From 8d35e9a7d286ddbcc7da18b4d295781d2d21e011 Mon Sep 17 00:00:00 2001 From: Sander Dijkhuis Date: Sat, 14 Sep 2024 15:31:19 +0200 Subject: [PATCH] Always have WSCA manage registry, enable distribution (#27) After further discussion it seems there is already consensus with the Expert Group that key association is fully managed by a WSCA. It seems like we can achieve the same functional and certification needs by adopting this model, and potentially deploying it in a distributed way with an internal WSCA agent and an external and possibly remote WSCA service. --- README.md | 2 -- draft-dijkhuis-cfrg-hdkeys.md | 61 +++++++++++++++++++++++++++++++++-- media/deployment.svg | 4 --- 3 files changed, 58 insertions(+), 9 deletions(-) delete mode 100644 media/deployment.svg diff --git a/README.md b/README.md index b93918d..9d8ab5e 100644 --- a/README.md +++ b/README.md @@ -47,8 +47,6 @@ Expert participants from Potential: To address challenges 5 and 6, this repository contains a freely accessible, unencumbered specification of **[Hierarchical Deterministic Keys](draft-dijkhuis-cfrg-hdkeys.md)**. This enables an EU Digital Identity Wallet deployment that distributes key management efficiently: -![A wallet architecture using Hierarchical Deterministic Keys associated with keys protected using a wallet secure cryptographic device, optionally using Asynchronous Remote Key Generation (ARKG).](media/deployment.svg) - To illustrate and validate the specifications, this repository contains a **[Prototype worksheet](prototype.worksheet.sc)**. This is easiest to run in [Visual Studio Code](https://code.visualstudio.com) with [Scala (Metals)](https://marketplace.visualstudio.com/items?itemName=scalameta.metals). To inform further standardisation and legislation, this repository contains **[Feedback to enable Hierarchical Deterministic Keys in the Wallet Toolbox](feedback.md)**. diff --git a/draft-dijkhuis-cfrg-hdkeys.md b/draft-dijkhuis-cfrg-hdkeys.md index bef4448..01a3542 100644 --- a/draft-dijkhuis-cfrg-hdkeys.md +++ b/draft-dijkhuis-cfrg-hdkeys.md @@ -506,6 +506,61 @@ The HDK algorithm assumes that the holder controls a secure cryptographic device In the context of [EU2024-1183], this device is typically called a Wallet Secure Cryptographic Device (WSCD), running a personalised Wallet Secure Cryptographic Application (WSCA) that exposes a Secure Cryptographic Interface (SCI) to a Wallet Instance (WI) running on a User Device (UD). The WSCD is certified to protect access to the device private key with high attack potential resistance to achieve high level of assurance authentication as per [EU2015-1502]. This typically means that the key is associated with a strong possession factor and with a rate-limited Personal Identification Number (PIN) check as a knowledge factor, and the verification of both factors actively involve the WSCD. +An example deployment of HDK in this context is illustrated below. + +~~~ ++---------------------+ +----------------------+ +|Issuer infrastructure| |User Device (UD) | +| | | | +|+-------------------+|OpenID4VCI|+--------------------+| +||Issuer service |<----------++Wallet Instance (WI)|| +|| || |++-------------------+| +||Optionally an || +-+--------------------+ +||ARKG subordinate || |Secure +||party || |Cryptographic +|+-------------------+| |Interface (SCI) ++---------------------+ +v-------------------+ + |Wallet Secure | + |Cryptographic | + Internal Manages |Application (WSCA) | + registry <-----------+ | + |Optionally an | + |ARKG delegating | + |party | + ++-------------------+ + |Uses + +v-------------------+ + Protects |Wallet secure | + Device keys <-----------+cryptographic | + |device (WSCD) | + +--------------------+ +~~~ + +The WSCA could be a single program or could be deployed in a distributed architecture, as illustrated below. + +~~~ ++--------------+ +|User device | +|+------------+| +||WI || +|++-----------+| +| |SCI | +|+v-----------+| +||WSCA agent || +|++-----------+| ++-+------------+ + |WSCA protocol + +v-----------+ + |WSCA service| + +------------+ +~~~ + +In the case of a distributed WSCA, the UD contains a local component, here called WSCA agent, accessing an external and possibly remote WSCA service from one or more components over a WSCA protocol. For example, the WSCA agent may be a local web API client and the WSCA service may be provided at a remote web API server. In such cases, typically the WSCA service receives a high-assurance security evaluation, while the WSCA agent is assessed to not be able to compromise the system's security guarantees. + +The internal registry can be managed by the WSCA agent, by the WSCA service, or by the combination. When the user device is a natural person’s mobile phone, WSCA agent management could provide better confidentiality protection against compromised WSCA service providers. When the user device is a cloud server used by a legal person, and the legal person deploys its own WSCD, WSCA service management could provide better confidentiality protection against compromised Wallet Instance cloud providers. + +In a distributed WSCA architecture, the WSCA could internally apply distributed key generation. A description of this is out of scope for the current document. + The HDK algorithm can support any of the following WSCD architectures: 1. Local external standalone device, for example: @@ -521,7 +576,7 @@ The HDK algorithm can support any of the following WSCD architectures: - iOS Secure Enclave system-on-chip acting as WSCA - Trusted Platform Module (TPM) acting as WSCA 4. Remote HSM, for example: - - Cryptographic module certified against EN 419221-5:2018 with a local client application acting as WSCA, remotely controlled for example using: + - Cryptographic module certified against EN 419221-5:2018 with a local client application providing a WSCA service, remotely controlled for example using: - PIV card as possession factor and PIN verification using a HSM-backed Device-Enhanced Augmented PAKE (an approach proposed by Sweden) - Android/iOS security platform or standalone device, applying asymmetric cryptography to enable detection of remote HSM corruption as described in [SCAL3] @@ -536,11 +591,11 @@ The solution proposal discussed herein works in all four WSCD architectures that - P-256 EC-SDSA key pair generation - P-256 EC-SDSA signature creation -The other HDK operations can be performed in the WI running on any UD, including hostile ones with limited sandboxing capabilities, such as in a smartphone's rich execution environment or in a personal computer web browser. +The other HDK operations can be performed in a WSCA or WSCA agent running on any UD, including hostile ones with limited sandboxing capabilities, such as in a smartphone's rich execution environment or in a personal computer web browser. If the user enters the PIN in the WI instead of on the WSCD directly, the WI MUST process it directly after entering, the WI MUST keep the plaintext PIN confidential, and the WI MUST delete the PIN from memory as soon as the encrypted PIN or data derived from the PIN is passed over the SCI. -The rate-limiting of the PIN check MUST be managed within the WSCD or on securely managed SCI infrastructure. In particular, the rate-limiting MUST NOT be managed solely in local WI software since it is aassumed that attackers could modify this without detection. +The rate-limiting of the PIN check MUST be managed within the WSCD or on securely managed SCI infrastructure. In particular, the rate-limiting MUST NOT be managed solely in local WI or WSCA agent software since it is assumed that attackers could modify this without detection. ## Trust evidence diff --git a/media/deployment.svg b/media/deployment.svg deleted file mode 100644 index 2d8c4e3..0000000 --- a/media/deployment.svg +++ /dev/null @@ -1,4 +0,0 @@ - - - -
Issuer infrastructure
User device
Wallet secure cryptographic device (WSCD)
Wallet secure cryptographic application (WSCA)

Protects device keys
Key association file

HDK seeds and paths
Wallet instance

Optional:
ARKG delegating party
Secure cryptographic interface
A wallet architecture using
Hierarchical Deterministic Keys
associated with keys protected using
a wallet secure cryptographic device,
optionally using Asynchronous
Remote Key Generation (ARKG).
Issuer service

Optional:
ARKG subordinate party
OpenID4VCI
 \ No newline at end of file