Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Align version-map with EAT sw-version? #384

Open
thomas-fossati opened this issue Feb 18, 2025 · 4 comments
Open

Align version-map with EAT sw-version? #384

thomas-fossati opened this issue Feb 18, 2025 · 4 comments
Labels
For-next-release WIll only be addressed after first publish of CoRIM

Comments

@thomas-fossati
Copy link
Collaborator

EAT defines a sw-version claim that is semantically equivalent to CoRIM's version-map.

The difference is that EAT uses an array, while CoRIM uses a map.

For reasons of RATS types uniformity, avoiding useless transformations, reuse in implementations, etc., it'd be nice to align.

@nedmsmith
Copy link
Collaborator

That will break concise-evidence and depart from TCG Endorsement. I'm just wondering if there is that much value given EAT, CoSWID, and so forth have to translate to an internal representation anyway.

@thomas-fossati
Copy link
Collaborator Author

thomas-fossati commented Feb 19, 2025

That will break concise-evidence and depart from TCG Endorsement

:-(

I'm just wondering if there is that much value given EAT, CoSWID, and so forth have to translate to an internal representation anyway.

In implementations, it allows code reuse and avoids remapping types that are trivially equivalent.
Similarly, in specifications, it allows for the creation of a shared vocabulary across same-domain protocols and CDDL reuse.
It also removes cognitive dissonance; see Dionna's comment

@nedmsmith
Copy link
Collaborator

It ends up being a question of who's ox gets gored. If you're a verifier then the justification makes sense. If you're an attester and you have committed implementations, then the justification seems really thin.

@thomas-fossati
Copy link
Collaborator Author

It ends up being a question of who's ox gets gored. If you're a verifier then the justification makes sense. If you're an attester and you have committed implementations, then the justification seems really thin.

hmm, the case is more that some implementations may have committed a tad too early, IMO.

Hence my sad-face emoji above.

@yogeshbdeshpande yogeshbdeshpande added the For-next-release WIll only be addressed after first publish of CoRIM label Feb 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
For-next-release WIll only be addressed after first publish of CoRIM
Projects
None yet
Development

No branches or pull requests

3 participants