Veraison Mentorship: Enhancing CoRIM Support

[Salkimmich]

Veraison Mentorship: Enhancing CoRIM Support

This issue provides a brief description of the Linux Foundation Mentorship opportunity for Veraison. This Issue is for potential mentees and project mentors to review and discuss.

Description:

Strengthen Veraison’s support for CoRIM (Concise Reference Integrity Manifest) by adding signed CoRIM support to Veraison services. Participants will gain experience in RATS architecture, CoRIM specifications, and generating CoRIMs with cocli.

Expected Outcome:

Develop robust CoRIM security features integrated into Veraison’s services, enabling multi-signature and enhanced security for integrity verification.

Recommended Skills:

Familiarity with RATS architecture, CoRIM, and API interaction. Experience with Go or related languages will be helpful.

Mentor(s):

Thomas (@thomas-fossati, thomas.fossati@linaro.org)
Sergei (@setrofim, sergei.trofimov@arm.com)
Yogesh (@yogeshbdeshpande, yogesh.deshpande@arm.com)

Process Notes for Prospect Mentees

The Mentorship programme is scheduled to run from January to April 2025 and should last 12 weeks, in total.

We have some flexibility to adjust the start date within that time frame.

We will try to decide by mid-January 2025 based on the candidatures we receive in the meantime and the subsequent interview round.

The deadline for sending your candidature (including a short resume) is the 10th of January 2025.

For questions and clarifications, join the dedicated Zulip channel.

👋

[dcmiddle]

Interested candidates can read this to get a good enough understanding of Remote ATtestation procedureS (RATS) Architecture:
https://github.com/CCC-Attestation/rats-cheatsheet?tab=readme-ov-file#rats-cheat-sheet

[Priyanshuthapliyal2005]

Hi , I am interested in contributing to this mentorship opportunity.

[riaankleinhans]

The application for this mentorship can be done through the LFX portal here:
https://mentorship.lfx.linuxfoundation.org/project/80c135fc-de55-4542-86f5-65b91d267d11

[ravjot07]

Interested candidates can read this to get a good enough understanding of Remote ATtestation procedureS (RATS) Architecture: https://github.com/CCC-Attestation/rats-cheatsheet?tab=readme-ov-file#rats-cheat-sheet

Thank you for providing the RATS Cheat Sheet. It has been helpful to me gain a foundational understanding of the Remote Attestation Procedures (RATS) Architecture. Can you Share some more resource. @dcmiddle

[thomas-fossati]

Interested candidates, mentors and observers can join the dedicated Zulip channel.

[thomas-fossati]

Interested candidates can read this to get a good enough understanding of Remote ATtestation procedureS (RATS) Architecture: https://github.com/CCC-Attestation/rats-cheatsheet?tab=readme-ov-file#rats-cheat-sheet

Thank you for providing the RATS Cheat Sheet. It has been helpful to me gain a foundational understanding of the Remote Attestation Procedures (RATS) Architecture. Can you Share some more resource. @dcmiddle

Hi @ravjot07 ! Next step is I-D.ietf-rats-endorsements :-)

[thomas-fossati]

I have just edited the issue to add a "Process Notes for Prospect Mentees" section.

[Aryan4884]

Interested in contributing to this mentorship opportunity.

[yashkmankad]

Thank you everyone for your interest in this Mentorship opportunity.

As @riaankleinhans mentioned earlier, interested applicants can apply on the LFX Mentorship portal here:
https://mentorship.lfx.linuxfoundation.org/project/80c135fc-de55-4542-86f5-65b91d267d11

For those who've already applied, we expect the mentors to reach out and start the interviews shortly.

For any application or logistics-related question around the mentorship, and to hear about additional mentorship opportunities for CCC projects in 2025, please join the #mentorship_program channel on the CCC slack: slack.confidentialcomputing.io