-/ This is a full CWT-format token with a very simple payloal. /
-/ The main structure visible here is that of the COSE_Sign1. /
+/ This is a full CWT-format token. The payload is the /
+/ attestation hardware block above. The main structure /
+/ visible is that of the COSE_Sign1. /
61( 18( [
h'A10126', / protected headers /
{}, / empty unprotected headers /
- h'A20B46024A6B0978DE0A49000102030405060708', / payload /
+ h'A60A4CD79B964DDD5471C1393C88881901005001
+ 98F50A4FF6C05861C8860D13A638EA19010219FA
+ F2190106F5190107031901048263332E3101', / payload /
h'9B9B2F5E470000F6A20C8A4157B5763FC45BE759
9A5334028517768C21AFFB845A56AB557E0C8973
A07417391243A79C478562D285612E292C622162
@@ -5377,9 +5372,7 @@
The detached EAT bundle itself can be assembled by untrusted software.¶
-/ This is a detached EAT bundle tag. Note that 602, the tag /
-/ identifying a detached EAT bundle is not yet registered /
-/ with IANA /
+/ This is a detached EAT bundle tag. /
602([
@@ -5412,7 +5405,7 @@
C0997122EA867F07B8D5EB',
{
/ A CBOR-encoded byte-string wrapped EAT claims-set. It /
- / contains claims suitable for a TEE /
+ / contains claims suitable for a TEE. /
"TEE" : h'a40a48948f8860d13a463e190106f519010702
190111818218795858a60064336132340c0101
6b41636d6520544545204f530d65332e312e34
@@ -5430,7 +5423,7 @@
/ This example contains submodule that is a detached digest, /
/ which is the hash of a Claims-Set convey outside this token. /
/ Other than that is is the other example of a token from an /
-/ attestation HW block /
+/ attestation HW block. /
{
/ eat_nonce / 10: h'3515744961254b41a6cf9c02',
@@ -5852,6 +5845,9 @@
JC<J,C> = JSON-ONLY<J> / CBOR-ONLY<C>
+; Same as JC<> but with unwound generic nesting as it seems to cause
+; problems. Perhaps this is the nesting problem described in RFC 8610.
+JC-NEST-SAFE<J,C> = J .feature "json" / C .feature "cbor"
¶
diff --git a/draft-ietf-rats-eat.txt b/draft-ietf-rats-eat.txt
index 934574b3..6e875ff4 100644
--- a/draft-ietf-rats-eat.txt
+++ b/draft-ietf-rats-eat.txt
@@ -1796,8 +1796,8 @@ Table of Contents
Detached-EAT-Bundle = [
main-token : Nested-Token,
detached-claims-sets: {
- + tstr => JC
+ + tstr => JC-NEST-SAFE
}
]
@@ -2477,8 +2477,8 @@ Table of Contents
Detached-EAT-Bundle = [
main-token : Nested-Token,
detached-claims-sets: {
- + tstr => JC
+ + tstr => JC-NEST-SAFE
}
]
@@ -3414,28 +3414,26 @@ A.1.1. Simple TEE Attestation
/ eat_nonce / 10: h'48df7b172d70b5a18935d0460a73dd71',
/ oemboot / 262: true,
/ dbgstat / 263: 2, / disabled-since-boot /
- / manifests / 273: [
+ / manifests / 272: [
[
- 121, / CoAP Content ID. A /
- / made up one until one /
- / is assigned for CoSWID /
-
- / This is byte-string wrapped /
- / payload CoSWID. It gives the TEE /
- / software name, the version and /
- / the name of the file it is in. /
- / {0: "3a24", /
- / 12: 1, /
- / 1: "Acme TEE OS", /
- / 13: "3.1.4", /
- / 2: [{31: "Acme TEE OS", 33: 1}, /
+ 258, / CoAP Content ID for CoSWID /
+
+ / This is byte-string wrapped /
+ / payload CoSWID. It gives the TEE /
+ / software name, the version and /
+ / the name of the file it is in. /
+ / {0: "3a24", /
+ / 12: 1, /
+ / 1: "Acme TEE OS", /
+ / 13: "3.1.4", /
+ / 2: [{31: "Acme TEE OS", 33: 1}, /
/ {31: "Acme TEE OS", 33: 2}], /
- / 6: { /
- / 17: { /
- / 24: "acme_tee_3.exe" /
- / } /
- / } /
- / } /
+ / 6: { /
+ / 17: { /
+ / 24: "acme_tee_3.exe" /
+ / } /
+ / } /
+ / } /
h' a60064336132340c01016b
41636d6520544545204f530d65332e31
2e340282a2181f6b41636d6520544545
@@ -3492,14 +3490,14 @@ A.1.2. Submodules for Board and Device
/ document, but they are a valid use of submodules. /
{
- / eat_nonce / 10: h'e253cabedc9eec24ac4e25bcbeaf7765'
+ / eat_nonce / 10: h'e253cabedc9eec24ac4e25bcbeaf7765',
/ ueid / 256: h'0198f50a4ff6c05861c8860d13a638ea',
/ oemid / 258: h'894823', / IEEE OUI format OEM ID /
/ hwmodel / 259: h'549dcecc8b987c737b44e40f7c635ce8'
/ Hash of chip model name /,
/ hwversion / 260: ["1.3.4", 1], / Multipartnumeric /
- / swname / 271: "Acme OS",
- / swversion / 272: ["3.5.5", 1],
+ / swname / 270: "Acme OS",
+ / swversion / 271: ["3.5.5", 1],
/ oemboot / 262: true,
/ dbgstat / 263: 3, / permanent-disable /
/ timestamp (iat) / 6: 1526542894,
@@ -3524,7 +3522,7 @@ A.1.3. EAT Produced by Attestation Hardware Block
/ This is an example of a token produced by a HW block /
/ purpose-built for attestation. Only the nonce claim changes /
- / from one attestation to the next as the rest either come /
+ / from one attestation to the next as the rest either come /
/ directly from the hardware or from one-time-programmable memory /
/ (e.g. a fuse). 47 bytes encoded in CBOR (8 byte nonce, 16 byte /
/ UEID). /
@@ -3561,13 +3559,11 @@ A.1.4. Key / Key Store Attestation
{
/ eat_nonce / 10: h'99b67438dba40743266f70bf75feb1026d5134
- 97a229bfe8'
+ 97a229bfe8',
/ oemboot / 262: true,
/ dbgstat / 263: 2, / disabled-since-boot /
- / manifests / 273: [
- [ 121, / CoAP Content ID. A /
- / made up one until one /
- / is assigned for CoSWID /
+ / manifests / 272: [
+ [ 258, / CoAP Content ID. /
h'a600683762623334383766
0c000169436172626f6e6974650d6331
2e320e0102a2181f75496e6475737472
@@ -3598,10 +3594,8 @@ A.1.4. Key / Key Store Attestation
"HLOS" : { / submod for high-level OS /
/ eat_nonce / 10: h'8b0b28782a23d3f6',
/ oemboot / 262: true,
- / manifests / 273: [
- [ 121, / CoAP Content ID. A /
- / made up one until one /
- / is assigned for CoSWID /
+ / manifests / 272: [
+ [ 258, / CoAP Content ID. /
h'a600687337
6537346b78380c000168
44726f6964204f530d65
@@ -3635,7 +3629,7 @@ A.1.5. Software Measurements of an IoT Device
/ the IoT OS and puts the measurements in the submodule. /
{
- / eat_nonce / 10: h'5e19fba4483c7896'
+ / eat_nonce / 10: h'5e19fba4483c7896',
/ oemboot / 262: true,
/ dbgstat / 263: 2, / disabled-since-boot /
/ oemid / 258: h'8945ad', / IEEE CID based /
@@ -3644,11 +3638,9 @@ A.1.5. Software Measurements of an IoT Device
"OS" : {
/ oemboot / 262: true,
/ dbgstat / 263: 2, / disabled-since-boot /
- / measurements / 274: [
+ / measurements / 273: [
[
- 121, / CoAP Content ID. A /
- / made up one until one /
- / is assigned for CoSWID /
+ 258, / CoAP Content ID /
/ This is a byte-string wrapped /
/ evidence CoSWID. It has /
@@ -3805,13 +3797,16 @@ A.2.1. Basic CWT Example
This is a simple CWT-format token signed with the ECDSA algorithm.
- / This is a full CWT-format token with a very simple payloal. /
- / The main structure visible here is that of the COSE_Sign1. /
+ / This is a full CWT-format token. The payload is the /
+ / attestation hardware block above. The main structure /
+ / visible is that of the COSE_Sign1. /
61( 18( [
h'A10126', / protected headers /
{}, / empty unprotected headers /
- h'A20B46024A6B0978DE0A49000102030405060708', / payload /
+ h'A60A4CD79B964DDD5471C1393C88881901005001
+ 98F50A4FF6C05861C8860D13A638EA19010219FA
+ F2190106F5190107031901048263332E3101', / payload /
h'9B9B2F5E470000F6A20C8A4157B5763FC45BE759
9A5334028517768C21AFFB845A56AB557E0C8973
A07417391243A79C478562D285612E292C622162
@@ -3833,9 +3828,7 @@ A.2.2. CBOR-encoded Detached EAT Bundle
The detached EAT bundle itself can be assembled by untrusted
software.
- / This is a detached EAT bundle tag. Note that 602, the tag /
- / identifying a detached EAT bundle is not yet registered /
- / with IANA /
+ / This is a detached EAT bundle tag. /
602([
@@ -3868,7 +3861,7 @@ A.2.2. CBOR-encoded Detached EAT Bundle
C0997122EA867F07B8D5EB',
{
/ A CBOR-encoded byte-string wrapped EAT claims-set. It /
- / contains claims suitable for a TEE /
+ / contains claims suitable for a TEE. /
"TEE" : h'a40a48948f8860d13a463e190106f519010702
190111818218795858a60064336132340c0101
6b41636d6520544545204f530d65332e312e34
@@ -3882,7 +3875,7 @@ A.2.2. CBOR-encoded Detached EAT Bundle
/ This example contains submodule that is a detached digest, /
/ which is the hash of a Claims-Set convey outside this token. /
/ Other than that is is the other example of a token from an /
- / attestation HW block /
+ / attestation HW block. /
{
/ eat_nonce / 10: h'3515744961254b41a6cf9c02',
@@ -4251,6 +4244,10 @@ Appendix D. CDDL for CWT and JWT
JC = JSON-ONLY / CBOR-ONLY
+ ; Same as JC<> but with unwound generic nesting as it seems to cause
+ ; problems. Perhaps this is the nesting problem described in RFC 8610.
+ JC-NEST-SAFE = J .feature "json" / C .feature "cbor"
+
; A JWT message is either a JWS or JWE in compact serialization form
; with the payload a Claims-Set. Compact serialization is the
; protected headers, payload and signature, each b64url encoded and
diff --git a/draft-ietf-rats-eat.xml b/draft-ietf-rats-eat.xml
index 36bf2579..06e4133d 100644
--- a/draft-ietf-rats-eat.xml
+++ b/draft-ietf-rats-eat.xml
@@ -1279,8 +1279,8 @@ BUNDLE-Untagged-Message = Detached-EAT-Bundle
Detached-EAT-Bundle = [
main-token : Nested-Token,
detached-claims-sets: {
- + tstr => JC
+ + tstr => JC-NEST-SAFE
}
]
@@ -1820,8 +1820,8 @@ BUNDLE-Untagged-Message = Detached-EAT-Bundle
Detached-EAT-Bundle = [
main-token : Nested-Token,
detached-claims-sets: {
- + tstr => JC
+ + tstr => JC-NEST-SAFE
}
]
@@ -3283,28 +3283,26 @@ Some examples of signed tokens are also given.
/ eat_nonce / 10: h'48df7b172d70b5a18935d0460a73dd71',
/ oemboot / 262: true,
/ dbgstat / 263: 2, / disabled-since-boot /
- / manifests / 273: [
+ / manifests / 272: [
[
- 121, / CoAP Content ID. A /
- / made up one until one /
- / is assigned for CoSWID /
-
- / This is byte-string wrapped /
- / payload CoSWID. It gives the TEE /
- / software name, the version and /
- / the name of the file it is in. /
- / {0: "3a24", /
- / 12: 1, /
- / 1: "Acme TEE OS", /
- / 13: "3.1.4", /
- / 2: [{31: "Acme TEE OS", 33: 1}, /
+ 258, / CoAP Content ID for CoSWID /
+
+ / This is byte-string wrapped /
+ / payload CoSWID. It gives the TEE /
+ / software name, the version and /
+ / the name of the file it is in. /
+ / {0: "3a24", /
+ / 12: 1, /
+ / 1: "Acme TEE OS", /
+ / 13: "3.1.4", /
+ / 2: [{31: "Acme TEE OS", 33: 1}, /
/ {31: "Acme TEE OS", 33: 2}], /
- / 6: { /
- / 17: { /
- / 24: "acme_tee_3.exe" /
- / } /
- / } /
- / } /
+ / 6: { /
+ / 17: { /
+ / 24: "acme_tee_3.exe" /
+ / } /
+ / } /
+ / } /
h' a60064336132340c01016b
41636d6520544545204f530d65332e31
2e340282a2181f6b41636d6520544545
@@ -3364,14 +3362,14 @@ Some examples of signed tokens are also given.
/ document, but they are a valid use of submodules. /
{
- / eat_nonce / 10: h'e253cabedc9eec24ac4e25bcbeaf7765'
+ / eat_nonce / 10: h'e253cabedc9eec24ac4e25bcbeaf7765',
/ ueid / 256: h'0198f50a4ff6c05861c8860d13a638ea',
/ oemid / 258: h'894823', / IEEE OUI format OEM ID /
/ hwmodel / 259: h'549dcecc8b987c737b44e40f7c635ce8'
/ Hash of chip model name /,
/ hwversion / 260: ["1.3.4", 1], / Multipartnumeric /
- / swname / 271: "Acme OS",
- / swversion / 272: ["3.5.5", 1],
+ / swname / 270: "Acme OS",
+ / swversion / 271: ["3.5.5", 1],
/ oemboot / 262: true,
/ dbgstat / 263: 3, / permanent-disable /
/ timestamp (iat) / 6: 1526542894,
@@ -3398,7 +3396,7 @@ Some examples of signed tokens are also given.
{
/ eat_nonce / 10: h'99b67438dba40743266f70bf75feb1026d5134
- 97a229bfe8'
+ 97a229bfe8',
/ oemboot / 262: true,
/ dbgstat / 263: 2, / disabled-since-boot /
- / manifests / 273: [
- [ 121, / CoAP Content ID. A /
- / made up one until one /
- / is assigned for CoSWID /
+ / manifests / 272: [
+ [ 258, / CoAP Content ID. /
h'a600683762623334383766
0c000169436172626f6e6974650d6331
2e320e0102a2181f75496e6475737472
@@ -3475,10 +3471,8 @@ Some examples of signed tokens are also given.
"HLOS" : { / submod for high-level OS /
/ eat_nonce / 10: h'8b0b28782a23d3f6',
/ oemboot / 262: true,
- / manifests / 273: [
- [ 121, / CoAP Content ID. A /
- / made up one until one /
- / is assigned for CoSWID /
+ / manifests / 272: [
+ [ 258, / CoAP Content ID. /
h'a600687337
6537346b78380c000168
44726f6964204f530d65
@@ -3514,7 +3508,7 @@ The CoSWID is in byte-string wrapped in the token and also shown in diagnostic f
/ the IoT OS and puts the measurements in the submodule. /
{
- / eat_nonce / 10: h'5e19fba4483c7896'
+ / eat_nonce / 10: h'5e19fba4483c7896',
/ oemboot / 262: true,
/ dbgstat / 263: 2, / disabled-since-boot /
/ oemid / 258: h'8945ad', / IEEE CID based /
@@ -3523,11 +3517,9 @@ The CoSWID is in byte-string wrapped in the token and also shown in diagnostic f
"OS" : {
/ oemboot / 262: true,
/ dbgstat / 263: 2, / disabled-since-boot /
- / measurements / 274: [
+ / measurements / 273: [
[
- 121, / CoAP Content ID. A /
- / made up one until one /
- / is assigned for CoSWID /
+ 258, / CoAP Content ID /
/ This is a byte-string wrapped /
/ evidence CoSWID. It has /
@@ -3685,13 +3677,16 @@ gjw4nFMhLpJUuPXvMPzK1GMjhyJq2vWXg1416XKszwQ"
Basic CWT Example
This is a simple CWT-format token signed with the ECDSA algorithm.
Since the signature covers the digest from the TEE that Claims-Set is also secured.
The detached EAT bundle itself can be assembled by untrusted software.
= C .feature "cbor"
JC = JSON-ONLY / CBOR-ONLY
+; Same as JC<> but with unwound generic nesting as it seems to cause
+; problems. Perhaps this is the nesting problem described in RFC 8610.
+JC-NEST-SAFE = J .feature "json" / C .feature "cbor"
]]>
Contributors
-
+
Many thanks to the following contributors to draft versions of this
document:
@@ -4316,1117 +4312,1117 @@ document: