I-D Action: draft-yossif-enrollment-problem-00.txt

Internet-Draft draft-yossif-enrollment-problem-00.txt is now available.

   Title:   Problem Statement: Enrollment and Key-Binding Assumptions in Execution Authority Evidence
   Author:  Mohamad Khalil Yossif
   Name:    draft-yossif-enrollment-problem-00.txt
   Pages:   9
   Dates:   2026-07-22

Abstract:

   Any scheme that produces cryptographic evidence of execution
   authority roots its entire trust chain in an enrollment: the moment
   at which a key becomes bound to a subject and a device, and at which
   a verifier begins to treat signatures under that key as meaningful.
   Every downstream proof is only as trustworthy as that binding.  If an
   attacker substitutes a key of their choosing at enrollment, every
   subsequent proof verifies correctly and yet attests to the wrong
   party.  This document is a problem statement.  It describes the
   foundational key-substitution threat, records the relevant public
   facts about consumer-platform biometric and key APIs that bound what
   an enrollment can establish, and states the assumptions a verifier of
   execution authority evidence must be able to make about the
   enrollment its proofs depend on.  Specific enrollment ceremonies are
   out of scope.  This document defines no protocol or mechanism.

The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-yossif-enrollment-problem/

There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-yossif-enrollment-problem-00.html

Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts


_______________________________________________
I-D-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]