Dasharo Certification Program and trustworthiness for all

[pietrushnic]

The problem you're addressing (if any)

One of Dasharo's values is trustworthiness for all. In this issue, I would like to explore and discuss it and narrow down what it means practically for open-source firmware distribution.

Describe the solution you'd like

• Verifiable Measurements: Trustworthiness involves providing a way to measure and verify the integrity of firmware and software components during the boot process. This can be achieved using methods such as remote attestation, which compares the measurements of the booted firmware against known good values to ensure the system has not been tampered with or compromised.
  • Dasharo Team works on industry-wide improvements regarding verifiable measurements and improved trustworthiness through TwPM and Fobnail projects.
• Conformance to TCG standards since there is no other viable alternative: Adhering to Trusted Computing Group standards, such as those related to the TPM (Trusted Platform Module), ensures that open-source firmware solutions follow established best practices for security and trust. Implementing these standards enhances trustworthiness by providing a common framework for assessing and validating the security features of the firmware. TCG standards already have many tools that can help prove trustworthiness. Developing a competing ecosystem is out of Dasharo's scope at this point.
• TPM or another tamper-resistant root of trust for storage should be required as part of the Dasharo Certified platform.
  • We prefer dTPMs but should be able to work with fTPMs also
  • Our vision would be OSHW and open-source firmware TPM with open tools stack.
• Forward sealing support
• "for all" means it is not only for attestation needs for the owners but for other parties, e.g., we can imagine a situation in which a given system will allow access only if attention passes and will comply with provided golden measurements
• Binary blobs measurement

Where is the value to a user, and who might that user be?

Describe alternatives you've considered

Additional context