Wave Systems Corp. (fka WAVXQ)

[svenm]

Ramsey2 and Barge,
Perhaps the problem in understanding this issue is the definition of the world "attestation" in this context. As SKS uses it in the CC cited by Barge, "attestation" refers to the Privacy-CA's attestation of the endorsement key and the platform. Only one Privacy-CA can provide this "attestation" which is the vouching for the identity of the TP and as I understand it, is the basic business that Wave is trying to build in regards to the TPM. However, other certification authorities (actually an infinite #) may act as "trust points within the PKI and attest that a given secret really does belong to an entity with a particular name" (taken from Siani Pearson's "trusted computing platform" book). This may be the type of "attestation" that Verisign is providing as mentioned by the TCB. Hopefully Ramsey2's sleuthing will shed more light on this pretty important issue.
Svenm