TNC IF-T: Binding to TLS TCG Copyright
Specification Version 2.0
Revision 8 Published Page v of 42
TCG PUBLISHED
Table of Contents
1 Scope and Audience .............................................................................................. 6
1.1 Interoperable with IETF PT-TLS ...................................................................................................... 6
1.2 IETF Terminology Mapping to TNC ................................................................................................. 6
2 Background ............................................................................................................ 8
2.1 Purpose of IF-T ................................................................................................................................ 8
2.2 Supported Use Cases ...................................................................................................................... 8
2.3 Non-supported Use Cases ............................................................................................................... 9
2.4 Requirements ................................................................................................................................. 10
2.5 Non-Requirements ......................................................................................................................... 11
2.6 Assumptions ................................................................................................................................... 11
2.7 Keywords ....................................................................................................................................... 12
2.8 Network Communications Diagram Conventions .......................................................................... 12
3 Network Connected Endpoint Assessments ..................................................... 13
3.1 Benefits .......................................................................................................................................... 13
3.2 Securing the TCP/IP Session with TLS ......................................................................................... 13
3.3 No Change to Base TLS Protocol .................................................................................................. 14
3.4 Parallel Enumerated Values .......................................................................................................... 14
4 IF-T Over TLS Protocol ........................................................................................ 16
4.1 TCP Port Usage ............................................................................................................................. 16
4.2 Preventing MITM Attacks with Channel Bindings .......................................................................... 16
4.3 IF-T Message Flow ........................................................................................................................ 16
4.3.1 Cause of an Assessment ...................................................................................................... 16
4.3.2 Issues with Server Initiated TLS Sessions ............................................................................ 17
4.3.3 Establish or Re-Use TLS Session ......................................................................................... 17
4.3.4 IF-T Message Exchange ....................................................................................................... 17
4.3.5 TLS Requirements ................................................................................................................ 20
4.4 IF-T Message Format ..................................................................................................................... 20
4.5 IF-T Message Types ...................................................................................................................... 22
4.6 IF-T Version Negotiation ................................................................................................................ 26
4.6.1 Version Request Message .................................................................................................... 26
4.6.2 Version Response Message ................................................................................................. 27
4.7 Client Authentication using SASL .................................................................................................. 28
4.7.1 SASL Authentication Requirements ...................................................................................... 28
4.7.2 SASL Use in IF-T Binding to TLS .......................................................................................... 28
4.7.3 SASL Authentication Flow ..................................................................................................... 29
4.7.4 Aborting SASL Authentication ............................................................................................... 29
4.7.5 Integration with SASL Framework ......................................................................................... 29
4.7.6 SASL Channel Bindings ........................................................................................................ 29
4.7.7 SASL Mechanisms Message ................................................................................................ 30
4.7.8 SASL Mechanism Selection Message .................................................................................. 30
4.7.9 SASL Authentication Data Message ..................................................................................... 31
4.7.10 SASL Result Message .......................................................................................................... 31
4.8 IF-T Error Message ........................................................................................................................ 32
5 Security Considerations ...................................................................................... 36
5.1 Trust Relationships and Countermeasures.................................................................................... 37
6 Privacy Considerations ....................................................................................... 38
7 References ............................................................................................................ 39
7.1 Normative References ................................................................................................................... 39
7.2 Informative References .................................................................................................................. 40
