Hi,
In TF-M v2.0, Initial_attestation.h says: * The initial attestation token is planned to be aligned with future version of * Entity Attestation Token format: * https://tools.ietf.org/html/draft-mandyam-eat-01
But that spec is expired and superceded with the following.
Is the implementation aligned with the following spec? If so, what version of this spec is actually supported? https://datatracker.ietf.org/doc/draft-ietf-rats-eat/02/
Regards,
Brian Quach SimpleLink MCU Texas Instruments Inc.
Hi Brian,
Thanks, for pointing out! This is a very old comment, which needs to be updated. I will create a PR.
TF-M supports these profiles: - PSA_IOT1 : This is deprecated, the plan to remove the support as soon as the psa-arch tests gets support for the PSA_2_0_0 profile. - PSA_2_0_0: https://datatracker.ietf.org/doc/draft-tschofenig-rats-psa-token/24/ - ARM_CCA: https://datatracker.ietf.org/doc/draft-ffm-rats-cca-token/
Regards, Tamas
From: Quach, Brian via TF-M tf-m@lists.trustedfirmware.org Sent: Friday, March 7, 2025 5:26 PM To: tf-m@lists.trustedfirmware.org Subject: [TF-M] attestation EAT version
Hi,
In TF-M v2.0, Initial_attestation.h says: * The initial attestation token is planned to be aligned with future version of * Entity Attestation Token format: * https://tools.ietf.org/html/draft-mandyam-eat-01
But that spec is expired and superceded with the following.
Is the implementation aligned with the following spec? If so, what version of this spec is actually supported? https://datatracker.ietf.org/doc/draft-ietf-rats-eat/02/
Regards,
Brian Quach SimpleLink MCU Texas Instruments Inc.
tf-m@lists.trustedfirmware.org