Keylime

Keylime is a production grade open source security trust system for Supply Chain Security, Cloud, Edge and IoT. /

[BigFuzzyNerd @m_peters]

An article I co-wrote with some colleagues at Red Hat and IBM about @KeylimeProject and auditable attestation - https://t.co/1rVwPQyTFK

[Luke Hinds @decodebytes]

Some significant progress in @KeylimeProject

[Luke Hinds @decodebytes]

@KeylimeProject and @projectsigstore integration outlined by lily sturmann.

[Luke Hinds @decodebytes]

@m_peters explains durable / offline OS integrity state capture generated by @KeylimeProject and stored within @projectsigstore rekor.

[Luke Hinds @decodebytes]

Never really dug into fs-verity before. It builds an ickle merkle tree for every file. Sounds expensive, but seems to be very performant. IMA can measure fs-verity signatures, so @KeylimeProject should be able to remote attest config files etc (not tested it yet).

[Keylime @KeylimeProject]

Come check out Keylime at #osssummit with a talk by @m_peters and Lily Sturmann - 4:35pm - 5:15pm on Level 3.

[Keylime @KeylimeProject]

Heading to the #OSSummit , come and listen to Keylime developers Lily Sturmann and @m_peters discuss continuous remote attestation with keylime

[Keylime @KeylimeProject]

ANNOUNCEMENT: Version 6.3.2 of keylime has been tagged and released - https://t.co/VZCrgOmzrT… - More new contributors, more bug fixes, more/better docs and more stability.

[Keylime @KeylimeProject]

Version 6.3.1 of keylime has been released - https://t.co/JFG49ITLZj - Lots of bug fixes, improved documentation, code and stability improvements!

[Keylime @KeylimeProject]

Keylime v6.2.1 has been released - https://t.co/hWn0sxP6Eo
Changes include ability to tag and collect revocation events, and a new option for to send revocation events via webhook. Along with lots of bug fixes, dependency removal, code cleanups and fixed typos.

[BigFuzzyNerd @m_peters]

Come listen to me and my colleagues talk about software security, hardware roots-of-trust and the Keylime project and see if I can pull off a live demo first thing in the morning (9am ET)

[Luke Hinds @decodebytes]

At 13:00 UTC my colleagues @m_peters and Lily Sturmann will be on "the level up hour" talking about the @CloudNativeFdn project @KeylimeProject as well as providing a live demo https://t.co/f4iCHFfcrt

[Keylime @KeylimeProject]

Keylime UI Development Meeting https://t.co/9j0OcVRnrL

[Red Hat Community @redhatopen]

Keylime Demo: Remote Trust for IoT, Edge, and Cloud https://t.co/ySMrJbRAPM <- @lukeahinds outlines #Keylime features

[Keylime @KeylimeProject]

Keylime starting to come up in many conversations now. Thanks @Thalesesecurity for the mention at the European Cyber Week and @fduthilleul for the pic.

[Keylime @KeylimeProject]

Regarding https://t.co/85LnsYSw6Y - Keylime is not at risk of this attack. We don't generate and store private keys, we use the EK & AK to attest trust, and neither of those keys were accessible via the aforementioned attack.

[Keylime @KeylimeProject]

We just released v5.0.0. Python 2 support depreciated with Python 3 now in. pycryptodome support removed and ported to python-cryptography (openssl wrapper). Want to check it out, try the ansible role in a VM with a tpm emulator https://t.co/FB1K5hUjB6

[Keylime @KeylimeProject]

One of our developers @lukeahinds will be on the #RedHat booth at the #opennetsummit this week running live demonstrations of https://t.co/W9u1pduHyU used for Edge Security with a hardware root of trust in a TPM - drop by, say hi and take a look!

[Keylime @KeylimeProject]

https://t.co/l2kntoKvih