Skip to content

Commit

Permalink
Add better description of tag and CoMID/CoSWID tags
Browse files Browse the repository at this point in the history
Signed-off-by: Yogesh Deshpande <yogesh.deshpande@arm.com>
  • Loading branch information
yogeshbdeshpande committed Feb 13, 2025
1 parent 592fc96 commit 4b438eb
Showing 1 changed file with 4 additions and 5 deletions.
9 changes: 4 additions & 5 deletions draft-ietf-rats-corim.md
Original file line number Diff line number Diff line change
Expand Up @@ -235,21 +235,20 @@ The CDDL definitions in this document follows the naming conventions illustrated

A CoRIM is a collection of tags and related metadata in a concise CBOR {{-cbor}} encoding.
A CoRIM can be digitally signed with a COSE {{-cose}} signature.
A tag identifies and describes properties of modules or components of a system.
A tag is a structured, machine-readable metadata format used to uniquely identify, describe and manage modules or components of a system.

Tags can be of different types:

* Concise Module ID (CoMID) tags ({{sec-comid}}) contain metadata and claims about the hardware and firmware modules.

* Concise Software ID (CoSWID) tags ({{-coswid}}) describe software components.
* Concise Software ID (CoSWID) tags ({{-coswid}}) uniquely identify, describe, and manage software components.

* Concise Tag List (CoTL) tags ({{sec-cotl}}) contain the list of CoMID and CoSWID tags that the Verifier should consider as "active" at a certain point in time.

The set of tags is extensible so that future specifications can add new kinds of information.
The collection of tags is extensible so that future specifications can add new types of tags.
For example, Concise Trust Anchor Stores (CoTS) ({{-ta-store}}) is currently being defined as a standard CoRIM extension.

Each CoRIM contains a unique identifier to distinguish a CoRIM from other CoRIMs.
[^tracked-at] https://github.com/ietf-rats-wg/draft-ietf-rats-corim/issues/73

CoRIM can also carry the following optional metadata:

Expand Down Expand Up @@ -484,7 +483,7 @@ Described in {{sec-common-validity}}.

# Concise Module Identifier (CoMID) {#sec-comid}

A CoMID tag contains information about hardware, firmware, or module composition.
A CoMID tag contains claims and metadata about hardware, firmware, or module composition.

Each CoMID has a unique ID that is used to unambiguously identify CoMID instances when cross referencing CoMID tags, for example in typed link relations, or in a CoTL tag.

Expand Down

0 comments on commit 4b438eb

Please sign in to comment.