-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
security: gap analysis follow-up — untracked attestation-bypass, PKI, and PCR-policy defects
attestationRelated to the TPM attestation workflowRelated to the TPM attestation workflowsecuritySecurity vulnerability or hardeningSecurity vulnerability or hardeningtype:storyUser story -- a piece of deliverable valueUser story -- a piece of deliverable valueStatus: Open.#57 In ITlusions/ITL.ControlPlane.Attestation;research: ZKP attestation — prove PCR policy satisfaction without revealing PCR values (Sprint H)
impact:2Impact score 2 (Fibonacci)Impact score 2 (Fibonacci)securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningtype:epicLarge body of work spanning multiple sprintsLarge body of work spanning multiple sprintstype:storyUser story -- a piece of deliverable valueUser story -- a piece of deliverable valueStatus: Open.#45 In ITlusions/ITL.ControlPlane.Attestation;feat: sealed TPM audit log — NV_Extend chain for hardware-rooted tamper-evident event log
impact:5Impact score 5 (Fibonacci)Impact score 5 (Fibonacci)securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningtype:epicLarge body of work spanning multiple sprintsLarge body of work spanning multiple sprintstype:storyUser story -- a piece of deliverable valueUser story -- a piece of deliverable valueStatus: Open.#44 In ITlusions/ITL.ControlPlane.Attestation;feat: time-locked phase capsules — TPM PolicyCounterTimer-gated mission phase config delivery
effort:13Effort score 13 (Fibonacci)Effort score 13 (Fibonacci)impact:2Impact score 2 (Fibonacci)Impact score 2 (Fibonacci)securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningtype:storyUser story -- a piece of deliverable valueUser story -- a piece of deliverable valueStatus: Open.#43 In ITlusions/ITL.ControlPlane.Attestation;feat: plausible deniability dual-envelope — decoy PCR[7] config + real PCR[0,1,2,3,7] config delivery
effort:13Effort score 13 (Fibonacci)Effort score 13 (Fibonacci)impact:2Impact score 2 (Fibonacci)Impact score 2 (Fibonacci)securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningtype:storyUser story -- a piece of deliverable valueUser story -- a piece of deliverable valueStatus: Open.#42 In ITlusions/ITL.ControlPlane.Attestation;feat: burst/blackout mode — authorized offline periods with re-attestation window enforcement
effort:8Effort score 8 (Fibonacci)Effort score 8 (Fibonacci)impact:3Impact score 3 (Fibonacci)Impact score 3 (Fibonacci)securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningtype:storyUser story -- a piece of deliverable valueUser story -- a piece of deliverable valueStatus: Open.#41 In ITlusions/ITL.ControlPlane.Attestation;feat: steganographic config watermarking — HMAC-SHA384 provenance tracking per delivery
effort:8Effort score 8 (Fibonacci)Effort score 8 (Fibonacci)impact:2Impact score 2 (Fibonacci)Impact score 2 (Fibonacci)securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningtype:storyUser story -- a piece of deliverable valueUser story -- a piece of deliverable valueStatus: Open.#40 In ITlusions/ITL.ControlPlane.Attestation;feat: mesh peer verification — gossip-based quarantine when N/3 peers report attestation failure
impact:3Impact score 3 (Fibonacci)Impact score 3 (Fibonacci)securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningtype:epicLarge body of work spanning multiple sprintsLarge body of work spanning multiple sprintstype:storyUser story -- a piece of deliverable valueUser story -- a piece of deliverable valueStatus: Open.#39 In ITlusions/ITL.ControlPlane.Attestation;feat: multi-hop attestation chains — relay AK transitive trust with max depth 3
impact:3Impact score 3 (Fibonacci)Impact score 3 (Fibonacci)securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningtype:epicLarge body of work spanning multiple sprintsLarge body of work spanning multiple sprintstype:storyUser story -- a piece of deliverable valueUser story -- a piece of deliverable valueStatus: Open.#38 In ITlusions/ITL.ControlPlane.Attestation;feat: compartmentalized need-to-know configs — PCR policy matrix per mission compartment (ALPHA/BRAVO/CHARLIE)
effort:13Effort score 13 (Fibonacci)Effort score 13 (Fibonacci)impact:5Impact score 5 (Fibonacci)Impact score 5 (Fibonacci)securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningtype:storyUser story -- a piece of deliverable valueUser story -- a piece of deliverable valueStatus: Open.#37 In ITlusions/ITL.ControlPlane.Attestation;feat: emergency all-hands wipe broadcast — YubiKey-signed fleet-wide crypto-destruction
effort:13Effort score 13 (Fibonacci)Effort score 13 (Fibonacci)impact:5Impact score 5 (Fibonacci)Impact score 5 (Fibonacci)securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningtype:storyUser story -- a piece of deliverable valueUser story -- a piece of deliverable valueStatus: Open.#36 In ITlusions/ITL.ControlPlane.Attestation;feat: canary attestation tokens — supply chain tripwire and out-of-window detection
effort:8Effort score 8 (Fibonacci)Effort score 8 (Fibonacci)impact:3Impact score 3 (Fibonacci)Impact score 3 (Fibonacci)securitySecurity vulnerability or hardeningSecurity vulnerability or hardeningtype:storyUser story -- a piece of deliverable valueUser story -- a piece of deliverable valueStatus: Open.#35 In ITlusions/ITL.ControlPlane.Attestation;