Composite Attesters (uber tracking issue)

[thomas-fossati]

This issue tracks the "uber topic” of Composite Attesters — e.g., multi-RoT, layered, or a combination of the two. In particular, how they can be represented in RATS conceptual messages (Evidence, Endorsements and Attestation Results).

The plan is to examine existing technology, deployments, and emerging standards to identify and document patterns, gaps, security and privacy considerations, and best practices.

The goal is to create up-to-date and accurate reading material and shared knowledge that can inform experts, vendors, and operators working with attestation technologies about options for integrating Composite Attesters.

The top-level deliverables associated with this issue are:

1. A document collecting up-to-date and accurate information about the topic
2. One or more presentations from experts in the “Composite Attesters Track” on specific subtopics.
3. Opportunities for API implementations (at various layers)

The following subtopics are in scope and will be handled in separate sub-issues:

• Deployed models for Composite Evidence (Composite Attestation and Azure Confidential Virtual Machines #55)
• Emerging Standards for Composite Evidence
• Binding models for Composite Evidence
• Deployed models for Endorsements and Reference Values
• Emerging Standards for Endorsements and Reference Values
• Deployed models for Attestation Results
• Emerging Standards for Attestation Results

---

NOTE: This issue subsumes #22 and #49.

---

[zvonkok]

/cc @zvonkok