Subject: [saag] High Assurance Crypto API Bar BOF Summary

From: "Novikov, Lev" <[email-masked]>
Date: Thu, 25 Mar 2010 14:11:30 -0400

(Begin forwarded message)
...

We had a great turnout of 16 people for [Tuesday's] bar BoF (at the IETF meeting in Anaheim, CA) where we talked about high assurance environments for about an hour and a half. 

Some of points that were made:
1. There is a desire to see an explanation of the underlying model of high assurance environments similar to how PKCS#11 is based on the model put forth by FIPS-140.

2. There is uncertainty about how existing protocols would work in a high assurance environment. An explanation would be appreciated.

Therefore, one of our early tasks is to create a document that explains the model of high assurance environments and how that model differs (and is similar to) the model in FIPS-140. I'll take a crack at it soon and will be looking for people to help review and comment on it.

Lev