Difference between revisions of "DICE"
From MgmtWiki
(→Full Title) |
(→Context) |
||
| Line 4: | Line 4: | ||
==Context== | ==Context== | ||
DICE is designed to the absolute minimum root of trust for programmable devices. Although it can do some TPM-stuff, it's mostly the root-of-trust on which to build things like TPMs (which are themselves pretty complicated.) | DICE is designed to the absolute minimum root of trust for programmable devices. Although it can do some TPM-stuff, it's mostly the root-of-trust on which to build things like TPMs (which are themselves pretty complicated.) | ||
| − | + | ==Solutions== | |
| − | Many/most CPUs now have DICE support, although for more powerful CPUs it tends to be hidden away | + | * [https://trustedcomputinggroup.org/wp-content/uploads/TCG_DICE_SymIDAttest_v1_r0p95_pub-1.pdf Symmetric Identity Based Device Attestation paper] describe a method to use only symmetric key cryptography together with an attestation service that retains a copy of the symmetric key to perform [[Remote Attestation Service] for the remote computer. |
| + | * Many/most CPUs now have DICE support, although for more powerful CPUs it tends to be hidden away | ||
[https://trustedcomputinggroup.org/work-groups/dice-architectures/ DICE | Trusted Computing Group] - Modern cyber-attacks are often sophisticated and relentless in their continual efforts to seek out vulnerabilities in modern technology-based solutions. At the same time, new market segments like the Internet of Things (IoT), are driving innovative architectures and creating solutions with challenging power, security, resource, and other constraints. | [https://trustedcomputinggroup.org/work-groups/dice-architectures/ DICE | Trusted Computing Group] - Modern cyber-attacks are often sophisticated and relentless in their continual efforts to seek out vulnerabilities in modern technology-based solutions. At the same time, new market segments like the Internet of Things (IoT), are driving innovative architectures and creating solutions with challenging power, security, resource, and other constraints. | ||
Revision as of 11:52, 11 February 2023
Contents
Full Title
Device Identifier Composition Engine (DICE) for low-cost device identity and attestation.
Context
DICE is designed to the absolute minimum root of trust for programmable devices. Although it can do some TPM-stuff, it's mostly the root-of-trust on which to build things like TPMs (which are themselves pretty complicated.)
Solutions
- Symmetric Identity Based Device Attestation paper describe a method to use only symmetric key cryptography together with an attestation service that retains a copy of the symmetric key to perform [[Remote Attestation Service] for the remote computer.
- Many/most CPUs now have DICE support, although for more powerful CPUs it tends to be hidden away
DICE | Trusted Computing Group - Modern cyber-attacks are often sophisticated and relentless in their continual efforts to seek out vulnerabilities in modern technology-based solutions. At the same time, new market segments like the Internet of Things (IoT), are driving innovative architectures and creating solutions with challenging power, security, resource, and other constraints.
- DICE: Device Identifier Composition Engine - Microsoft Research aka RIoT (Robust | Resilient | Recoverable – IoT)
- There's a new sort of DICE called a DICE Protection Environment that's being driven by Google that's closer to a mini-TPM. This will also be a TCG standard in early March 2023.
