On Wed, Nov 30, 2022 at 01:34:28PM -0800, Casey Schaufler wrote: Good evening to everyone. > On 11/30/2022 12:22 PM, Dr. Greg wrote: > > On Sun, Nov 27, 2022 at 11:41:26AM -0500, James Bottomley wrote: > >> Of course, if no application is actually using PCR23, then it's > >> probably OK to use it in the kernel and make it invisible to user > >> space, but no evidence about this has actually been presented. > > > > If there isn't, there will be in in the next week or so, if we can > > stay on schedule. Otherwise, I fear that Casey Schaufler, who I > > believe is holding his breath, may turn irretrievably blue.... :-) > > Sorry to disappoint, but my supply of apoplexy is firmly rooted > elsewhere for the time being. :-( Also, you overestimate my interest > in things TPM related. I was being too clever by half, my comment had nothing to do with your interest, or lack thereof about TPM's.... :-) I had replied to one of the threads where LSM stacking and IMA integration issues were being discussed and I commented that TSEM may contribute to those conversations. You had replied back and said that sending teasers was unfair, I was suggesting with my comment that you were holding your breath waiting for the release of TSEM.... :-) On a related note to this thread, a major component of Quixote/TSEM is the notion of raising the question and opportunity for shaping what TPM's should be when they grow up, given the limited resources they bring to the table, let alone the notion that they are about retrospective rather than prospective trust. > I am very interested to see TSEM. I have heard nothing of it to > date. Hardly anyone has, small team, very focused, working in a deep dive for the last couple of years to bring this forward. Hopefully it will prove of interest and utility, I don't believe there is a reference in the literature to an equivalent approach. Have a good evening. As always, Dr. Greg The Quixote Project - Flailing at the Travails of Cybersecurity