On Wed, Sep 27, 2023 at 2:25 AM Thomas Fossati
[off-list ref] wrote:

On Wed, 27 Sept 2023 at 10:21, Dan Williams [off-list ref] wrote:

quoted

It can be expanded when/if those platforms expand the
size of the supported user data, or another configfs-tsm backend arrives
that needs that capability.

Makes sense, thanks.

I'm not familiar with the rats eat spec but I would assume the
protocol would acquire more than just the nonce in the inblob.
Probably some combination of claims, nonce, and information about a
public key? Does the specification allow for the data needing to be
signed by the TSM to be hashed first?