usability we can get on what timescale... -Ben From nobody Tue Aug 14 12:52:42 2018 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F336130EC7 for ; Tue, 14 Aug 2018 12:52:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vxRybZTRngPS for ; Tue, 14 Aug 2018 12:52:38 -0700 (PDT) Received: from mail-qt0-x231.google.com (mail-qt0-x231.google.com [IPv6:2607:f8b0:400d:c0d::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 14C09130EB9 for ; Tue, 14 Aug 2018 12:52:38 -0700 (PDT) Received: by mail-qt0-x231.google.com with SMTP id d4-v6so22424398qtn.13 for ; Tue, 14 Aug 2018 12:52:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Z5TT+2sUZwUytiPpDSfgc0umZImk5CRCWJGuOcVQWEo=; b=XWt/0PwuyQ21Z46LdMwp8mIPntjqGEhcg6ryLaGM19TJ+LETwGZYi3xFuC2QGYkXvn AO4eCktWJb9h0rpnacQpviMwVawsAE+rhqtbUvL2bn/7L0+ZC+fGXJXYkdhDqel+IyEB xToGeFXB3uWNzh9bluDVkkgm/YOl0aoLGlVQKjfbkR+CtIheOEmbnB1MBrjDj80zv/CG JnPUk3rznzc/mvkPOeob685jJQJnXBy8VWLLCTSdDPkySr0RKW9g+Q0XRx4+Rw9zJ7Dj VW8H/OllZafJIVu+mLLp+NABqhSkiEwRMjTm833J4t6jtuKgTyOVlkEhTS1AjIpjsSVg xj9Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=Z5TT+2sUZwUytiPpDSfgc0umZImk5CRCWJGuOcVQWEo=; b=FUrdP4XTq0AmJcrauU1LY1/8ML+J/CUqbjHWl7bnfsdx7LgLZR0UMbEbbqCRG07iG6 E4ufnzDv7yupklvT6lFQJZmieT+ZUPUrxvwGvwnxR2d667Z/qghaH0xha5kpheM//Okm ncFWaUgTdS46rP1yDre9cIeI+CQZcVdyBBm43tfBZnVFBmQ6xsjlfUu3ncJyCbWxqaUL EBL1FjVEq4K0dIBXaUpaY+lkYtqWhDzEexHS5lJiZU+lfwfPM4FPRGMCzrGnn0JbfRAg 6zPnyDydpZ0XU8BY2twoH3wC7fjXYLTRRH6jIKudGmrDvdpNwTLOD0nW1daI1EGA2O7A 2T2Q== X-Gm-Message-State: AOUpUlE9SOSwLJscbn2BswKoGAoSO7V6LG6oF7cl5TsBs7BUtgPRiC3W TeUHV2rbY+pUk8SyMvNk1fGL0qGu X-Google-Smtp-Source: AA+uWPx/wjrD5ebfy/KBbVTkfdGaFRDr64XOPBTbI42DaNuISVrZkeN7M1JS9pY3uciW3GYexe8PlA== X-Received: by 2002:ac8:6143:: with SMTP id d3-v6mr5614885qtm.298.1534276357070; Tue, 14 Aug 2018 12:52:37 -0700 (PDT) Received: from ?IPv6:2600:380:5913:3e90:6d92:18f0:96dd:b326? ([2600:380:5913:3e90:6d92:18f0:96dd:b326]) by smtp.gmail.com with ESMTPSA id v90-v6sm13549772qkv.63.2018.08.14.12.52.36 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 14 Aug 2018 12:52:36 -0700 (PDT) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) From: Kathleen Moriarty X-Mailer: iPhone Mail (15E216) In-Reply-To: <20180814194416.GG40887@kduck.kaduk.org> Date: Tue, 14 Aug 2018 15:52:35 -0400 Cc: teep@ietf.org Content-Transfer-Encoding: quoted-printable Message-Id: <00EC11BD-6B08-4FBC-95A2-142908A68800@gmail.com> References: <20180814194416.GG40887@kduck.kaduk.org> To: Benjamin Kaduk Archived-At: Subject: Re: [Teep] Foreshadow and SGX attestation keys? X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Aug 2018 19:52:40 -0000 There have been other research publications in recent months that have also p= roved SGX is affected by spectre (speculative execution attacks). They will= just keep coming as long as speculative execution is permitted. The perfor= mance gain is hard to ignore. There are other approaches to enclave separat= ion in research and I=E2=80=99m sure Intel is working on their solutions as w= ell, so hopefully some will chime in. Thanks for raising this on list. I look forward to the discussion. Best, Kathleen=20 Sent from my mobile device > On Aug 14, 2018, at 3:44 PM, Benjamin Kaduk wrote: >=20 > Hi all, >=20 > You may have seen https://foreshadowattack.eu/#paper making the rounds, > including the remark "[t]he extracted remote attestation keys affect > millions of devices". While the implementation flaw is of course not fata= l > to our goals here, it may have some impact on what level of usability we > can get on what timescale... >=20 >=20 > -Ben >=20 > _______________________________________________ > TEEP mailing list > TEEP@ietf.org > https://www.ietf.org/mailman/listinfo/teep From nobody Thu Aug 16 08:22:41 2018 Return-Path: X-Original-To: teep@ietfa.amsl.com Delivered-To: teep@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D5CF9130D7A for ; Thu, 16 Aug 2018 08:22:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.301 X-Spam-Level: X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uYc_klwGVXRh for ; Thu, 16 Aug 2018 08:22:30 -0700 (PDT) Received: from alexa-out-ams-01.qualcomm.com (alexa-out-ams-01.qualcomm.com [185.23.61.162]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0C65A130F1F for ; Thu, 16 Aug 2018 08:22:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1534432950; x=1565968950; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=WcLl1PVQGVIcoX31DiKtF1kzQddNgp+T4/wMpbjBwRA=; b=sCjT+JD+2CtjmHHK9mysCeVWR4BcPCecL4P4up75rgKtUL+3MOboZcWz 5UCA2nASk4WOBZYzv7y/jahpBhgOhN9KAM5Tz2zne6fpaeQmLqWwNGxv9 y/Lv5kuQWKsEcOpVmURlMDD2g35hsZCUYwjS6jHkRFoghkTjMVY00p5+q k=; X-IronPort-AV: E=Sophos;i="5.53,243,1531778400"; d="scan'208";a="979285" Received: from ironmsg03-ams.qualcomm.com ([10.251.56.4]) by alexa-out-ams-01.qualcomm.com with ESMTP; 16 Aug 2018 17:22:28 +0200 X-IronPort-AV: E=McAfee;i="5900,7806,8986"; a="4630920" Received: from euamsexm01e.eu.qualcomm.com ([10.251.127.42]) by ironmsg03-ams.qualcomm.com with ESMTP/TLS/AES256-SHA; 16 Aug 2018 17:22:28 +0200 Received: from euamsexm01a.eu.qualcomm.com (10.251.127.40) by euamsexm01e.eu.qualcomm.com (10.251.127.42) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Thu, 16 Aug 2018 17:22:26 +0200 Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by euamsexm01a.eu.qualcomm.com ([10.251.127.40]) with mapi id 15.00.1365.000; Thu, 16 Aug 2018 17:22:26 +0200 From: Jeremy O'Donoghue To: Kathleen Moriarty CC: Benjamin Kaduk , "teep@ietf.org" Thread-Topic: [Teep] Foreshadow and SGX attestation keys? Thread-Index: AQHUNAc8x5gYdLv4DEiqFMiMq22KA6S/hxuAgALZLwA= Date: Thu, 16 Aug 2018 15:22:26 +0000 Message-ID: <41F62C33-0DA1-4C7B-A1C1-96F6878A7A40@qti.qualcomm.com> References: <20180814194416.GG40887@kduck.kaduk.org> <00EC11BD-6B08-4FBC-95A2-142908A68800@gmail.com> In-Reply-To: <00EC11BD-6B08-4FBC-95A2-142908A68800@gmail.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.9.1) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.251.52.12] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Teep] Foreshadow and SGX attestation keys? X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Aug 2018 15:22:39 -0000 VGhlcmUgYXJlIG1hbnkgcG9zc2libGUgVEVFIGltcGxlbWVudGF0aW9ucyBhbmQgYXJjaGl0ZWN0 dXJlcy4gSSBzZWUgbm8gcmVhc29uIHdoeSBmbGF3cyBpbiBhIHBhcnRpY3VsYXIgaGFyZHdhcmUg cGxhdGZvcm0gbWFrZSBhbnkgZGlmZmVyZW5jZSB0byB0aGUgc2VjdXJpdHkgY2xhaW1zIHRoYXQg d2UgY2FuIG1ha2UgZm9yIGEgVEVFLg0KDQpXaGlsZSBtYW55IFRFRXMgYXJlIGltcGxlbWVudGVk IGluIGRldmljZXMgdGhhdCBtYWtlIHVzZSBvZiBzaGFyZWQgQ1BVIHRocmVhZHMsIHRoZXJlIGlz IG5vdGhpbmcgcHJldmVudGluZyBhIFRFRSBiZWluZyBpbXBsZW1lbnRlZCBvbiBhIG1vcmUgaXNv bGF0ZWQgQ1BVLiBUaGUgR2xvYmFsUGxhdGZvcm0gVEVFIFN5c3RlbSBBcmNoaXRlY3R1cmUgZXhw bGljaXRseSBhbGxvd3MgZm9yIGEgdmVyeSB3aWRlIHJhbmdlIG9mIHBvc3NpYmxlIFRFRSBlbWJv ZGltZW50cywgZm9yIGV4YW1wbGUuDQoNClRoaXMgY2xhc3Mgb2YgbWljcm8tYXJjaGl0ZWN0dXJh bCBhdHRhY2sgKFNwZWN0cmUgYW5kIE1lbHRkb3duIGJlaW5nIG90aGVycyBpbiBhIHNpbWlsYXIg dmVpbikgaXMgbm90IGFwcGxpY2FibGUgdG8gZGVzaWducyB1c2luZyBhIHNlcGFyYXRlIENQVS4g V2UgYWxzbyBrbm93IHRoYXQgQVJNLWJhc2VkIENQVXMgc3VwcG9ydGluZyBUcnVzdFpvbmUgYXJl IG5vdCB2dWxuZXJhYmxlIHRvIFNwZWN0cmUgYW5kIHNlZW0gbGVzcyBpbXBhY3RlZCBieSBNZWx0 ZG93biwgZm9yIGV4YW1wbGUgKGl0IGlzIHByb2JhYmx5IHRvbyBlYXJseSB0byBzYXkgd2hldGhl ciBGb3Jlc2hhZG93LWxpa2UgdGVjaG5pcXVlcyBhcmUgYXBwbGljYWJsZSB0byBBUk0pLg0KDQpF dmVuIGZvciBTR1gsIGl0IHNlZW1zIHRvIG1lIHRoYXQgaXQgaXMgc2lnbmlmaWNhbnRseSBoYXJk ZXIgdG8gbW91bnQgYSBzdWNjZXNzZnVsIGF0dGFjayBvbiBhIHNwZWNpZmljIGlkZW50aWZpZWQg YXNzZXQgaW4gU0dYIHRoYW4gaXQgaXMgdG8gb2J0YWluIGVsZXZhdGVkIHByaXZpbGVnZSBvbiBh bG1vc3QgYW55IFJFRS4NCg0KSSBkbyBhc3N1bWUgdGhhdCBpbiBnZW5lcmFsLCBUZWVwIGlzIHdv cmtpbmcgdG93YXJkcyBzcGVjaWZpY2F0aW9ucyBmb3IgYSBjbGFzcyBvZiBleGVjdXRpb24gZW52 aXJvbm1lbnRzIHdoaWNoIG9mZmVyIHByb3RlY3Rpb24gZnJvbSBtb2RlcmF0ZWx5IGNhcGFibGUg YXR0YWNrZXJzIHdobyBoYXZlIG9ubHkgc29mdHdhcmUvcmVtb3RlIGFjY2VzcyB0byBhIHZpY3Rp bSBkZXZpY2UgLSBpdCBpcyBub3QgaW50ZW5kZWQgdG8gb2ZmZXIgYWJzb2x1dGUgc2VjdXJpdHkg YnkgYSB2ZXJ5IGxvbmcgd2F5LiBBdCBiZXN0IGl0IHJhaXNlcyB0aGUgYmFyIHNpZ25pZmljYW50 bHkuDQoNCkZvcmVzaGFkb3cgaXMgdGhlIGZpcnN0IHN1Y2ggYXR0YWNrIG9uIGEgVEVFLWxpa2Ug ZW52aXJvbm1lbnQgSSBoYXZlIHNlZW4gd2hpY2ggd29ya3MgZnJvbSB1c2VyIHNwYWNlIGFuZCBk b2VzIG5vdCByZXF1aXJlIGNvbXByb21pc2UgdG8gdGhlIGtlcm5lbCwgYnV0IGl0IHdpbGwgbm90 IGJlIHRoZSBsYXN0LiBVbmZvcnR1bmF0ZWx5IHRoZSBiZXN0IHdlIGNhbiBleHBlY3QgaXMgdG8g cmFpc2UgdGhlIGJhcnJpZXIgdG8gYXR0YWNrcy4NCg0KQmVzdCByZWdhcmRzDQpKZXJlbXkNCg0K PiBPbiAxNCBBdWcgMjAxOCwgYXQgMjA6NTIsIEthdGhsZWVuIE1vcmlhcnR5IDxrYXRobGVlbi5t b3JpYXJ0eS5pZXRmQGdtYWlsLmNvbT4gd3JvdGU6DQo+IA0KPiBUaGVyZSBoYXZlIGJlZW4gb3Ro ZXIgcmVzZWFyY2ggcHVibGljYXRpb25zIGluIHJlY2VudCBtb250aHMgdGhhdCBoYXZlIGFsc28g cHJvdmVkIFNHWCBpcyBhZmZlY3RlZCBieSBzcGVjdHJlIChzcGVjdWxhdGl2ZSBleGVjdXRpb24g YXR0YWNrcykuICBUaGV5IHdpbGwganVzdCBrZWVwIGNvbWluZyBhcyBsb25nIGFzIHNwZWN1bGF0 aXZlIGV4ZWN1dGlvbiBpcyBwZXJtaXR0ZWQuICBUaGUgcGVyZm9ybWFuY2UgZ2FpbiBpcyBoYXJk IHRvIGlnbm9yZS4gIFRoZXJlIGFyZSBvdGhlciBhcHByb2FjaGVzIHRvIGVuY2xhdmUgc2VwYXJh dGlvbiBpbiByZXNlYXJjaCBhbmQgSeKAmW0gc3VyZSBJbnRlbCBpcyB3b3JraW5nIG9uIHRoZWly IHNvbHV0aW9ucyBhcyB3ZWxsLCBzbyBob3BlZnVsbHkgc29tZSB3aWxsIGNoaW1lIGluLg0KPiAN Cj4gVGhhbmtzIGZvciByYWlzaW5nIHRoaXMgb24gbGlzdC4gIEkgbG9vayBmb3J3YXJkIHRvIHRo ZSBkaXNjdXNzaW9uLg0KPiANCj4gQmVzdCwNCj4gS2F0aGxlZW4gDQo+IA0KPiBTZW50IGZyb20g bXkgbW9iaWxlIGRldmljZQ0KPiANCj4+IE9uIEF1ZyAxNCwgMjAxOCwgYXQgMzo0NCBQTSwgQmVu amFtaW4gS2FkdWsgPGthZHVrQG1pdC5lZHU+IHdyb3RlOg0KPj4gDQo+PiBIaSBhbGwsDQo+PiAN Cj4+IFlvdSBtYXkgaGF2ZSBzZWVuIGh0dHBzOi8vZm9yZXNoYWRvd2F0dGFjay5ldS8jcGFwZXIg bWFraW5nIHRoZSByb3VuZHMsDQo+PiBpbmNsdWRpbmcgdGhlIHJlbWFyayAiW3RdaGUgZXh0cmFj dGVkIHJlbW90ZSBhdHRlc3RhdGlvbiBrZXlzIGFmZmVjdA0KPj4gbWlsbGlvbnMgb2YgZGV2aWNl cyIuICBXaGlsZSB0aGUgaW1wbGVtZW50YXRpb24gZmxhdyBpcyBvZiBjb3Vyc2Ugbm90IGZhdGFs DQo+PiB0byBvdXIgZ29hbHMgaGVyZSwgaXQgbWF5IGhhdmUgc29tZSBpbXBhY3Qgb24gd2hhdCBs ZXZlbCBvZiB1c2FiaWxpdHkgd2UNCj4+IGNhbiBnZXQgb24gd2hhdCB0aW1lc2NhbGUuLi4NCj4+ IA0KPj4gDQo+PiAtQmVuDQo+PiANCj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQo+PiBURUVQIG1haWxpbmcgbGlzdA0KPj4gVEVFUEBpZXRmLm9yZw0K Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby90ZWVwDQo+IA0KPiBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBURUVQIG1haWxp bmcgbGlzdA0KPiBURUVQQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vdGVlcA0KDQo= From nobody Thu Aug 16 11:58:04 2018 Return-Path: X-Original-To: teep@ietf.org Delivered-To: teep@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id AFCE2128CFD; Thu, 16 Aug 2018 11:58:02 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Meeting Session Request Tool To: Cc: teep@ietf.org, kaduk@mit.edu, dthaler@dthaler.microsoft.com, teep-chairs@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.83.1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153444588265.12168.5665461849478943985.idtracker@ietfa.amsl.com> Date: Thu, 16 Aug 2018 11:58:02 -0700 Archived-At: Subject: [Teep] teep - New Meeting Session Request for IETF 103 X-BeenThere: teep@ietf.org X-Mailman-Version: 2.1.27 List-Id: A Protocol for Dynamic Trusted Execution Environment Enablement List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Aug 2018 18:58:03 -0000 A new meeting session request has just been submitted by Dave Thaler, a Chair of the teep working group. --------------------------------------------------------- Working Group Name: Trusted Execution Environment Provisioning Area Name: Security Area Session Requester: Dave Thaler Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 75 Conflicts to Avoid: First Priority: mile core ace sacm t2trg suit oauth Second Priority: tls saag v6ops 6man intarea anima Third Priority: doh dots People who must be present: Dave Thaler Nancy Cam-Winget Benjamin Kaduk Resources Requested: Special Requests: ---------------------------------------------------------