Difference between revisions of "DICE"
From MgmtWiki
(→Context) |
(→Solutions) |
||
| Line 7: | Line 7: | ||
* [https://trustedcomputinggroup.org/wp-content/uploads/TCG_DICE_SymIDAttest_v1_r0p95_pub-1.pdf Symmetric Identity Based Device Attestation paper] describe a method to use only symmetric key cryptography together with an attestation service that retains a copy of the symmetric key to perform [[Remote Attestation Service] for the remote computer. | * [https://trustedcomputinggroup.org/wp-content/uploads/TCG_DICE_SymIDAttest_v1_r0p95_pub-1.pdf Symmetric Identity Based Device Attestation paper] describe a method to use only symmetric key cryptography together with an attestation service that retains a copy of the symmetric key to perform [[Remote Attestation Service] for the remote computer. | ||
* Many/most CPUs now have DICE support, although for more powerful CPUs it tends to be hidden away | * Many/most CPUs now have DICE support, although for more powerful CPUs it tends to be hidden away | ||
| − | + | * [https://trustedcomputinggroup.org/work-groups/dice-architectures/ DICE | Trusted Computing Group] - Modern cyber-attacks are often sophisticated and relentless in their continual efforts to seek out vulnerabilities in modern technology-based solutions. At the same time, new market segments like the Internet of Things (IoT), are driving innovative architectures and creating solutions with challenging power, security, resource, and other constraints. | |
| − | [https://trustedcomputinggroup.org/work-groups/dice-architectures/ DICE | Trusted Computing Group] - Modern cyber-attacks are often sophisticated and relentless in their continual efforts to seek out vulnerabilities in modern technology-based solutions. At the same time, new market segments like the Internet of Things | ||
| − | |||
* [https://www.microsoft.com/en-us/research/project/dice-device-identifier-composition-engine/ DICE: Device Identifier Composition Engine - Microsoft Research] aka RIoT (Robust | Resilient | Recoverable – IoT) | * [https://www.microsoft.com/en-us/research/project/dice-device-identifier-composition-engine/ DICE: Device Identifier Composition Engine - Microsoft Research] aka RIoT (Robust | Resilient | Recoverable – IoT) | ||
* There's a new sort of DICE called a DICE Protection Environment that's being driven by Google that's closer to a mini-TPM. This will also be a TCG standard in early March 2023. | * There's a new sort of DICE called a DICE Protection Environment that's being driven by Google that's closer to a mini-TPM. This will also be a TCG standard in early March 2023. | ||
Revision as of 11:55, 11 February 2023
Contents
Full Title
Device Identifier Composition Engine (DICE) for low-cost device identity and attestation.
Context
DICE is designed to the absolute minimum root of trust for programmable devices. Although it can do some TPM-stuff, it's mostly the root-of-trust on which to build things like TPMs (which are themselves pretty complicated.)
Solutions
- Symmetric Identity Based Device Attestation paper describe a method to use only symmetric key cryptography together with an attestation service that retains a copy of the symmetric key to perform [[Remote Attestation Service] for the remote computer.
- Many/most CPUs now have DICE support, although for more powerful CPUs it tends to be hidden away
- DICE | Trusted Computing Group - Modern cyber-attacks are often sophisticated and relentless in their continual efforts to seek out vulnerabilities in modern technology-based solutions. At the same time, new market segments like the Internet of Things (IoT), are driving innovative architectures and creating solutions with challenging power, security, resource, and other constraints.
- DICE: Device Identifier Composition Engine - Microsoft Research aka RIoT (Robust | Resilient | Recoverable – IoT)
- There's a new sort of DICE called a DICE Protection Environment that's being driven by Google that's closer to a mini-TPM. This will also be a TCG standard in early March 2023.
