Object Contact Attestation For Free

so good morning everyone my name is Roberto Sasso I'm a security engineer engineer away and they work on mostly on Lima and TPM today I would like to present a simple protocol for remote attestation where simple means that is simple to understand for the user but the solution itself is a very complex and I think the complexity does not derive from calling the TSS but the real problem is to find a state where the system is trusted to to be able spected to do to perform the task in a in a good way so first I will talk about the problem that we are trying to solve some background information or proposal and the conclusion so remote attestation is the process to verify whether the system I can accomplish its task as expected but the valuation of the operating system integrity is a very complex because reference management and public verification service are not available and also because it is unclear which information must be included in the measurement list and out these information should be verified also a remote decision is very difficult to integrate into a product because a dedicated server must be added in time I started to do the remote attestation and there are and we need also to implement two separate protocol one for remote a decision in one for secure communication so industry computing the Integrity's the process of evaluating whether a system or application behave as intended by the software developer and the measurement start from the cooler occurred root of trust of measurement which is the usually in the CPU and the measurement processor is done until the application or departing system level the measurement is done by integrity measurement architecture and the valuation is done by comparing child measurement with reference measurement so we have two type of remote attestation one explicit and one implicit explicit about this session so I'm a so we have an initial and value of the lateral configuration register which store the system's data this is initialized to zero and when I am a start to measure to perform measurements then I'm across the PMP sialic stand and then the PCR current VCR values is updated with the edge of the current value plus the digest of the measurement this process is done for each entry that is added to the measurement list later we have our verified which one to attest the system and so there is a remote attestation agent running in the in the system which provides both the measurement elisa and also assign a pcr the verifier then replicated the same operation that was done by the the TPM in order to see if the measurement list was tampered with and then if the measurement alesis is good then it compares the measurement inside inside with a reference measurement and if everything is a is known as recognizer than the verifiers determined that the system is is good with implicit the remote decision instead is a bit different so we have a first we generate a TPM key which is ceded to the desired system state...