Subject: [Rats] Another take on Remote Attestation

From: Anders Rundgren <[email-masked]>
Date: Thu, 28 Mar 2019 11:05:46 +0100

Hi RATS,

This is a FYI only posting.  Quite some time ago at the Office of CTO of RSA Security I started to play with remote attestation. After leaving RSA I came up with a scheme based on attested session keys enabling a bunch of pretty cool features:

- Offloading JSON and BASE64 encoding/decoding, Networking and UI to the REE
- API and response aggregation/pipe-lining
- User interaction inside of the protocol
- Provisioning of complex structures in a stepwise fashion
- Virtual namespace eliminates need for explicit key IDs
- Atomic multiphase provisioning
- Credential management with issuer isolation
- High-level human-readable MAC-protected API talking binary to primitive TEEs

All of this has been applied to a Secure Key Store/Provisioning Protocol powering a universal "Wallet" scheme I am currently working on.  Yes, JSON canonicalization is (of course) also a part of the plot :-)

I'm not a cryptographer so it is quite possible that the actual attestation step (DH+Auth) is not the best possible but the list above is for real.

https://cyberphone.github.io/doc/security/keygen2.html#Sample_Run
https://priorart.ip.com/IPCOM/000215433

Anders