CCC-Attestation / meetings

Meeting materials
Apache License 2.0
15 stars 10 forks source link

Composite Attester/Device Description #22

Open yogeshbdeshpande opened 1 year ago

yogeshbdeshpande commented 1 year ago

As per RATS Architecture, Composite Device comprises of multiple sub-attester and a lead attester.

A more deeper discussion is required in CCC as to how different member organisation would want to see the Composite Attester Modelling and how the Format of the Attestation Token would span out meeting all the necessary security objectives

muhammad-usama-sardar commented 1 year ago

how different member organisation would want to see the Composite Attester Modelling how the Format of the Attestation Token would span out meeting all the necessary security objectives

This sounds very interesting. Can you elaborate a bit more, e.g.,

thomas-fossati commented 1 year ago

how different member organisation would want to see the Composite Attester Modelling how the Format of the Attestation Token would span out meeting all the necessary security objectives

This sounds very interesting. Can you elaborate a bit more, e.g.,

  • what kind of modeling are you thinking about?
  • how is the format of attestation token related to security objectives?

I think it'd be good to clearly state here what the expected outcome of the discussion would be. A position paper? Some form of input for the RATS / TCG / ${RELEVANT_SDO}? Other?

(CC: @TheBankster who put forward the need for a "composite attesters" track in the SIG.)

yogeshbdeshpande commented 1 year ago

Agree that a whitepaper or a guidance document on the CCC's position on composite attester modelling (token format) and also how the Verification should happen for the overall composite device, would benefit the community.

thomas-fossati commented 8 months ago

@deeglaze on 27th Feb 2024 call:

A few separate/separable dimensions to consider: