DICE - Revision history

Tom: /* Context */

2023-09-10T01:54:48Z

‎Context

Tom: /* Full Title */

2023-02-11T22:08:39Z

‎Full Title

Tom: /* Solutions */

2023-02-11T22:06:01Z

‎Solutions

Tom: /* Solutions */

2023-02-11T18:55:26Z

‎Solutions

Tom: /* Context */

2023-02-11T18:52:35Z

‎Context

Tom: /* Full Title */

2023-02-11T18:30:13Z

‎Full Title

Tom: /* Context */

2023-02-11T02:11:25Z

‎Context

Tom: /* Context */

2023-02-11T02:09:55Z

‎Context

Tom: /* Context */

2023-02-11T02:08:56Z

‎Context

Tom: Created page with "==Full Title== Device Identifier Composition Engine ==Context== DICE is designed to the absolute minimum root of trust for programmable devices. Although it can do some TPM-s..."

2023-02-11T01:31:21Z

Created page with "==Full Title== Device Identifier Composition Engine ==Context== DICE is designed to the absolute minimum root of trust for programmable devices. Although it can do some TPM-s..."

New page

==Full Title==
Device Identifier Composition Engine
==Context==
DICE is designed to the absolute minimum root of trust for programmable devices. Although it can do some TPM-stuff, it's mostly the root-of-trust on which to build things like TPMs (which are themselves pretty complicated.)

Many/most CPUs now have DICE support, although for more powerful CPUs it tends to be hidden away

DICE | Trusted Computing Group
DICE | Trusted Computing Group
Modern cyber-attacks are often sophisticated and relentless in their continual efforts to seek out vulnerabilities in modern technology-based solutions. At the same time, new market segments like the Internet of … Continue reading "DICE"
trustedcomputinggroup.org

DICE: Device Identifier Composition Engine - Microsoft Research

There's a new sort of DICE called a DICE Protection Environment that's being driven by Google that's closer to a mini-TPM. This will also be a TCG standard in a few weeks.

==References==

[[Category: Hardware]]

@@ Line 3: / Line 3: @@
 ==Context==
-DICE is designed to the absolute minimum root of trust for programmable devices.  Although it can do some TPM-stuff, it's mostly the root-of-trust on which to build things like TPMs (which are themselves pretty complicated.)
+DICE is designed to the absolute minimum root of trust for programmable devices.  Although it can do some TPM-stuff, it's mostly the [[Root of Trust]] on which to build things like TPMs (which are themselves pretty complicated.)
 ==Problems==
 There are two problems that are addressed by the TPM:

@@ Line 1: / Line 1: @@
 ==Full Title==
-Device Identifier Composition Engine ([[DICE]]) for low-cost device identity and attestation.
+Device Identifier Composition Engine ([[DICE]]) for low-cost device's identity and attestation.
 ==Context==

@@ Line 4: / Line 4: @@
 ==Context==
 DICE is designed to the absolute minimum root of trust for programmable devices.  Although it can do some TPM-stuff, it's mostly the root-of-trust on which to build things like TPMs (which are themselves pretty complicated.)
 ==Solutions==
 * [https://trustedcomputinggroup.org/wp-content/uploads/TCG_DICE_SymIDAttest_v1_r0p95_pub-1.pdf Symmetric Identity Based Device Attestation paper] describe a method to use only symmetric key cryptography together with an attestation service that retains a copy of the symmetric key to perform [[Remote Attestation Service] for the remote computer.
 * Many/most CPUs now have DICE support, although for more powerful CPUs it tends to be hidden away

@@ Line 7: / Line 7: @@
 * [https://trustedcomputinggroup.org/wp-content/uploads/TCG_DICE_SymIDAttest_v1_r0p95_pub-1.pdf Symmetric Identity Based Device Attestation paper] describe a method to use only symmetric key cryptography together with an attestation service that retains a copy of the symmetric key to perform [[Remote Attestation Service] for the remote computer.
 * Many/most CPUs now have DICE support, although for more powerful CPUs it tends to be hidden away
+* [https://trustedcomputinggroup.org/work-groups/dice-architectures/ DICE | Trusted Computing Group] - Modern cyber-attacks are often sophisticated and relentless in their continual efforts to seek out vulnerabilities in modern technology-based solutions.  At the same time, new market segments like the Internet of Things (IoT), are driving innovative architectures and creating solutions with challenging power, security, resource, and other constraints.
 * [https://www.microsoft.com/en-us/research/project/dice-device-identifier-composition-engine/ DICE: Device Identifier Composition Engine - Microsoft Research] aka RIoT (Robust | Resilient | Recoverable – IoT)
 * There's a new sort of DICE called a DICE Protection Environment that's being driven by Google that's closer to a mini-TPM.  This will also be a TCG standard in early March 2023.

@@ Line 4: / Line 4: @@
 ==Context==
 DICE is designed to the absolute minimum root of trust for programmable devices.  Although it can do some TPM-stuff, it's mostly the root-of-trust on which to build things like TPMs (which are themselves pretty complicated.)
+==Solutions==
-Many/most CPUs now have DICE support, although for more powerful CPUs it tends to be hidden away
+* [https://trustedcomputinggroup.org/wp-content/uploads/TCG_DICE_SymIDAttest_v1_r0p95_pub-1.pdf Symmetric Identity Based Device Attestation paper] describe a method to use only symmetric key cryptography together with an attestation service that retains a copy of the symmetric key to perform [[Remote Attestation Service] for the remote computer.
 [https://trustedcomputinggroup.org/work-groups/dice-architectures/ DICE | Trusted Computing Group] - Modern cyber-attacks are often sophisticated and relentless in their continual efforts to seek out vulnerabilities in modern technology-based solutions.  At the same time, new market segments like the Internet of Things  (IoT), are driving innovative architectures and creating solutions with challenging power, security, resource, and other constraints.

@@ Line 9: / Line 9: @@
 * [https://www.microsoft.com/en-us/research/project/dice-device-identifier-composition-engine/ DICE: Device Identifier Composition Engine - Microsoft Research] aka RIoT (Robust | Resilient | Recoverable – IoT)
-* There's a new sort of DICE called a DICE Protection Environment that's being driven by Google that's closer to a mini-TPM.  This will also be a TCG standard in a few weeks.
+* There's a new sort of DICE called a DICE Protection Environment that's being driven by Google that's closer to a mini-TPM.  This will also be a TCG standard in early March 2023.
 ==References==
 [[Category: Hardware]]