Subject: [Teep] Mapping draft-birkholz-rats-suit-claims system properties

From: Dave Thaler <[email-masked]>
Date: Wed, 26 Jan 2022 19:31:19 +0000

As requested at the end of the joint interim meeting, below is my (now updated with the latest section numbers) table mapping properties between draft-birkholz-rats-suit-claims and draft-ietf-rats-eat, and by extension draft-ietf-sacm-coswid which EAT references for format within some claims like swevidence.

The mapping isn't exactly 1:1 but my reading is things do map.  For example,
EAT separates hw and sw properties into separate claim ids in hw vs sw claimsets, whereas draft-birkholz-rats-suit-claims combines them by proposing the same claim id in both claimsets.

SUIT                EAT             CoSWID
=====               ===             ======
3.1.1               3.6 (hw)
vendor-identifier   oemid
                    3.21 (sw)       2.6
                    swevidence      reg-id
3.1.2
class-identifier    (no mapping)

3.1.3               3.4
device-identifier   ueid

3.1.4               3.21            2.6
image-digest        swevidence      thumbprint

3.1.5               3.21            2.9.2
image-size          swevidence      size

3.1.6               3.7 (hw)
version             hardware-version-claims
                    3.9 (sw)
                    sw-version-type

Please check my work, as I believe all of above except
class-identifier can be deleted from the SUIT document
and just use the corresponding claims in the EAT document.

Dave