diff options
| author | stefan <stefan@i3mint.local> | 2026-02-23 18:53:35 +0100 |
|---|---|---|
| committer | stefan <stefan@i3mint.local> | 2026-02-23 18:53:35 +0100 |
| commit | eb4668408ceac440972213053ab0d97f6fa7ae89 (patch) | |
| tree | 1fd6e625a2e1525eae7b645652e8783b3639f574 | |
| parent | 610745a129310565ce682d4a1d675ff3b0f6e440 (diff) | |
SLSA models added
Signed-off-by: stefan <stefan@i3mint.local>
17 files changed, 231 insertions, 4 deletions
diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.png b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.png Binary files differindex d37ee4b..fb17d9f 100644 --- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.png +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.png diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.svg b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.svg index d336bf4..9869c2b 100644 --- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.svg +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.svg @@ -1 +1 @@ -<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="625px" preserveAspectRatio="none" style="width:1407px;height:625px;background:#D9D3D0;" version="1.1" viewBox="0 0 1407 625" width="1407px" zoomAndPan="magnify"><title>Daten Flow Diagram - GnuPG Keysigning between Alice and Bob</title><defs/><g><rect fill="#D9D3D0" height="625" style="stroke:none;stroke-width:1;" width="1407" x="0" y="0"/><g class="header" data-source-line="3"><text fill="#9275B6" font-family="Verdana" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="210.4892" x="1177.5631" y="24.9659">DFD: Alice and Bob Keysigning</text><text fill="#9275B6" font-family="Verdana" font-size="10" lengthAdjust="spacing" textLength="161.6599" x="1226.3923" y="39.7579">Compiled: 2026-02-22 15:43 +0100</text></g><g class="title" data-source-line="8"><text fill="#9275B6" font-family="Verdana" font-size="22" font-weight="bold" lengthAdjust="spacing" textLength="697.7543" x="350.149" y="82.206">Daten Flow Diagram - GnuPG Keysigning between Alice and Bob</text></g><!--entity Alice--><g class="entity" data-qualified-name="Alice" data-source-line="10" id="ent0002"><ellipse cx="579.7029" cy="113.652" fill="#D9D3D0" rx="8" ry="8" style="stroke:#9275B6;stroke-width:1;"/><path d="M579.7029,121.652 L579.7029,148.652 M566.7029,129.652 L592.7029,129.652 M579.7029,148.652 L566.7029,163.652 M579.7029,148.652 L592.7029,163.652" fill="none" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="30.7859" x="564.31" y="180.6179">Alice</text></g><!--entity Bob--><g class="entity" data-qualified-name="Bob" data-source-line="11" id="ent0003"><ellipse cx="625.7" cy="390.782" fill="#D9D3D0" rx="8" ry="8" style="stroke:#9275B6;stroke-width:1;"/><path d="M625.7,398.782 L625.7,425.782 M612.7,406.782 L638.7,406.782 M625.7,425.782 L612.7,440.782 M625.7,425.782 L638.7,440.782" fill="none" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="26.1799" x="612.61" y="457.7479">Bob</text></g><!--entity Keyserver--><g class="entity" data-qualified-name="Keyserver" data-source-line="12" id="ent0004"><ellipse cx="163.7079" cy="549.852" fill="#D9D3D0" rx="8" ry="8" style="stroke:#9275B6;stroke-width:1;"/><path d="M163.7079,557.852 L163.7079,584.852 M150.7079,565.852 L176.7079,565.852 M163.7079,584.852 L150.7079,599.852 M163.7079,584.852 L176.7079,599.852" fill="none" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="64.8757" x="131.27" y="616.8179">Keyserver</text></g><!--entity AK--><g class="entity" data-qualified-name="AK" data-source-line="14" id="ent0005"><rect fill="#D9D3D0" height="39.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="104.7837" x="1130.31" y="263.722"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="84.7837" x="1140.31" y="288.6879">Alice Keyring</text></g><!--entity BK--><g class="entity" data-qualified-name="BK" data-source-line="15" id="ent0006"><rect fill="#D9D3D0" height="39.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="100.1777" x="701.62" y="561.352"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="80.1777" x="711.62" y="586.3179">Bob Keyring</text></g><!--entity PubA--><g class="entity" data-qualified-name="PubA" data-source-line="17" id="ent0007"><rect fill="#D9D3D0" height="39.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="103.8597" x="421.77" y="263.722"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="83.8597" x="431.77" y="288.6879">PubKey Alice</text></g><!--entity PubB--><g class="entity" data-qualified-name="PubB" data-source-line="18" id="ent0008"><rect fill="#D9D3D0" height="39.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="99.2537" x="379.08" y="561.352"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="79.2537" x="389.08" y="586.3179">PubKey Bob</text></g><!--entity SigB--><g class="entity" data-qualified-name="SigB" data-source-line="20" id="ent0009"><rect fill="#D9D3D0" height="39.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="214.4872" x="563.46" y="263.722"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="194.4872" x="573.46" y="288.6879">signed PubKey of Alice -> Bob</text></g><!--entity SigA--><g class="entity" data-qualified-name="SigA" data-source-line="21" id="ent0010"><rect fill="#D9D3D0" height="39.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="214.4872" x="903.46" y="561.352"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="194.4872" x="913.46" y="586.3179">signed PubKey of Bob -> Alice</text></g><!--link Alice to PubA--><g class="link" data-entity-1="ent0002" data-entity-2="ent0007" data-link-type="dependency" data-source-line="24" id="lnk11"><path d="M563.92,152.402 C542.23,162.512 503.73,183.812 484.7,214.722 C475.67,229.382 473.4739,243.1035 473.1539,257.4435" fill="none" id="Alice-to-PubA" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="473.02,263.442,477.2198,254.5335,473.1315,258.4433,469.2218,254.355,473.02,263.442" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="133.2111" x="485.7" y="229.619">1. export own PubKey</text></g><!--link Bob to PubB--><g class="link" data-entity-1="ent0003" data-entity-2="ent0008" data-link-type="dependency" data-source-line="25" id="lnk12"><path d="M611.41,439.162 C594.74,457.712 565.88,488.302 537.7,510.852 C514.1,529.752 490.2603,544.8847 468.1003,557.8347" fill="none" id="Bob-to-PubB" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="462.92,560.862,472.7086,559.7746,467.2369,558.3393,468.6723,552.8675,462.92,560.862" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="133.2111" x="559.37" y="506.749">1. export own PubKey</text></g><!--link PubA to Bob--><g class="link" data-entity-1="ent0007" data-entity-2="ent0003" data-link-type="dependency" data-source-line="28" id="lnk13"><path d="M469.95,303.082 C468.12,317.632 468.07,337.602 477.7,351.782 C509.25,398.222 574.6027,413.1908 605.2827,418.0108" fill="none" id="PubA-to-Bob" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="611.21,418.942,602.9399,413.5937,606.2706,418.166,601.6982,421.4967,611.21,418.942" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="162.8642" x="478.7" y="347.679">2. mail own PubKey to Bob</text></g><!--link PubB to Alice--><g class="link" data-entity-1="ent0008" data-entity-2="ent0002" data-link-type="dependency" data-source-line="29" id="lnk14"><path d="M378.83,570.242 C345.92,561.012 305.24,543.462 284.7,510.852 C242.49,443.792 254.54,401.672 293.7,332.782 C356.31,222.662 507.6827,167.8704 558.1227,152.1204" fill="none" id="PubB-to-Alice" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="563.85,150.332,554.0668,149.1964,559.0773,151.8223,556.4513,156.8327,563.85,150.332" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="167.1412" x="294.7" y="347.679">2. mail own PubKey to Alice</text></g><!--link Bob to SigA--><g class="link" data-entity-1="ent0003" data-entity-2="ent0010" data-link-type="dependency" data-source-line="33" id="lnk15"><path d="M640.2,426.652 C675.04,436.052 765.99,461.692 838.7,491.852 C888.43,512.482 938.1813,538.9269 972.2813,557.9669" fill="none" id="Bob-to-SigA" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="977.52,560.892,971.612,553.0119,973.1544,558.4544,967.7119,559.9969,977.52,560.892" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="136.8771" x="878.37" y="506.749">3. sign PubKey of Alice</text></g><!--link Alice to SigB--><g class="link" data-entity-1="ent0002" data-entity-2="ent0009" data-link-type="dependency" data-source-line="34" id="lnk16"><path d="M595.55,169.472 C613.38,196.222 638.6227,234.1091 654.9227,258.5691" fill="none" id="Alice-to-SigB" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="658.25,263.562,656.5877,253.8544,655.4773,259.4012,649.9305,258.2908,658.25,263.562" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="132.6001" x="637.03" y="229.619">3. sign PubKey of Bob</text></g><!--link SigA to Alice--><g class="link" data-entity-1="ent0010" data-entity-2="ent0002" data-link-type="dependency" data-source-line="38" id="lnk17"><path d="M1018.49,561.022 C1035.28,517.072 1069.81,406.052 1023.7,332.782 C924.58,175.262 668.35,150.5675 601.42,146.7075" fill="none" id="SigA-to-Alice" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="595.43,146.362,604.1848,150.8736,600.4217,146.6499,604.6454,142.8868,595.43,146.362" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="364.9622" x="1034.09" y="347.679">4. mail signed PubKey of Alice to the mail address in the key</text></g><!--link SigB to Bob--><g class="link" data-entity-1="ent0009" data-entity-2="ent0003" data-link-type="dependency" data-source-line="39" id="lnk18"><path d="M664.45,303.242 C657.81,323.392 648.9981,350.1235 640.5281,375.8235" fill="none" id="SigB-to-Bob" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="638.65,381.522,645.2661,374.2263,640.2151,376.7733,637.6681,371.7222,638.65,381.522" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="360.6853" x="654.56" y="347.679">4. mail signed PubKey of Bob to the mail address in the key</text></g><!--link Alice to AK--><g class="link" data-entity-1="ent0002" data-entity-2="ent0005" data-link-type="dependency" data-source-line="43" id="lnk19"><path d="M595.45,146.552 C672.38,150.982 1008.89,172.472 1103.7,214.722 C1128.76,225.882 1147.8274,243.1951 1162.5074,259.0051" fill="none" id="Alice-to-AK" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="1166.59,263.402,1163.3973,254.085,1163.1878,259.738,1157.5349,259.5284,1166.59,263.402" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="149.3312" x="1133.72" y="229.619">5. import signed PubKey</text></g><!--link Bob to BK--><g class="link" data-entity-1="ent0003" data-entity-2="ent0006" data-link-type="dependency" data-source-line="44" id="lnk20"><path d="M640.12,431.162 C658.98,442.702 692.05,465.172 712.7,491.852 C729.07,513.012 738.3737,536.3999 744.4337,555.2499" fill="none" id="Bob-to-BK" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="746.27,560.962,747.3235,551.1697,744.7397,556.2019,739.7074,553.6181,746.27,560.962" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="104.5201" x="725.25" y="506.749">5. signed PubKey</text></g><!--link Alice to Keyserver--><g class="link" data-entity-1="ent0002" data-entity-2="ent0004" data-link-type="dependency" data-source-line="48" id="lnk21"><path d="M564.12,145.472 C491.37,145.422 183.49,155.932 59.7,332.782 C11,402.382 80.4861,493.955 126.7561,543.305" fill="none" id="Alice-to-Keyserver" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="130.86,547.682,127.6222,538.3806,127.4401,544.0345,121.7862,543.8524,130.86,547.682" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="214.1232" x="60.7" y="347.679">6. send new signature to Keyserver</text></g><!--link Bob to Keyserver--><g class="link" data-entity-1="ent0003" data-entity-2="ent0004" data-link-type="dependency" data-source-line="49" id="lnk22"><path d="M611.24,424.392 C565.97,429.642 423.43,448.762 313.7,491.852 C270.84,508.692 230.788,533.3376 201.388,553.2476" fill="none" id="Bob-to-Keyserver" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="196.42,556.612,206.1149,554.8774,200.56,553.8084,201.6291,548.2534,196.42,556.612" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="214.1232" x="314.7" y="506.749">6. send new signature to Keyserver</text></g><?plantuml-src bLFBJiCm4BpxAvPAg7189Pw7IY0bL72ea92uSNFZRM8rjYl7fV1ZdBZnOwmT9qrG2oAdo3CxCxkhFN8bAWGb5Ph2ydN9M8bSe6KtCBkVJI6jP8x0jO3CB62ExxKijDG5i3kZrh92COLZmHsUZDxfInuV4o5WjPeg1I-ZKs2eHLHaJheAOKPa3VULsS9CSZ9LaC23tZmzzEKNwBP8l84_OpntnZQFyTy_Dt--6kshTxAOEwuBSXir0eHPaXq1ho6Tz_7OLeTcyq7vqsP1QECOS7f8zn18feMpWO1l20L4cbd6ZfBRhkHP5jcl5JuYyNSPg29bR0pZyHZmRMsiasXHioXDN9yIfd0sYJYOhOwABCWrdEm01rfrccQTbp9VaNhGJ9hWL7S-0SLbrQzo9gmZ22TjueFKPekja--QkutjulacgVPY4g2V0-prwkUtb-YL-leX13KIbFlvBcE-0xkYh7Gc3OKBOR6kGUhmjg9v1l_TN0wAUVWFgP_3e0EGQjz-qpavNKqYElJg9fX5qX3jFFAo-lgiQwpybhy-balKZWpAWL5tL2HrJL9qpg1nkqleMzfTNclzpx9l?></g></svg>
\ No newline at end of file +<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="625px" preserveAspectRatio="none" style="width:1407px;height:625px;background:#D9D3D0;" version="1.1" viewBox="0 0 1407 625" width="1407px" zoomAndPan="magnify"><title>Daten Flow Diagram - GnuPG Keysigning between Alice and Bob</title><defs/><g><rect fill="#D9D3D0" height="625" style="stroke:none;stroke-width:1;" width="1407" x="0" y="0"/><g class="header" data-source-line="3"><text fill="#9275B6" font-family="Verdana" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="210.4892" x="1177.5631" y="24.9659">DFD: Alice and Bob Keysigning</text><text fill="#9275B6" font-family="Verdana" font-size="10" lengthAdjust="spacing" textLength="161.6599" x="1226.3923" y="39.7579">Compiled: 2026-02-23 18:52 +0100</text></g><g class="title" data-source-line="8"><text fill="#9275B6" font-family="Verdana" font-size="22" font-weight="bold" lengthAdjust="spacing" textLength="697.7543" x="350.149" y="82.206">Daten Flow Diagram - GnuPG Keysigning between Alice and Bob</text></g><!--entity Alice--><g class="entity" data-qualified-name="Alice" data-source-line="10" id="ent0002"><ellipse cx="579.7029" cy="113.652" fill="#D9D3D0" rx="8" ry="8" style="stroke:#9275B6;stroke-width:1;"/><path d="M579.7029,121.652 L579.7029,148.652 M566.7029,129.652 L592.7029,129.652 M579.7029,148.652 L566.7029,163.652 M579.7029,148.652 L592.7029,163.652" fill="none" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="30.7859" x="564.31" y="180.6179">Alice</text></g><!--entity Bob--><g class="entity" data-qualified-name="Bob" data-source-line="11" id="ent0003"><ellipse cx="625.7" cy="390.782" fill="#D9D3D0" rx="8" ry="8" style="stroke:#9275B6;stroke-width:1;"/><path d="M625.7,398.782 L625.7,425.782 M612.7,406.782 L638.7,406.782 M625.7,425.782 L612.7,440.782 M625.7,425.782 L638.7,440.782" fill="none" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="26.1799" x="612.61" y="457.7479">Bob</text></g><!--entity Keyserver--><g class="entity" data-qualified-name="Keyserver" data-source-line="12" id="ent0004"><ellipse cx="163.7079" cy="549.852" fill="#D9D3D0" rx="8" ry="8" style="stroke:#9275B6;stroke-width:1;"/><path d="M163.7079,557.852 L163.7079,584.852 M150.7079,565.852 L176.7079,565.852 M163.7079,584.852 L150.7079,599.852 M163.7079,584.852 L176.7079,599.852" fill="none" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="64.8757" x="131.27" y="616.8179">Keyserver</text></g><!--entity AK--><g class="entity" data-qualified-name="AK" data-source-line="14" id="ent0005"><rect fill="#D9D3D0" height="39.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="104.7837" x="1130.31" y="263.722"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="84.7837" x="1140.31" y="288.6879">Alice Keyring</text></g><!--entity BK--><g class="entity" data-qualified-name="BK" data-source-line="15" id="ent0006"><rect fill="#D9D3D0" height="39.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="100.1777" x="701.62" y="561.352"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="80.1777" x="711.62" y="586.3179">Bob Keyring</text></g><!--entity PubA--><g class="entity" data-qualified-name="PubA" data-source-line="17" id="ent0007"><rect fill="#D9D3D0" height="39.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="103.8597" x="421.77" y="263.722"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="83.8597" x="431.77" y="288.6879">PubKey Alice</text></g><!--entity PubB--><g class="entity" data-qualified-name="PubB" data-source-line="18" id="ent0008"><rect fill="#D9D3D0" height="39.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="99.2537" x="379.08" y="561.352"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="79.2537" x="389.08" y="586.3179">PubKey Bob</text></g><!--entity SigB--><g class="entity" data-qualified-name="SigB" data-source-line="20" id="ent0009"><rect fill="#D9D3D0" height="39.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="214.4872" x="563.46" y="263.722"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="194.4872" x="573.46" y="288.6879">signed PubKey of Alice -> Bob</text></g><!--entity SigA--><g class="entity" data-qualified-name="SigA" data-source-line="21" id="ent0010"><rect fill="#D9D3D0" height="39.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="214.4872" x="903.46" y="561.352"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="194.4872" x="913.46" y="586.3179">signed PubKey of Bob -> Alice</text></g><!--link Alice to PubA--><g class="link" data-entity-1="ent0002" data-entity-2="ent0007" data-link-type="dependency" data-source-line="24" id="lnk11"><path d="M563.92,152.402 C542.23,162.512 503.73,183.812 484.7,214.722 C475.67,229.382 473.4739,243.1035 473.1539,257.4435" fill="none" id="Alice-to-PubA" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="473.02,263.442,477.2198,254.5335,473.1315,258.4433,469.2218,254.355,473.02,263.442" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="133.2111" x="485.7" y="229.619">1. export own PubKey</text></g><!--link Bob to PubB--><g class="link" data-entity-1="ent0003" data-entity-2="ent0008" data-link-type="dependency" data-source-line="25" id="lnk12"><path d="M611.41,439.162 C594.74,457.712 565.88,488.302 537.7,510.852 C514.1,529.752 490.2603,544.8847 468.1003,557.8347" fill="none" id="Bob-to-PubB" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="462.92,560.862,472.7086,559.7746,467.2369,558.3393,468.6723,552.8675,462.92,560.862" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="133.2111" x="559.37" y="506.749">1. export own PubKey</text></g><!--link PubA to Bob--><g class="link" data-entity-1="ent0007" data-entity-2="ent0003" data-link-type="dependency" data-source-line="28" id="lnk13"><path d="M469.95,303.082 C468.12,317.632 468.07,337.602 477.7,351.782 C509.25,398.222 574.6027,413.1908 605.2827,418.0108" fill="none" id="PubA-to-Bob" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="611.21,418.942,602.9399,413.5937,606.2706,418.166,601.6982,421.4967,611.21,418.942" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="162.8642" x="478.7" y="347.679">2. mail own PubKey to Bob</text></g><!--link PubB to Alice--><g class="link" data-entity-1="ent0008" data-entity-2="ent0002" data-link-type="dependency" data-source-line="29" id="lnk14"><path d="M378.83,570.242 C345.92,561.012 305.24,543.462 284.7,510.852 C242.49,443.792 254.54,401.672 293.7,332.782 C356.31,222.662 507.6827,167.8704 558.1227,152.1204" fill="none" id="PubB-to-Alice" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="563.85,150.332,554.0668,149.1964,559.0773,151.8223,556.4513,156.8327,563.85,150.332" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="167.1412" x="294.7" y="347.679">2. mail own PubKey to Alice</text></g><!--link Bob to SigA--><g class="link" data-entity-1="ent0003" data-entity-2="ent0010" data-link-type="dependency" data-source-line="33" id="lnk15"><path d="M640.2,426.652 C675.04,436.052 765.99,461.692 838.7,491.852 C888.43,512.482 938.1813,538.9269 972.2813,557.9669" fill="none" id="Bob-to-SigA" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="977.52,560.892,971.612,553.0119,973.1544,558.4544,967.7119,559.9969,977.52,560.892" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="136.8771" x="878.37" y="506.749">3. sign PubKey of Alice</text></g><!--link Alice to SigB--><g class="link" data-entity-1="ent0002" data-entity-2="ent0009" data-link-type="dependency" data-source-line="34" id="lnk16"><path d="M595.55,169.472 C613.38,196.222 638.6227,234.1091 654.9227,258.5691" fill="none" id="Alice-to-SigB" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="658.25,263.562,656.5877,253.8544,655.4773,259.4012,649.9305,258.2908,658.25,263.562" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="132.6001" x="637.03" y="229.619">3. sign PubKey of Bob</text></g><!--link SigA to Alice--><g class="link" data-entity-1="ent0010" data-entity-2="ent0002" data-link-type="dependency" data-source-line="38" id="lnk17"><path d="M1018.49,561.022 C1035.28,517.072 1069.81,406.052 1023.7,332.782 C924.58,175.262 668.35,150.5675 601.42,146.7075" fill="none" id="SigA-to-Alice" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="595.43,146.362,604.1848,150.8736,600.4217,146.6499,604.6454,142.8868,595.43,146.362" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="364.9622" x="1034.09" y="347.679">4. mail signed PubKey of Alice to the mail address in the key</text></g><!--link SigB to Bob--><g class="link" data-entity-1="ent0009" data-entity-2="ent0003" data-link-type="dependency" data-source-line="39" id="lnk18"><path d="M664.45,303.242 C657.81,323.392 648.9981,350.1235 640.5281,375.8235" fill="none" id="SigB-to-Bob" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="638.65,381.522,645.2661,374.2263,640.2151,376.7733,637.6681,371.7222,638.65,381.522" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="360.6853" x="654.56" y="347.679">4. mail signed PubKey of Bob to the mail address in the key</text></g><!--link Alice to AK--><g class="link" data-entity-1="ent0002" data-entity-2="ent0005" data-link-type="dependency" data-source-line="43" id="lnk19"><path d="M595.45,146.552 C672.38,150.982 1008.89,172.472 1103.7,214.722 C1128.76,225.882 1147.8274,243.1951 1162.5074,259.0051" fill="none" id="Alice-to-AK" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="1166.59,263.402,1163.3973,254.085,1163.1878,259.738,1157.5349,259.5284,1166.59,263.402" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="149.3312" x="1133.72" y="229.619">5. import signed PubKey</text></g><!--link Bob to BK--><g class="link" data-entity-1="ent0003" data-entity-2="ent0006" data-link-type="dependency" data-source-line="44" id="lnk20"><path d="M640.12,431.162 C658.98,442.702 692.05,465.172 712.7,491.852 C729.07,513.012 738.3737,536.3999 744.4337,555.2499" fill="none" id="Bob-to-BK" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="746.27,560.962,747.3235,551.1697,744.7397,556.2019,739.7074,553.6181,746.27,560.962" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="104.5201" x="725.25" y="506.749">5. signed PubKey</text></g><!--link Alice to Keyserver--><g class="link" data-entity-1="ent0002" data-entity-2="ent0004" data-link-type="dependency" data-source-line="48" id="lnk21"><path d="M564.12,145.472 C491.37,145.422 183.49,155.932 59.7,332.782 C11,402.382 80.4861,493.955 126.7561,543.305" fill="none" id="Alice-to-Keyserver" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="130.86,547.682,127.6222,538.3806,127.4401,544.0345,121.7862,543.8524,130.86,547.682" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="214.1232" x="60.7" y="347.679">6. send new signature to Keyserver</text></g><!--link Bob to Keyserver--><g class="link" data-entity-1="ent0003" data-entity-2="ent0004" data-link-type="dependency" data-source-line="49" id="lnk22"><path d="M611.24,424.392 C565.97,429.642 423.43,448.762 313.7,491.852 C270.84,508.692 230.788,533.3376 201.388,553.2476" fill="none" id="Bob-to-Keyserver" style="stroke:#9275B6;stroke-width:1;"/><polygon fill="#9275B6" points="196.42,556.612,206.1149,554.8774,200.56,553.8084,201.6291,548.2534,196.42,556.612" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="214.1232" x="314.7" y="506.749">6. send new signature to Keyserver</text></g><?plantuml-src bLFBJiCm4BpxAvPAg7189Pw7IY0bL72ea92uSNFZRM8rjYl7fV1ZdBZnOwmT9qrG2oAdo3CxCxkhFN8bAWGb5Ph2ydN9M8bSe6KtCBkVJI6jP8x0jO3CB62ExxKijDG5i3kZrh92COLZmHsUZDxfInuV4o5WjPeg1I-ZKs2eHLHaJheAOKPa3VULsS9CSZ9LaC23tZmzzEKNwBP8l84_OpntnZQFyTy_Dt--6kshTxAOEwuBSXir0eHPaXq1ho6Tz_7OLeTcyq7vqsP1QECOS7f8zn18feMpWO1l20L4cbd6ZfBRhkHP5jcl5JuYyNSPg29bR0pZyHZmRMsiasXHioXDN9yIfd0sYJYOhOwABCWrdEm01rfrccQTbp9VaNhGJ9hWL7S-0SLbrQzo9gmZ22TjueFKPekja--QkutjulacgVPY4g2V0-prwkUtb-YL-leX13KIbFlvBcE-0xkYh7Gc3OKBOR6kGUhmjg9v1l_TN0wAUVWFgP_3e0EGQjz-qpavNKqYElJg9fX5qX3jFFAo-lgiQwpybhy-balKZWpAWL5tL2HrJL9qpg1nkqleMzfTNclzpx9l?></g></svg>
\ No newline at end of file diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.png b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.png Binary files differindex 9676b06..66befaa 100644 --- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.png +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.png diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.svg b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.svg index fbc52b8..e363b69 100644 --- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.svg +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.svg @@ -1 +1 @@ -<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="SEQUENCE" height="1812px" preserveAspectRatio="none" style="width:1268px;height:1812px;background:#D9D3D0;" version="1.1" viewBox="0 0 1268 1812" width="1268px" zoomAndPan="magnify"><title>Sequence Diagram - Mutual Key Signing with Owner Trust (<font:monospace>tsign</font>)</title><defs/><g><rect fill="#D9D3D0" height="1812" style="stroke:none;stroke-width:1;" width="1268" x="0" y="0"/><text fill="#9275B6" font-family="Verdana" font-size="22" font-weight="bold" lengthAdjust="spacing" textLength="646.3842" x="278.1986" y="82.206">Sequence Diagram - Mutual Key Signing with Owner Trust (</text><text fill="#9275B6" font-family="monospace" font-size="22" font-weight="bold" lengthAdjust="spacing" textLength="55.3742" x="924.5828" y="82.206">tsign</text><text fill="#9275B6" font-family="Verdana" font-size="22" font-weight="bold" lengthAdjust="spacing" textLength="7.458" x="979.957" y="82.206">)</text><rect fill="#D9D3D0" height="140.8241" style="stroke:#9275B6;stroke-width:1;" width="1236.6136" x="15" y="196.7199"/><rect fill="#D9D3D0" height="872.0624" style="stroke:#9275B6;stroke-width:1;" width="865.2089" x="15" y="351.544"/><rect fill="#D9D3D0" height="354.4722" style="stroke:#9275B6;stroke-width:1;" width="865.2089" x="15" y="1237.6064"/><g class="participant-lifeline" data-entity-uid="part1" data-qualified-name="Alice" id="part1-lifeline"><g><title>Alice</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="39.3929" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="43" x2="43" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part2" data-qualified-name="Bob" id="part2-lifeline"><g><title>Bob</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="83.8758" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="87.7859" x2="87.7859" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part3" data-qualified-name="AG" id="part3-lifeline"><g><title>Alice GnuPG</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="231.9609" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="235.6691" x2="235.6691" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part4" data-qualified-name="BG" id="part4-lifeline"><g><title>Bob GnuPG</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="354.2416" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="357.2528" x2="357.2528" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part5" data-qualified-name="AK" id="part5-lifeline"><g><title>Alice Keyring</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="464.6223" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="468.2305" x2="468.2305" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part6" data-qualified-name="BK" id="part6-lifeline"><g><title>Bob Keyring</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="563.103" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="567.0141" x2="567.0141" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part7" data-qualified-name="AT" id="part7-lifeline"><g><title>Alice Owner Trust</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="677.3476" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="681.1918" x2="681.1918" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part8" data-qualified-name="BT" id="part8-lifeline"><g><title>Bob Owner Trust</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="807.3561" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="810.5033" x2="810.5033" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part9" data-qualified-name="AID" id="part9-lifeline"><g><title>Alice Passport</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="925.2477" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="929.2089" x2="929.2089" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part10" data-qualified-name="BID" id="part10-lifeline"><g><title>Bob Passport</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="1031.0224" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="1034.2866" x2="1034.2866" y1="179.7199" y2="1609.0786"/></g></g><g class="participant participant-head" data-entity-uid="part1" data-qualified-name="Alice" id="part1-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="30.7859" x="25" y="175.6179">Alice</text><ellipse cx="43.3929" cy="108.652" fill="#D9D3D0" rx="8" ry="8" style="stroke:#9275B6;stroke-width:1;"/><path d="M43.3929,116.652 L43.3929,143.652 M30.3929,124.652 L56.3929,124.652 M43.3929,143.652 L30.3929,158.652 M43.3929,143.652 L56.3929,158.652" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-tail" data-entity-uid="part1" data-qualified-name="Alice" id="part1-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="30.7859" x="25" y="1623.0446">Alice</text><ellipse cx="43.3929" cy="1636.1466" fill="#D9D3D0" rx="8" ry="8" style="stroke:#9275B6;stroke-width:1;"/><path d="M43.3929,1644.1466 L43.3929,1671.1466 M30.3929,1652.1466 L56.3929,1652.1466 M43.3929,1671.1466 L30.3929,1686.1466 M43.3929,1671.1466 L56.3929,1686.1466" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-head" data-entity-uid="part2" data-qualified-name="Bob" id="part2-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="26.1799" x="71.7859" y="175.6179">Bob</text><ellipse cx="87.8758" cy="108.652" fill="#D9D3D0" rx="8" ry="8" style="stroke:#9275B6;stroke-width:1;"/><path d="M87.8758,116.652 L87.8758,143.652 M74.8758,124.652 L100.8758,124.652 M87.8758,143.652 L74.8758,158.652 M87.8758,143.652 L100.8758,158.652" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-tail" data-entity-uid="part2" data-qualified-name="Bob" id="part2-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="26.1799" x="71.7859" y="1623.0446">Bob</text><ellipse cx="87.8758" cy="1636.1466" fill="#D9D3D0" rx="8" ry="8" style="stroke:#9275B6;stroke-width:1;"/><path d="M87.8758,1644.1466 L87.8758,1671.1466 M74.8758,1652.1466 L100.8758,1652.1466 M87.8758,1671.1466 L74.8758,1686.1466 M87.8758,1671.1466 L100.8758,1686.1466" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-head" data-entity-uid="part3" data-qualified-name="AG" id="part3-head"><rect fill="#D9D3D0" height="33.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="94.5837" x="188.6691" y="145.652"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="80.5837" x="195.6691" y="167.6179">Alice GnuPG</text></g><g class="participant participant-tail" data-entity-uid="part3" data-qualified-name="AG" id="part3-tail"><rect fill="#D9D3D0" height="33.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="94.5837" x="188.6691" y="1608.0786"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="80.5837" x="195.6691" y="1630.0446">Alice GnuPG</text></g><g class="participant participant-head" data-entity-uid="part4" data-qualified-name="BG" id="part4-head"><rect fill="#D9D3D0" height="33.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="89.9777" x="313.2528" y="145.652"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="75.9777" x="320.2528" y="167.6179">Bob GnuPG</text></g><g class="participant participant-tail" data-entity-uid="part4" data-qualified-name="BG" id="part4-tail"><rect fill="#D9D3D0" height="33.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="89.9777" x="313.2528" y="1608.0786"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="75.9777" x="320.2528" y="1630.0446">Bob GnuPG</text></g><g class="participant participant-head" data-entity-uid="part5" data-qualified-name="AK" id="part5-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="84.7837" x="423.2305" y="175.6179">Alice Keyring</text><path d="M450.6223,124.652 C450.6223,114.652 468.6223,114.652 468.6223,114.652 C468.6223,114.652 486.6223,114.652 486.6223,124.652 L486.6223,150.652 C486.6223,160.652 468.6223,160.652 468.6223,160.652 C468.6223,160.652 450.6223,160.652 450.6223,150.652 L450.6223,124.652" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M450.6223,124.652 C450.6223,134.652 468.6223,134.652 468.6223,134.652 C468.6223,134.652 486.6223,134.652 486.6223,124.652" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-tail" data-entity-uid="part5" data-qualified-name="AK" id="part5-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="84.7837" x="423.2305" y="1623.0446">Alice Keyring</text><path d="M450.6223,1637.1466 C450.6223,1627.1466 468.6223,1627.1466 468.6223,1627.1466 C468.6223,1627.1466 486.6223,1627.1466 486.6223,1637.1466 L486.6223,1663.1466 C486.6223,1673.1466 468.6223,1673.1466 468.6223,1673.1466 C468.6223,1673.1466 450.6223,1673.1466 450.6223,1663.1466 L450.6223,1637.1466" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M450.6223,1637.1466 C450.6223,1647.1466 468.6223,1647.1466 468.6223,1647.1466 C468.6223,1647.1466 486.6223,1647.1466 486.6223,1637.1466" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-head" data-entity-uid="part6" data-qualified-name="BK" id="part6-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="80.1777" x="524.0141" y="175.6179">Bob Keyring</text><path d="M549.103,124.652 C549.103,114.652 567.103,114.652 567.103,114.652 C567.103,114.652 585.103,114.652 585.103,124.652 L585.103,150.652 C585.103,160.652 567.103,160.652 567.103,160.652 C567.103,160.652 549.103,160.652 549.103,150.652 L549.103,124.652" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M549.103,124.652 C549.103,134.652 567.103,134.652 567.103,134.652 C567.103,134.652 585.103,134.652 585.103,124.652" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-tail" data-entity-uid="part6" data-qualified-name="BK" id="part6-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="80.1777" x="524.0141" y="1623.0446">Bob Keyring</text><path d="M549.103,1637.1466 C549.103,1627.1466 567.103,1627.1466 567.103,1627.1466 C567.103,1627.1466 585.103,1627.1466 585.103,1637.1466 L585.103,1663.1466 C585.103,1673.1466 567.103,1673.1466 567.103,1673.1466 C567.103,1673.1466 549.103,1673.1466 549.103,1663.1466 L549.103,1637.1466" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M549.103,1637.1466 C549.103,1647.1466 567.103,1647.1466 567.103,1647.1466 C567.103,1647.1466 585.103,1647.1466 585.103,1637.1466" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-head" data-entity-uid="part7" data-qualified-name="AT" id="part7-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="116.3115" x="620.1918" y="175.6179">Alice Owner Trust</text><path d="M663.3476,124.652 C663.3476,114.652 681.3476,114.652 681.3476,114.652 C681.3476,114.652 699.3476,114.652 699.3476,124.652 L699.3476,150.652 C699.3476,160.652 681.3476,160.652 681.3476,160.652 C681.3476,160.652 663.3476,160.652 663.3476,150.652 L663.3476,124.652" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M663.3476,124.652 C663.3476,134.652 681.3476,134.652 681.3476,134.652 C681.3476,134.652 699.3476,134.652 699.3476,124.652" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-tail" data-entity-uid="part7" data-qualified-name="AT" id="part7-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="116.3115" x="620.1918" y="1623.0446">Alice Owner Trust</text><path d="M663.3476,1637.1466 C663.3476,1627.1466 681.3476,1627.1466 681.3476,1627.1466 C681.3476,1627.1466 699.3476,1627.1466 699.3476,1637.1466 L699.3476,1663.1466 C699.3476,1673.1466 681.3476,1673.1466 681.3476,1673.1466 C681.3476,1673.1466 663.3476,1673.1466 663.3476,1663.1466 L663.3476,1637.1466" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M663.3476,1637.1466 C663.3476,1647.1466 681.3476,1647.1466 681.3476,1647.1466 C681.3476,1647.1466 699.3476,1647.1466 699.3476,1637.1466" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-head" data-entity-uid="part8" data-qualified-name="BT" id="part8-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="111.7056" x="752.5033" y="175.6179">Bob Owner Trust</text><path d="M793.3561,124.652 C793.3561,114.652 811.3561,114.652 811.3561,114.652 C811.3561,114.652 829.3561,114.652 829.3561,124.652 L829.3561,150.652 C829.3561,160.652 811.3561,160.652 811.3561,160.652 C811.3561,160.652 793.3561,160.652 793.3561,150.652 L793.3561,124.652" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M793.3561,124.652 C793.3561,134.652 811.3561,134.652 811.3561,134.652 C811.3561,134.652 829.3561,134.652 829.3561,124.652" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-tail" data-entity-uid="part8" data-qualified-name="BT" id="part8-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="111.7056" x="752.5033" y="1623.0446">Bob Owner Trust</text><path d="M793.3561,1637.1466 C793.3561,1627.1466 811.3561,1627.1466 811.3561,1627.1466 C811.3561,1627.1466 829.3561,1627.1466 829.3561,1637.1466 L829.3561,1663.1466 C829.3561,1673.1466 811.3561,1673.1466 811.3561,1673.1466 C811.3561,1673.1466 793.3561,1673.1466 793.3561,1663.1466 L793.3561,1637.1466" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M793.3561,1637.1466 C793.3561,1647.1466 811.3561,1647.1466 811.3561,1647.1466 C811.3561,1647.1466 829.3561,1647.1466 829.3561,1637.1466" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-head" data-entity-uid="part9" data-qualified-name="AID" id="part9-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="92.0777" x="880.2089" y="175.6179">Alice Passport</text><ellipse cx="929.2477" cy="144.652" fill="#D9D3D0" rx="12" ry="12" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="917.2477" x2="941.2477" y1="158.652" y2="158.652"/></g><g class="participant participant-tail" data-entity-uid="part9" data-qualified-name="AID" id="part9-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="92.0777" x="880.2089" y="1623.0446">Alice Passport</text><ellipse cx="929.2477" cy="1643.1466" fill="#D9D3D0" rx="12" ry="12" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="917.2477" x2="941.2477" y1="1657.1466" y2="1657.1466"/></g><g class="participant participant-head" data-entity-uid="part10" data-qualified-name="BID" id="part10-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="87.4717" x="988.2866" y="175.6179">Bob Passport</text><ellipse cx="1035.0224" cy="144.652" fill="#D9D3D0" rx="12" ry="12" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="1023.0224" x2="1047.0224" y1="158.652" y2="158.652"/></g><g class="participant participant-tail" data-entity-uid="part10" data-qualified-name="BID" id="part10-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="87.4717" x="988.2866" y="1623.0446">Bob Passport</text><ellipse cx="1035.0224" cy="1643.1466" fill="#D9D3D0" rx="12" ry="12" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="1023.0224" x2="1047.0224" y1="1657.1466" y2="1657.1466"/></g><path d="M15,196.7199 L173.5811,196.7199 L173.5811,206.4259 L163.5811,216.4259 L15,216.4259 L15,196.7199" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><rect fill="none" height="140.8241" style="stroke:#9275B6;stroke-width:1;" width="1236.6136" x="15" y="196.7199"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="113.5811" x="30" y="211.6169">Key Signing Party</text><rect fill="#D9D3D0" height="3" style="stroke:#D9D3D0;stroke-width:1;" width="1256.6136" x="5" y="238.2789"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="238.2789" y2="238.2789"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="241.2789" y2="241.2789"/><rect fill="#D9D3D0" height="25.706" style="stroke:#9275B6;stroke-width:1;" width="193.3221" x="536.6457" y="226.4259"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="175.9421" x="542.6457" y="244.323">ID Verification via Passport</text><g class="message" data-entity-1="part1" data-entity-2="part10" id="msg1"><polygon fill="#9275B6" points="1023.0224,284.838,1033.0224,288.838,1023.0224,292.838,1027.0224,288.838" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="43.3929" x2="1029.0224" y1="288.838" y2="288.838"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="125.7881" x="50.3929" y="283.029">Verify Bobs Passport</text></g><path d="M1040,267.132 L1040,294.132 L1236,294.132 L1236,277.132 L1226,267.132 L1040,267.132" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M1226,267.132 L1226,277.132 L1236,277.132 L1226,267.132" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="175.5912" x="1046" y="286.029">verify ID and Key-Fingerprint</text><g class="message" data-entity-1="part2" data-entity-2="part9" id="msg3"><polygon fill="#9275B6" points="917.2477,322.544,927.2477,326.544,917.2477,330.544,921.2477,326.544" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="87.8758" x2="923.2477" y1="326.544" y2="326.544"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="123.8381" x="94.8758" y="320.735">Verify Alice Passport</text></g><path d="M934,304.838 L934,331.838 L1144,331.838 L1144,314.838 L1134,304.838 L934,304.838" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M1134,304.838 L1134,314.838 L1144,314.838 L1134,304.838" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="189.2932" x="940" y="323.735">verify ID and Key-Fingerprint:w</text><path d="M15,351.544 L145.9821,351.544 L145.9821,361.25 L135.9821,371.25 L15,371.25 L15,351.544" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><rect fill="none" height="872.0624" style="stroke:#9275B6;stroke-width:1;" width="865.2089" x="15" y="351.544"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="85.9821" x="30" y="366.441">KeyExchange</text><rect fill="#D9D3D0" height="3" style="stroke:#D9D3D0;stroke-width:1;" width="1256.6136" x="5" y="393.103"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="393.103" y2="393.103"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="396.103" y2="396.103"/><rect fill="#D9D3D0" height="25.706" style="stroke:#9275B6;stroke-width:1;" width="106.7421" x="579.9358" y="381.25"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="89.3621" x="585.9358" y="399.147">Key Exchange</text><g class="message" data-entity-1="part1" data-entity-2="part3" id="msg5"><polygon fill="#9275B6" points="223.9609,436.662,233.9609,440.662,223.9609,444.662,227.9609,440.662" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="43.3929" x2="229.9609" y1="440.662" y2="440.662"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="89.3101" x="50.3929" y="434.853">Export PubKey</text></g><g class="message" data-entity-1="part3" data-entity-2="part5" id="msg6"><polygon fill="#9275B6" points="456.6223,468.3681,466.6223,472.3681,456.6223,476.3681,460.6223,472.3681" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="235.9609" x2="462.6223" y1="472.3681" y2="472.3681"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="124.2931" x="242.9609" y="466.5591">Read PubKeyof Alice</text></g><g class="message" data-entity-1="part3" data-entity-2="part2" id="msg7"><polygon fill="#9275B6" points="98.8758,500.0741,88.8758,504.0741,98.8758,508.0741,94.8758,504.0741" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="92.8758" x2="234.9609" y1="504.0741" y2="504.0741"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="124.0851" x="104.8758" y="498.2651">Send PubKeyof Alice</text></g><g class="message" data-entity-1="part2" data-entity-2="part4" id="msg8"><polygon fill="#9275B6" points="346.2416,531.7801,356.2416,535.7801,346.2416,539.7801,350.2416,535.7801" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="87.8758" x2="352.2416" y1="535.7801" y2="535.7801"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="89.3101" x="94.8758" y="529.9711">Export PubKey</text></g><g class="message" data-entity-1="part4" data-entity-2="part6" id="msg9"><polygon fill="#9275B6" points="555.103,563.4861,565.103,567.4861,555.103,571.4861,559.103,567.4861" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="358.2416" x2="561.103" y1="567.4861" y2="567.4861"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="120.0161" x="365.2416" y="561.6771">Read PubKeyof Bob</text></g><g class="message" data-entity-1="part4" data-entity-2="part1" id="msg10"><polygon fill="#9275B6" points="54.3929,595.1921,44.3929,599.1921,54.3929,603.1921,50.3929,599.1921" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="48.3929" x2="357.2416" y1="599.1921" y2="599.1921"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="119.8081" x="60.3929" y="593.3831">Send PubKeyof Bob</text></g><rect fill="#D9D3D0" height="3" style="stroke:#D9D3D0;stroke-width:1;" width="1256.6136" x="5" y="629.0451"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="629.0451" y2="629.0451"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="632.0451" y2="632.0451"/><rect fill="#D9D3D0" height="25.706" style="stroke:#9275B6;stroke-width:1;" width="65.6491" x="600.4823" y="617.1921"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="48.2691" x="606.4823" y="635.0891">Signing</text><g class="message" data-entity-1="part2" data-entity-2="part4" id="msg11"><polygon fill="#9275B6" points="346.2416,690.3102,356.2416,694.3102,346.2416,698.3102,350.2416,694.3102" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="87.8758" x2="352.2416" y1="694.3102" y2="694.3102"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="82.7711" x="94.8758" y="670.7952">Sign Alice key</text><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="103.0771" x="94.8758" y="688.5012">(identity verified)</text></g><g class="message" data-entity-1="part4" data-entity-2="part6" id="msg12"><polygon fill="#9275B6" points="555.103,722.0162,565.103,726.0162,555.103,730.0162,559.103,726.0162" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="358.2416" x2="561.103" y1="726.0162" y2="726.0162"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="169.6371" x="365.2416" y="720.2072">Store signature on Alice key</text></g><g class="message" data-entity-1="part4" data-entity-2="part1" id="msg13"><polygon fill="#9275B6" points="54.3929,753.7222,44.3929,757.7222,54.3929,761.7222,50.3929,757.7222" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="48.3929" x2="357.2416" y1="757.7222" y2="757.7222"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="126.3601" x="60.3929" y="751.9132">Mail signed Alice key</text></g><g class="message" data-entity-1="part1" data-entity-2="part3" id="msg14"><polygon fill="#9275B6" points="223.9609,803.1342,233.9609,807.1342,223.9609,811.1342,227.9609,807.1342" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="43.3929" x2="229.9609" y1="807.1342" y2="807.1342"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="78.4941" x="50.3929" y="783.6192">Sign Bob key</text><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="103.0771" x="50.3929" y="801.3252">(identity verified)</text></g><g class="message" data-entity-1="part3" data-entity-2="part5" id="msg15"><polygon fill="#9275B6" points="456.6223,834.8403,466.6223,838.8403,456.6223,842.8403,460.6223,838.8403" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="235.9609" x2="462.6223" y1="838.8403" y2="838.8403"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="165.3602" x="242.9609" y="833.0313">Store signature on Bob key</text></g><g class="message" data-entity-1="part3" data-entity-2="part2" id="msg16"><polygon fill="#9275B6" points="98.8758,866.5463,88.8758,870.5463,98.8758,874.5463,94.8758,870.5463" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="92.8758" x2="234.9609" y1="870.5463" y2="870.5463"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="122.0831" x="104.8758" y="864.7373">Mail signed Bob key</text></g><rect fill="#D9D3D0" height="3" style="stroke:#D9D3D0;stroke-width:1;" width="1256.6136" x="5" y="900.3993"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="900.3993" y2="900.3993"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="903.3993" y2="903.3993"/><rect fill="#D9D3D0" height="25.706" style="stroke:#9275B6;stroke-width:1;" width="62.906" x="601.8538" y="888.5463"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="45.526" x="607.8538" y="906.4433">Import</text><g class="message" data-entity-1="part1" data-entity-2="part3" id="msg17"><polygon fill="#9275B6" points="223.9609,943.9583,233.9609,947.9583,223.9609,951.9583,227.9609,947.9583" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="43.3929" x2="229.9609" y1="947.9583" y2="947.9583"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="143.0521" x="50.3929" y="942.1493">Import signed Alice key</text></g><g class="message" data-entity-1="part3" data-entity-2="part5" id="msg18"><polygon fill="#9275B6" points="456.6223,975.6643,466.6223,979.6643,456.6223,983.6643,460.6223,979.6643" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="235.9609" x2="462.6223" y1="979.6643" y2="979.6643"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="93.8471" x="242.9609" y="973.8553">Update keyring</text></g><g class="message" data-entity-1="part2" data-entity-2="part4" id="msg19"><polygon fill="#9275B6" points="346.2416,1007.3703,356.2416,1011.3703,346.2416,1015.3703,350.2416,1011.3703" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="87.8758" x2="352.2416" y1="1011.3703" y2="1011.3703"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="138.7751" x="94.8758" y="1005.5613">Import signed Bob key</text></g><g class="message" data-entity-1="part4" data-entity-2="part6" id="msg20"><polygon fill="#9275B6" points="555.103,1039.0764,565.103,1043.0764,555.103,1047.0764,559.103,1043.0764" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="358.2416" x2="561.103" y1="1043.0764" y2="1043.0764"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="93.8471" x="365.2416" y="1037.2673">Update keyring</text></g><rect fill="#D9D3D0" height="3" style="stroke:#D9D3D0;stroke-width:1;" width="1256.6136" x="5" y="1072.9294"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="1072.9294" y2="1072.9294"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="1075.9294" y2="1075.9294"/><rect fill="#D9D3D0" height="25.706" style="stroke:#9275B6;stroke-width:1;" width="122.0691" x="572.2723" y="1061.0764"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="104.6891" x="578.2723" y="1078.9734">Set Owner Trust</text><g class="message" data-entity-1="part1" data-entity-2="part3" id="msg21"><polygon fill="#9275B6" points="223.9609,1116.4884,233.9609,1120.4884,223.9609,1124.4884,227.9609,1120.4884" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="43.3929" x2="229.9609" y1="1120.4884" y2="1120.4884"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="142.5321" x="50.3929" y="1114.6794">Set owner trust for Bob</text></g><g class="message" data-entity-1="part3" data-entity-2="part7" id="msg22"><polygon fill="#9275B6" points="669.3476,1148.1944,679.3476,1152.1944,669.3476,1156.1944,673.3476,1152.1944" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="235.9609" x2="675.3476" y1="1152.1944" y2="1152.1944"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="96.1481" x="242.9609" y="1146.3854">Store trust level</text></g><g class="message" data-entity-1="part2" data-entity-2="part4" id="msg23"><polygon fill="#9275B6" points="346.2416,1179.9004,356.2416,1183.9004,346.2416,1187.9004,350.2416,1183.9004" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="87.8758" x2="352.2416" y1="1183.9004" y2="1183.9004"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="146.8091" x="94.8758" y="1178.0914">Set owner trust for Alice</text></g><g class="message" data-entity-1="part4" data-entity-2="part8" id="msg24"><polygon fill="#9275B6" points="799.3561,1211.6064,809.3561,1215.6064,799.3561,1219.6064,803.3561,1215.6064" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="358.2416" x2="805.3561" y1="1215.6064" y2="1215.6064"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="96.1481" x="365.2416" y="1209.7974">Store trust level</text></g><path d="M15,1237.6064 L281.0912,1237.6064 L281.0912,1247.3125 L271.0912,1257.3125 L15,1257.3125 L15,1237.6064" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><rect fill="none" height="354.4722" style="stroke:#9275B6;stroke-width:1;" width="865.2089" x="15" y="1237.6064"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="221.0912" x="30" y="1252.5034">Trust calculation voa Web of Trust</text><rect fill="#D9D3D0" height="3" style="stroke:#D9D3D0;stroke-width:1;" width="1256.6136" x="5" y="1279.1655"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="1279.1655" y2="1279.1655"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="1282.1655" y2="1282.1655"/><rect fill="#D9D3D0" height="25.706" style="stroke:#9275B6;stroke-width:1;" width="176.0841" x="545.2647" y="1267.3125"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="158.7041" x="551.2647" y="1285.2095">Web of Trust Calculation</text><g class="message" data-entity-1="part1" data-entity-2="part3" id="msg25"><polygon fill="#9275B6" points="223.9609,1322.7245,233.9609,1326.7245,223.9609,1330.7245,227.9609,1326.7245" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="43.3929" x2="229.9609" y1="1326.7245" y2="1326.7245"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="151.1121" x="50.3929" y="1320.9155">Check validity of Bob key</text></g><g class="message" data-entity-1="part3" data-entity-2="part5" id="msg26"><polygon fill="#9275B6" points="456.6223,1354.4305,466.6223,1358.4305,456.6223,1362.4305,460.6223,1358.4305" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="235.9609" x2="462.6223" y1="1358.4305" y2="1358.4305"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="98.6441" x="242.9609" y="1352.6215">Read signatures</text></g><g class="message" data-entity-1="part3" data-entity-2="part7" id="msg27"><polygon fill="#9275B6" points="669.3476,1386.1365,679.3476,1390.1365,669.3476,1394.1365,673.3476,1390.1365" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="235.9609" x2="675.3476" y1="1390.1365" y2="1390.1365"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="147.5241" x="242.9609" y="1384.3275">Read owner trust values</text></g><g class="message" data-entity-1="part3" data-entity-2="part1" id="msg28"><polygon fill="#9275B6" points="54.3929,1435.5486,44.3929,1439.5486,54.3929,1443.5486,50.3929,1439.5486" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="48.3929" x2="234.9609" y1="1439.5486" y2="1439.5486"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="85.0201" x="60.3929" y="1416.0335">Validity status</text><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="148.6941" x="60.3929" y="1433.7395">(unknown/marginal/full)</text></g><g class="message" data-entity-1="part2" data-entity-2="part4" id="msg29"><polygon fill="#9275B6" points="346.2416,1467.2546,356.2416,1471.2546,346.2416,1475.2546,350.2416,1471.2546" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="87.8758" x2="352.2416" y1="1471.2546" y2="1471.2546"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="155.3891" x="94.8758" y="1465.4456">Check validity of Alice key</text></g><g class="message" data-entity-1="part4" data-entity-2="part6" id="msg30"><polygon fill="#9275B6" points="555.103,1498.9606,565.103,1502.9606,555.103,1506.9606,559.103,1502.9606" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="358.2416" x2="561.103" y1="1502.9606" y2="1502.9606"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="98.6441" x="365.2416" y="1497.1516">Read signatures</text></g><g class="message" data-entity-1="part4" data-entity-2="part8" id="msg31"><polygon fill="#9275B6" points="799.3561,1530.6666,809.3561,1534.6666,799.3561,1538.6666,803.3561,1534.6666" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="358.2416" x2="805.3561" y1="1534.6666" y2="1534.6666"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="147.5241" x="365.2416" y="1528.8576">Read owner trust values</text></g><g class="message" data-entity-1="part4" data-entity-2="part2" id="msg32"><polygon fill="#9275B6" points="98.8758,1580.0786,88.8758,1584.0786,98.8758,1588.0786,94.8758,1584.0786" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="92.8758" x2="357.2416" y1="1584.0786" y2="1584.0786"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="85.0201" x="104.8758" y="1560.5636">Validity status</text><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="148.6941" x="104.8758" y="1578.2696">(unknown/marginal/full)</text></g><text fill="#9275B6" font-family="Verdana" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="241.527" x="1014.0865" y="24.9659">Sequence of Key Signing with n==2</text><text fill="#9275B6" font-family="Verdana" font-size="10" lengthAdjust="spacing" textLength="161.6599" x="1093.9536" y="39.7579">Compiled: 2026-02-22 15:43 +0100</text><rect fill="none" height="105.3396" rx="7.5" ry="7.5" style="stroke:#9275B6;stroke-width:1;" width="560.4079" x="352.6028" y="1694.1466"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="225.8051" x="357.6028" y="1714.1125">Keysigning between Alice and Bob</text><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="3.752" x="357.6028" y="1733.1804">.</text><text fill="#9275B6" font-family="monospace" font-size="14" lengthAdjust="spacing" textLength="248.933" x="364.9948" y="1733.1804">gpg --recv-keys 0x11F4C41EB3FBAE33</text><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="3.752" x="357.6028" y="1752.2483">.</text><text fill="#9275B6" font-family="monospace" font-size="14" lengthAdjust="spacing" textLength="239.889" x="364.9948" y="1752.2483">gpg --edit-key 0x11F4C41EB3FBAE33</text><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="3.752" x="357.6028" y="1771.3162">.</text><text fill="#9275B6" font-family="monospace" font-size="14" lengthAdjust="spacing" textLength="32.6339" x="364.9948" y="1771.3162">tsign</text><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="3.752" x="357.6028" y="1790.3842">.</text><text fill="#9275B6" font-family="monospace" font-size="14" lengthAdjust="spacing" textLength="25.8299" x="364.9948" y="1790.3842">gpg</text><text fill="#9275B6" font-family="monospace" font-size="14" lengthAdjust="spacing" text-decoration="line-through" textLength="40.9779" x="394.4647" y="1790.3842">armor</text><text fill="#9275B6" font-family="monospace" font-size="14" lengthAdjust="spacing" textLength="465.2882" x="439.0826" y="1790.3842">export-options export-minimal --export 0xB3FBAE33 > 0xB3FBAE33.asc</text><?plantuml-src bLLTRziw37sUVWKNuABjWzTrtLEm5AZRD1Y2Oi6QVM3OYs8pZX1RyhNbjFdt8oqxaUrswFmKYUJXuI6fdC1Rky4C8JFQY9Fs51KsaDaAY-vLKY3guvNCL2AFnmojJ468zgWoD4aXyuqG0eHLDaLumFyhr172hP9aoo20-yfM53V7FJoeH2kTmAEo6_ZogB60PL6L5au_hOssOoPPvZB2ArkIwwTplhqw4oB517Ki2ADi85Pe7uaiNAUAiaaTGsXMuXtqWP8yWI0eCDe5Mug6zqyN5tSVRpvUJCFBk_1wUddPP7an5cDbEVQVGdt-BoBB8ZC5PtZA3QblSgkCBg4vPaghZ8HhxPI_pGjNtk6TB2DeKv5Aq8WbDYXZwl3as1Ip7hP1JoOVGDoOB5SfncFuBvOMJqTx-eBx-o2EORiTPndy6fqnUWDAdumiiQ_rRtvp1-ZBPM5Lf7AfBOnSVsQwMin684kuddNj5EDPmvcWz78bIsn3YN11P5tmt3Dpf6yCvuDORyHS_B8NttS8byGVDStoliLOoB9a-KTG8to-FTWPe6iDoIfEQ6DEXX_C7nPa4qbXghpJXWNfiHUJ2No-XUzOgBMA94y2x9Gy9839H0Z7w4rmnPbWxBpth7jvS1JQM8H29HixXfrp86VU44eQt556B79IpGekWC6kVR1krQz76p-AUlhg-iHVP9Z-xCWmVOesab1O05QbFNi5CyKPCPowFLXKAt8KTCM6EHc-qb0srpJYRYITcKiSqmBeWRskdZs6oA4B7IBpW3kZ8zP7hXU0wcWxooNuQVY-2QK7vRS-LN4pJBMq2kCpF_a3BHK2loJILlJBUC4z7lTIfRKdnfvFJxywFVDvCRcdwJF9cz2Ej7xYrbxFSjQRsfP4OnXmzL9_o_aDubjUxgw4tV0seoTQFvZRWRRpRpCanHwczh2rnzgzPj2oMXu4SVOKTvZsUliCX4lIidiUv3KxyyCiZplZQeXa6bLfyquO2JzmnS-xCtBHdOiRptjO_Sq6eotiPAfY7WStoFscr9jm68VILwOs-RKJL7LqQKRqUujVMe8eQG0hlTKKTfx98b5QfkVhAatFkh8EkVLN87oEdIVvI-n2RufVp-tGhZy0?></g></svg>
\ No newline at end of file +<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="SEQUENCE" height="1812px" preserveAspectRatio="none" style="width:1268px;height:1812px;background:#D9D3D0;" version="1.1" viewBox="0 0 1268 1812" width="1268px" zoomAndPan="magnify"><title>Sequence Diagram - Mutual Key Signing with Owner Trust (<font:monospace>tsign</font>)</title><defs/><g><rect fill="#D9D3D0" height="1812" style="stroke:none;stroke-width:1;" width="1268" x="0" y="0"/><text fill="#9275B6" font-family="Verdana" font-size="22" font-weight="bold" lengthAdjust="spacing" textLength="646.3842" x="278.1986" y="82.206">Sequence Diagram - Mutual Key Signing with Owner Trust (</text><text fill="#9275B6" font-family="monospace" font-size="22" font-weight="bold" lengthAdjust="spacing" textLength="55.3742" x="924.5828" y="82.206">tsign</text><text fill="#9275B6" font-family="Verdana" font-size="22" font-weight="bold" lengthAdjust="spacing" textLength="7.458" x="979.957" y="82.206">)</text><rect fill="#D9D3D0" height="140.8241" style="stroke:#9275B6;stroke-width:1;" width="1236.6136" x="15" y="196.7199"/><rect fill="#D9D3D0" height="872.0624" style="stroke:#9275B6;stroke-width:1;" width="865.2089" x="15" y="351.544"/><rect fill="#D9D3D0" height="354.4722" style="stroke:#9275B6;stroke-width:1;" width="865.2089" x="15" y="1237.6064"/><g class="participant-lifeline" data-entity-uid="part1" data-qualified-name="Alice" id="part1-lifeline"><g><title>Alice</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="39.3929" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="43" x2="43" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part2" data-qualified-name="Bob" id="part2-lifeline"><g><title>Bob</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="83.8758" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="87.7859" x2="87.7859" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part3" data-qualified-name="AG" id="part3-lifeline"><g><title>Alice GnuPG</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="231.9609" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="235.6691" x2="235.6691" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part4" data-qualified-name="BG" id="part4-lifeline"><g><title>Bob GnuPG</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="354.2416" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="357.2528" x2="357.2528" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part5" data-qualified-name="AK" id="part5-lifeline"><g><title>Alice Keyring</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="464.6223" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="468.2305" x2="468.2305" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part6" data-qualified-name="BK" id="part6-lifeline"><g><title>Bob Keyring</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="563.103" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="567.0141" x2="567.0141" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part7" data-qualified-name="AT" id="part7-lifeline"><g><title>Alice Owner Trust</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="677.3476" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="681.1918" x2="681.1918" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part8" data-qualified-name="BT" id="part8-lifeline"><g><title>Bob Owner Trust</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="807.3561" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="810.5033" x2="810.5033" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part9" data-qualified-name="AID" id="part9-lifeline"><g><title>Alice Passport</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="925.2477" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="929.2089" x2="929.2089" y1="179.7199" y2="1609.0786"/></g></g><g class="participant-lifeline" data-entity-uid="part10" data-qualified-name="BID" id="part10-lifeline"><g><title>Bob Passport</title><rect fill="#000000" fill-opacity="0.00000" height="1429.3587" width="8" x="1031.0224" y="179.7199"/><line style="stroke:#9275B6;stroke-width:1;stroke-dasharray:5,5;" x1="1034.2866" x2="1034.2866" y1="179.7199" y2="1609.0786"/></g></g><g class="participant participant-head" data-entity-uid="part1" data-qualified-name="Alice" id="part1-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="30.7859" x="25" y="175.6179">Alice</text><ellipse cx="43.3929" cy="108.652" fill="#D9D3D0" rx="8" ry="8" style="stroke:#9275B6;stroke-width:1;"/><path d="M43.3929,116.652 L43.3929,143.652 M30.3929,124.652 L56.3929,124.652 M43.3929,143.652 L30.3929,158.652 M43.3929,143.652 L56.3929,158.652" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-tail" data-entity-uid="part1" data-qualified-name="Alice" id="part1-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="30.7859" x="25" y="1623.0446">Alice</text><ellipse cx="43.3929" cy="1636.1466" fill="#D9D3D0" rx="8" ry="8" style="stroke:#9275B6;stroke-width:1;"/><path d="M43.3929,1644.1466 L43.3929,1671.1466 M30.3929,1652.1466 L56.3929,1652.1466 M43.3929,1671.1466 L30.3929,1686.1466 M43.3929,1671.1466 L56.3929,1686.1466" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-head" data-entity-uid="part2" data-qualified-name="Bob" id="part2-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="26.1799" x="71.7859" y="175.6179">Bob</text><ellipse cx="87.8758" cy="108.652" fill="#D9D3D0" rx="8" ry="8" style="stroke:#9275B6;stroke-width:1;"/><path d="M87.8758,116.652 L87.8758,143.652 M74.8758,124.652 L100.8758,124.652 M87.8758,143.652 L74.8758,158.652 M87.8758,143.652 L100.8758,158.652" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-tail" data-entity-uid="part2" data-qualified-name="Bob" id="part2-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="26.1799" x="71.7859" y="1623.0446">Bob</text><ellipse cx="87.8758" cy="1636.1466" fill="#D9D3D0" rx="8" ry="8" style="stroke:#9275B6;stroke-width:1;"/><path d="M87.8758,1644.1466 L87.8758,1671.1466 M74.8758,1652.1466 L100.8758,1652.1466 M87.8758,1671.1466 L74.8758,1686.1466 M87.8758,1671.1466 L100.8758,1686.1466" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-head" data-entity-uid="part3" data-qualified-name="AG" id="part3-head"><rect fill="#D9D3D0" height="33.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="94.5837" x="188.6691" y="145.652"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="80.5837" x="195.6691" y="167.6179">Alice GnuPG</text></g><g class="participant participant-tail" data-entity-uid="part3" data-qualified-name="AG" id="part3-tail"><rect fill="#D9D3D0" height="33.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="94.5837" x="188.6691" y="1608.0786"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="80.5837" x="195.6691" y="1630.0446">Alice GnuPG</text></g><g class="participant participant-head" data-entity-uid="part4" data-qualified-name="BG" id="part4-head"><rect fill="#D9D3D0" height="33.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="89.9777" x="313.2528" y="145.652"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="75.9777" x="320.2528" y="167.6179">Bob GnuPG</text></g><g class="participant participant-tail" data-entity-uid="part4" data-qualified-name="BG" id="part4-tail"><rect fill="#D9D3D0" height="33.0679" rx="2.5" ry="2.5" style="stroke:#9275B6;stroke-width:1;" width="89.9777" x="313.2528" y="1608.0786"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="75.9777" x="320.2528" y="1630.0446">Bob GnuPG</text></g><g class="participant participant-head" data-entity-uid="part5" data-qualified-name="AK" id="part5-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="84.7837" x="423.2305" y="175.6179">Alice Keyring</text><path d="M450.6223,124.652 C450.6223,114.652 468.6223,114.652 468.6223,114.652 C468.6223,114.652 486.6223,114.652 486.6223,124.652 L486.6223,150.652 C486.6223,160.652 468.6223,160.652 468.6223,160.652 C468.6223,160.652 450.6223,160.652 450.6223,150.652 L450.6223,124.652" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M450.6223,124.652 C450.6223,134.652 468.6223,134.652 468.6223,134.652 C468.6223,134.652 486.6223,134.652 486.6223,124.652" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-tail" data-entity-uid="part5" data-qualified-name="AK" id="part5-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="84.7837" x="423.2305" y="1623.0446">Alice Keyring</text><path d="M450.6223,1637.1466 C450.6223,1627.1466 468.6223,1627.1466 468.6223,1627.1466 C468.6223,1627.1466 486.6223,1627.1466 486.6223,1637.1466 L486.6223,1663.1466 C486.6223,1673.1466 468.6223,1673.1466 468.6223,1673.1466 C468.6223,1673.1466 450.6223,1673.1466 450.6223,1663.1466 L450.6223,1637.1466" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M450.6223,1637.1466 C450.6223,1647.1466 468.6223,1647.1466 468.6223,1647.1466 C468.6223,1647.1466 486.6223,1647.1466 486.6223,1637.1466" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-head" data-entity-uid="part6" data-qualified-name="BK" id="part6-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="80.1777" x="524.0141" y="175.6179">Bob Keyring</text><path d="M549.103,124.652 C549.103,114.652 567.103,114.652 567.103,114.652 C567.103,114.652 585.103,114.652 585.103,124.652 L585.103,150.652 C585.103,160.652 567.103,160.652 567.103,160.652 C567.103,160.652 549.103,160.652 549.103,150.652 L549.103,124.652" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M549.103,124.652 C549.103,134.652 567.103,134.652 567.103,134.652 C567.103,134.652 585.103,134.652 585.103,124.652" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-tail" data-entity-uid="part6" data-qualified-name="BK" id="part6-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="80.1777" x="524.0141" y="1623.0446">Bob Keyring</text><path d="M549.103,1637.1466 C549.103,1627.1466 567.103,1627.1466 567.103,1627.1466 C567.103,1627.1466 585.103,1627.1466 585.103,1637.1466 L585.103,1663.1466 C585.103,1673.1466 567.103,1673.1466 567.103,1673.1466 C567.103,1673.1466 549.103,1673.1466 549.103,1663.1466 L549.103,1637.1466" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M549.103,1637.1466 C549.103,1647.1466 567.103,1647.1466 567.103,1647.1466 C567.103,1647.1466 585.103,1647.1466 585.103,1637.1466" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-head" data-entity-uid="part7" data-qualified-name="AT" id="part7-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="116.3115" x="620.1918" y="175.6179">Alice Owner Trust</text><path d="M663.3476,124.652 C663.3476,114.652 681.3476,114.652 681.3476,114.652 C681.3476,114.652 699.3476,114.652 699.3476,124.652 L699.3476,150.652 C699.3476,160.652 681.3476,160.652 681.3476,160.652 C681.3476,160.652 663.3476,160.652 663.3476,150.652 L663.3476,124.652" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M663.3476,124.652 C663.3476,134.652 681.3476,134.652 681.3476,134.652 C681.3476,134.652 699.3476,134.652 699.3476,124.652" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-tail" data-entity-uid="part7" data-qualified-name="AT" id="part7-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="116.3115" x="620.1918" y="1623.0446">Alice Owner Trust</text><path d="M663.3476,1637.1466 C663.3476,1627.1466 681.3476,1627.1466 681.3476,1627.1466 C681.3476,1627.1466 699.3476,1627.1466 699.3476,1637.1466 L699.3476,1663.1466 C699.3476,1673.1466 681.3476,1673.1466 681.3476,1673.1466 C681.3476,1673.1466 663.3476,1673.1466 663.3476,1663.1466 L663.3476,1637.1466" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M663.3476,1637.1466 C663.3476,1647.1466 681.3476,1647.1466 681.3476,1647.1466 C681.3476,1647.1466 699.3476,1647.1466 699.3476,1637.1466" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-head" data-entity-uid="part8" data-qualified-name="BT" id="part8-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="111.7056" x="752.5033" y="175.6179">Bob Owner Trust</text><path d="M793.3561,124.652 C793.3561,114.652 811.3561,114.652 811.3561,114.652 C811.3561,114.652 829.3561,114.652 829.3561,124.652 L829.3561,150.652 C829.3561,160.652 811.3561,160.652 811.3561,160.652 C811.3561,160.652 793.3561,160.652 793.3561,150.652 L793.3561,124.652" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M793.3561,124.652 C793.3561,134.652 811.3561,134.652 811.3561,134.652 C811.3561,134.652 829.3561,134.652 829.3561,124.652" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-tail" data-entity-uid="part8" data-qualified-name="BT" id="part8-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="111.7056" x="752.5033" y="1623.0446">Bob Owner Trust</text><path d="M793.3561,1637.1466 C793.3561,1627.1466 811.3561,1627.1466 811.3561,1627.1466 C811.3561,1627.1466 829.3561,1627.1466 829.3561,1637.1466 L829.3561,1663.1466 C829.3561,1673.1466 811.3561,1673.1466 811.3561,1673.1466 C811.3561,1673.1466 793.3561,1673.1466 793.3561,1663.1466 L793.3561,1637.1466" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M793.3561,1637.1466 C793.3561,1647.1466 811.3561,1647.1466 811.3561,1647.1466 C811.3561,1647.1466 829.3561,1647.1466 829.3561,1637.1466" fill="none" style="stroke:#9275B6;stroke-width:1;"/></g><g class="participant participant-head" data-entity-uid="part9" data-qualified-name="AID" id="part9-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="92.0777" x="880.2089" y="175.6179">Alice Passport</text><ellipse cx="929.2477" cy="144.652" fill="#D9D3D0" rx="12" ry="12" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="917.2477" x2="941.2477" y1="158.652" y2="158.652"/></g><g class="participant participant-tail" data-entity-uid="part9" data-qualified-name="AID" id="part9-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="92.0777" x="880.2089" y="1623.0446">Alice Passport</text><ellipse cx="929.2477" cy="1643.1466" fill="#D9D3D0" rx="12" ry="12" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="917.2477" x2="941.2477" y1="1657.1466" y2="1657.1466"/></g><g class="participant participant-head" data-entity-uid="part10" data-qualified-name="BID" id="part10-head"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="87.4717" x="988.2866" y="175.6179">Bob Passport</text><ellipse cx="1035.0224" cy="144.652" fill="#D9D3D0" rx="12" ry="12" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="1023.0224" x2="1047.0224" y1="158.652" y2="158.652"/></g><g class="participant participant-tail" data-entity-uid="part10" data-qualified-name="BID" id="part10-tail"><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="87.4717" x="988.2866" y="1623.0446">Bob Passport</text><ellipse cx="1035.0224" cy="1643.1466" fill="#D9D3D0" rx="12" ry="12" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="1023.0224" x2="1047.0224" y1="1657.1466" y2="1657.1466"/></g><path d="M15,196.7199 L173.5811,196.7199 L173.5811,206.4259 L163.5811,216.4259 L15,216.4259 L15,196.7199" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><rect fill="none" height="140.8241" style="stroke:#9275B6;stroke-width:1;" width="1236.6136" x="15" y="196.7199"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="113.5811" x="30" y="211.6169">Key Signing Party</text><rect fill="#D9D3D0" height="3" style="stroke:#D9D3D0;stroke-width:1;" width="1256.6136" x="5" y="238.2789"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="238.2789" y2="238.2789"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="241.2789" y2="241.2789"/><rect fill="#D9D3D0" height="25.706" style="stroke:#9275B6;stroke-width:1;" width="193.3221" x="536.6457" y="226.4259"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="175.9421" x="542.6457" y="244.323">ID Verification via Passport</text><g class="message" data-entity-1="part1" data-entity-2="part10" id="msg1"><polygon fill="#9275B6" points="1023.0224,284.838,1033.0224,288.838,1023.0224,292.838,1027.0224,288.838" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="43.3929" x2="1029.0224" y1="288.838" y2="288.838"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="125.7881" x="50.3929" y="283.029">Verify Bobs Passport</text></g><path d="M1040,267.132 L1040,294.132 L1236,294.132 L1236,277.132 L1226,267.132 L1040,267.132" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M1226,267.132 L1226,277.132 L1236,277.132 L1226,267.132" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="175.5912" x="1046" y="286.029">verify ID and Key-Fingerprint</text><g class="message" data-entity-1="part2" data-entity-2="part9" id="msg3"><polygon fill="#9275B6" points="917.2477,322.544,927.2477,326.544,917.2477,330.544,921.2477,326.544" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="87.8758" x2="923.2477" y1="326.544" y2="326.544"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="123.8381" x="94.8758" y="320.735">Verify Alice Passport</text></g><path d="M934,304.838 L934,331.838 L1144,331.838 L1144,314.838 L1134,304.838 L934,304.838" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><path d="M1134,304.838 L1134,314.838 L1144,314.838 L1134,304.838" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="189.2932" x="940" y="323.735">verify ID and Key-Fingerprint:w</text><path d="M15,351.544 L145.9821,351.544 L145.9821,361.25 L135.9821,371.25 L15,371.25 L15,351.544" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><rect fill="none" height="872.0624" style="stroke:#9275B6;stroke-width:1;" width="865.2089" x="15" y="351.544"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="85.9821" x="30" y="366.441">KeyExchange</text><rect fill="#D9D3D0" height="3" style="stroke:#D9D3D0;stroke-width:1;" width="1256.6136" x="5" y="393.103"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="393.103" y2="393.103"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="396.103" y2="396.103"/><rect fill="#D9D3D0" height="25.706" style="stroke:#9275B6;stroke-width:1;" width="106.7421" x="579.9358" y="381.25"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="89.3621" x="585.9358" y="399.147">Key Exchange</text><g class="message" data-entity-1="part1" data-entity-2="part3" id="msg5"><polygon fill="#9275B6" points="223.9609,436.662,233.9609,440.662,223.9609,444.662,227.9609,440.662" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="43.3929" x2="229.9609" y1="440.662" y2="440.662"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="89.3101" x="50.3929" y="434.853">Export PubKey</text></g><g class="message" data-entity-1="part3" data-entity-2="part5" id="msg6"><polygon fill="#9275B6" points="456.6223,468.3681,466.6223,472.3681,456.6223,476.3681,460.6223,472.3681" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="235.9609" x2="462.6223" y1="472.3681" y2="472.3681"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="124.2931" x="242.9609" y="466.5591">Read PubKeyof Alice</text></g><g class="message" data-entity-1="part3" data-entity-2="part2" id="msg7"><polygon fill="#9275B6" points="98.8758,500.0741,88.8758,504.0741,98.8758,508.0741,94.8758,504.0741" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="92.8758" x2="234.9609" y1="504.0741" y2="504.0741"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="124.0851" x="104.8758" y="498.2651">Send PubKeyof Alice</text></g><g class="message" data-entity-1="part2" data-entity-2="part4" id="msg8"><polygon fill="#9275B6" points="346.2416,531.7801,356.2416,535.7801,346.2416,539.7801,350.2416,535.7801" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="87.8758" x2="352.2416" y1="535.7801" y2="535.7801"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="89.3101" x="94.8758" y="529.9711">Export PubKey</text></g><g class="message" data-entity-1="part4" data-entity-2="part6" id="msg9"><polygon fill="#9275B6" points="555.103,563.4861,565.103,567.4861,555.103,571.4861,559.103,567.4861" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="358.2416" x2="561.103" y1="567.4861" y2="567.4861"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="120.0161" x="365.2416" y="561.6771">Read PubKeyof Bob</text></g><g class="message" data-entity-1="part4" data-entity-2="part1" id="msg10"><polygon fill="#9275B6" points="54.3929,595.1921,44.3929,599.1921,54.3929,603.1921,50.3929,599.1921" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="48.3929" x2="357.2416" y1="599.1921" y2="599.1921"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="119.8081" x="60.3929" y="593.3831">Send PubKeyof Bob</text></g><rect fill="#D9D3D0" height="3" style="stroke:#D9D3D0;stroke-width:1;" width="1256.6136" x="5" y="629.0451"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="629.0451" y2="629.0451"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="632.0451" y2="632.0451"/><rect fill="#D9D3D0" height="25.706" style="stroke:#9275B6;stroke-width:1;" width="65.6491" x="600.4823" y="617.1921"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="48.2691" x="606.4823" y="635.0891">Signing</text><g class="message" data-entity-1="part2" data-entity-2="part4" id="msg11"><polygon fill="#9275B6" points="346.2416,690.3102,356.2416,694.3102,346.2416,698.3102,350.2416,694.3102" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="87.8758" x2="352.2416" y1="694.3102" y2="694.3102"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="82.7711" x="94.8758" y="670.7952">Sign Alice key</text><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="103.0771" x="94.8758" y="688.5012">(identity verified)</text></g><g class="message" data-entity-1="part4" data-entity-2="part6" id="msg12"><polygon fill="#9275B6" points="555.103,722.0162,565.103,726.0162,555.103,730.0162,559.103,726.0162" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="358.2416" x2="561.103" y1="726.0162" y2="726.0162"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="169.6371" x="365.2416" y="720.2072">Store signature on Alice key</text></g><g class="message" data-entity-1="part4" data-entity-2="part1" id="msg13"><polygon fill="#9275B6" points="54.3929,753.7222,44.3929,757.7222,54.3929,761.7222,50.3929,757.7222" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="48.3929" x2="357.2416" y1="757.7222" y2="757.7222"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="126.3601" x="60.3929" y="751.9132">Mail signed Alice key</text></g><g class="message" data-entity-1="part1" data-entity-2="part3" id="msg14"><polygon fill="#9275B6" points="223.9609,803.1342,233.9609,807.1342,223.9609,811.1342,227.9609,807.1342" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="43.3929" x2="229.9609" y1="807.1342" y2="807.1342"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="78.4941" x="50.3929" y="783.6192">Sign Bob key</text><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="103.0771" x="50.3929" y="801.3252">(identity verified)</text></g><g class="message" data-entity-1="part3" data-entity-2="part5" id="msg15"><polygon fill="#9275B6" points="456.6223,834.8403,466.6223,838.8403,456.6223,842.8403,460.6223,838.8403" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="235.9609" x2="462.6223" y1="838.8403" y2="838.8403"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="165.3602" x="242.9609" y="833.0313">Store signature on Bob key</text></g><g class="message" data-entity-1="part3" data-entity-2="part2" id="msg16"><polygon fill="#9275B6" points="98.8758,866.5463,88.8758,870.5463,98.8758,874.5463,94.8758,870.5463" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="92.8758" x2="234.9609" y1="870.5463" y2="870.5463"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="122.0831" x="104.8758" y="864.7373">Mail signed Bob key</text></g><rect fill="#D9D3D0" height="3" style="stroke:#D9D3D0;stroke-width:1;" width="1256.6136" x="5" y="900.3993"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="900.3993" y2="900.3993"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="903.3993" y2="903.3993"/><rect fill="#D9D3D0" height="25.706" style="stroke:#9275B6;stroke-width:1;" width="62.906" x="601.8538" y="888.5463"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="45.526" x="607.8538" y="906.4433">Import</text><g class="message" data-entity-1="part1" data-entity-2="part3" id="msg17"><polygon fill="#9275B6" points="223.9609,943.9583,233.9609,947.9583,223.9609,951.9583,227.9609,947.9583" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="43.3929" x2="229.9609" y1="947.9583" y2="947.9583"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="143.0521" x="50.3929" y="942.1493">Import signed Alice key</text></g><g class="message" data-entity-1="part3" data-entity-2="part5" id="msg18"><polygon fill="#9275B6" points="456.6223,975.6643,466.6223,979.6643,456.6223,983.6643,460.6223,979.6643" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="235.9609" x2="462.6223" y1="979.6643" y2="979.6643"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="93.8471" x="242.9609" y="973.8553">Update keyring</text></g><g class="message" data-entity-1="part2" data-entity-2="part4" id="msg19"><polygon fill="#9275B6" points="346.2416,1007.3703,356.2416,1011.3703,346.2416,1015.3703,350.2416,1011.3703" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="87.8758" x2="352.2416" y1="1011.3703" y2="1011.3703"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="138.7751" x="94.8758" y="1005.5613">Import signed Bob key</text></g><g class="message" data-entity-1="part4" data-entity-2="part6" id="msg20"><polygon fill="#9275B6" points="555.103,1039.0764,565.103,1043.0764,555.103,1047.0764,559.103,1043.0764" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="358.2416" x2="561.103" y1="1043.0764" y2="1043.0764"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="93.8471" x="365.2416" y="1037.2673">Update keyring</text></g><rect fill="#D9D3D0" height="3" style="stroke:#D9D3D0;stroke-width:1;" width="1256.6136" x="5" y="1072.9294"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="1072.9294" y2="1072.9294"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="1075.9294" y2="1075.9294"/><rect fill="#D9D3D0" height="25.706" style="stroke:#9275B6;stroke-width:1;" width="122.0691" x="572.2723" y="1061.0764"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="104.6891" x="578.2723" y="1078.9734">Set Owner Trust</text><g class="message" data-entity-1="part1" data-entity-2="part3" id="msg21"><polygon fill="#9275B6" points="223.9609,1116.4884,233.9609,1120.4884,223.9609,1124.4884,227.9609,1120.4884" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="43.3929" x2="229.9609" y1="1120.4884" y2="1120.4884"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="142.5321" x="50.3929" y="1114.6794">Set owner trust for Bob</text></g><g class="message" data-entity-1="part3" data-entity-2="part7" id="msg22"><polygon fill="#9275B6" points="669.3476,1148.1944,679.3476,1152.1944,669.3476,1156.1944,673.3476,1152.1944" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="235.9609" x2="675.3476" y1="1152.1944" y2="1152.1944"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="96.1481" x="242.9609" y="1146.3854">Store trust level</text></g><g class="message" data-entity-1="part2" data-entity-2="part4" id="msg23"><polygon fill="#9275B6" points="346.2416,1179.9004,356.2416,1183.9004,346.2416,1187.9004,350.2416,1183.9004" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="87.8758" x2="352.2416" y1="1183.9004" y2="1183.9004"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="146.8091" x="94.8758" y="1178.0914">Set owner trust for Alice</text></g><g class="message" data-entity-1="part4" data-entity-2="part8" id="msg24"><polygon fill="#9275B6" points="799.3561,1211.6064,809.3561,1215.6064,799.3561,1219.6064,803.3561,1215.6064" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="358.2416" x2="805.3561" y1="1215.6064" y2="1215.6064"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="96.1481" x="365.2416" y="1209.7974">Store trust level</text></g><path d="M15,1237.6064 L281.0912,1237.6064 L281.0912,1247.3125 L271.0912,1257.3125 L15,1257.3125 L15,1237.6064" fill="#D9D3D0" style="stroke:#9275B6;stroke-width:1;"/><rect fill="none" height="354.4722" style="stroke:#9275B6;stroke-width:1;" width="865.2089" x="15" y="1237.6064"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="221.0912" x="30" y="1252.5034">Trust calculation voa Web of Trust</text><rect fill="#D9D3D0" height="3" style="stroke:#D9D3D0;stroke-width:1;" width="1256.6136" x="5" y="1279.1655"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="1279.1655" y2="1279.1655"/><line style="stroke:#9275B6;stroke-width:0.5;" x1="5" x2="1261.6136" y1="1282.1655" y2="1282.1655"/><rect fill="#D9D3D0" height="25.706" style="stroke:#9275B6;stroke-width:1;" width="176.0841" x="545.2647" y="1267.3125"/><text fill="#9275B6" font-family="Verdana" font-size="13" font-weight="bold" lengthAdjust="spacing" textLength="158.7041" x="551.2647" y="1285.2095">Web of Trust Calculation</text><g class="message" data-entity-1="part1" data-entity-2="part3" id="msg25"><polygon fill="#9275B6" points="223.9609,1322.7245,233.9609,1326.7245,223.9609,1330.7245,227.9609,1326.7245" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="43.3929" x2="229.9609" y1="1326.7245" y2="1326.7245"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="151.1121" x="50.3929" y="1320.9155">Check validity of Bob key</text></g><g class="message" data-entity-1="part3" data-entity-2="part5" id="msg26"><polygon fill="#9275B6" points="456.6223,1354.4305,466.6223,1358.4305,456.6223,1362.4305,460.6223,1358.4305" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="235.9609" x2="462.6223" y1="1358.4305" y2="1358.4305"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="98.6441" x="242.9609" y="1352.6215">Read signatures</text></g><g class="message" data-entity-1="part3" data-entity-2="part7" id="msg27"><polygon fill="#9275B6" points="669.3476,1386.1365,679.3476,1390.1365,669.3476,1394.1365,673.3476,1390.1365" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="235.9609" x2="675.3476" y1="1390.1365" y2="1390.1365"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="147.5241" x="242.9609" y="1384.3275">Read owner trust values</text></g><g class="message" data-entity-1="part3" data-entity-2="part1" id="msg28"><polygon fill="#9275B6" points="54.3929,1435.5486,44.3929,1439.5486,54.3929,1443.5486,50.3929,1439.5486" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="48.3929" x2="234.9609" y1="1439.5486" y2="1439.5486"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="85.0201" x="60.3929" y="1416.0335">Validity status</text><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="148.6941" x="60.3929" y="1433.7395">(unknown/marginal/full)</text></g><g class="message" data-entity-1="part2" data-entity-2="part4" id="msg29"><polygon fill="#9275B6" points="346.2416,1467.2546,356.2416,1471.2546,346.2416,1475.2546,350.2416,1471.2546" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="87.8758" x2="352.2416" y1="1471.2546" y2="1471.2546"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="155.3891" x="94.8758" y="1465.4456">Check validity of Alice key</text></g><g class="message" data-entity-1="part4" data-entity-2="part6" id="msg30"><polygon fill="#9275B6" points="555.103,1498.9606,565.103,1502.9606,555.103,1506.9606,559.103,1502.9606" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="358.2416" x2="561.103" y1="1502.9606" y2="1502.9606"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="98.6441" x="365.2416" y="1497.1516">Read signatures</text></g><g class="message" data-entity-1="part4" data-entity-2="part8" id="msg31"><polygon fill="#9275B6" points="799.3561,1530.6666,809.3561,1534.6666,799.3561,1538.6666,803.3561,1534.6666" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="358.2416" x2="805.3561" y1="1534.6666" y2="1534.6666"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="147.5241" x="365.2416" y="1528.8576">Read owner trust values</text></g><g class="message" data-entity-1="part4" data-entity-2="part2" id="msg32"><polygon fill="#9275B6" points="98.8758,1580.0786,88.8758,1584.0786,98.8758,1588.0786,94.8758,1584.0786" style="stroke:#9275B6;stroke-width:1;"/><line style="stroke:#9275B6;stroke-width:1;" x1="92.8758" x2="357.2416" y1="1584.0786" y2="1584.0786"/><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="85.0201" x="104.8758" y="1560.5636">Validity status</text><text fill="#9275B6" font-family="Verdana" font-size="13" lengthAdjust="spacing" textLength="148.6941" x="104.8758" y="1578.2696">(unknown/marginal/full)</text></g><text fill="#9275B6" font-family="Verdana" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="241.527" x="1014.0865" y="24.9659">Sequence of Key Signing with n==2</text><text fill="#9275B6" font-family="Verdana" font-size="10" lengthAdjust="spacing" textLength="161.6599" x="1093.9536" y="39.7579">Compiled: 2026-02-23 18:52 +0100</text><rect fill="none" height="105.3396" rx="7.5" ry="7.5" style="stroke:#9275B6;stroke-width:1;" width="560.4079" x="352.6028" y="1694.1466"/><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="225.8051" x="357.6028" y="1714.1125">Keysigning between Alice and Bob</text><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="3.752" x="357.6028" y="1733.1804">.</text><text fill="#9275B6" font-family="monospace" font-size="14" lengthAdjust="spacing" textLength="248.933" x="364.9948" y="1733.1804">gpg --recv-keys 0x11F4C41EB3FBAE33</text><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="3.752" x="357.6028" y="1752.2483">.</text><text fill="#9275B6" font-family="monospace" font-size="14" lengthAdjust="spacing" textLength="239.889" x="364.9948" y="1752.2483">gpg --edit-key 0x11F4C41EB3FBAE33</text><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="3.752" x="357.6028" y="1771.3162">.</text><text fill="#9275B6" font-family="monospace" font-size="14" lengthAdjust="spacing" textLength="32.6339" x="364.9948" y="1771.3162">tsign</text><text fill="#9275B6" font-family="Verdana" font-size="14" lengthAdjust="spacing" textLength="3.752" x="357.6028" y="1790.3842">.</text><text fill="#9275B6" font-family="monospace" font-size="14" lengthAdjust="spacing" textLength="25.8299" x="364.9948" y="1790.3842">gpg</text><text fill="#9275B6" font-family="monospace" font-size="14" lengthAdjust="spacing" text-decoration="line-through" textLength="40.9779" x="394.4647" y="1790.3842">armor</text><text fill="#9275B6" font-family="monospace" font-size="14" lengthAdjust="spacing" textLength="465.2882" x="439.0826" y="1790.3842">export-options export-minimal --export 0xB3FBAE33 > 0xB3FBAE33.asc</text><?plantuml-src bLLTRziw37sUVWKNuABjWzTrtLEm5AZRD1Y2Oi6QVM3OYs8pZX1RyhNbjFdt8oqxaUrswFmKYUJXuI6fdC1Rky4C8JFQY9Fs51KsaDaAY-vLKY3guvNCL2AFnmojJ468zgWoD4aXyuqG0eHLDaLumFyhr172hP9aoo20-yfM53V7FJoeH2kTmAEo6_ZogB60PL6L5au_hOssOoPPvZB2ArkIwwTplhqw4oB517Ki2ADi85Pe7uaiNAUAiaaTGsXMuXtqWP8yWI0eCDe5Mug6zqyN5tSVRpvUJCFBk_1wUddPP7an5cDbEVQVGdt-BoBB8ZC5PtZA3QblSgkCBg4vPaghZ8HhxPI_pGjNtk6TB2DeKv5Aq8WbDYXZwl3as1Ip7hP1JoOVGDoOB5SfncFuBvOMJqTx-eBx-o2EORiTPndy6fqnUWDAdumiiQ_rRtvp1-ZBPM5Lf7AfBOnSVsQwMin684kuddNj5EDPmvcWz78bIsn3YN11P5tmt3Dpf6yCvuDORyHS_B8NttS8byGVDStoliLOoB9a-KTG8to-FTWPe6iDoIfEQ6DEXX_C7nPa4qbXghpJXWNfiHUJ2No-XUzOgBMA94y2x9Gy9839H0Z7w4rmnPbWxBpth7jvS1JQM8H29HixXfrp86VU44eQt556B79IpGekWC6kVR1krQz76p-AUlhg-iHVP9Z-xCWmVOesab1O05QbFNi5CyKPCPowFLXKAt8KTCM6EHc-qb0srpJYRYITcKiSqmBeWRskdZs6oA4B7IBpW3kZ8zP7hXU0wcWxooNuQVY-2QK7vRS-LN4pJBMq2kCpF_a3BHK2loJILlJBUC4z7lTIfRKdnfvFJxywFVDvCRcdwJF9cz2Ej7xYrbxFSjQRsfP4OnXmzL9_o_aDubjUxgw4tV0seoTQFvZRWRRpRpCanHwczh2rnzgzPj2oMXu4SVOKTvZsUliCX4lIidiUv3KxyyCiZplZQeXa6bLfyquO2JzmnS-xCtBHdOiRptjO_Sq6eotiPAfY7WStoFscr9jm68VILwOs-RKJL7LqQKRqUujVMe8eQG0hlTKKTfx98b5QfkVhAatFkh8EkVLN87oEdIVvI-n2RufVp-tGhZy0?></g></svg>
\ No newline at end of file diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.png b/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.png Binary files differnew file mode 100644 index 0000000..c5a7dac --- /dev/null +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.png diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.puml b/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.puml new file mode 100644 index 0000000..737d8a6 --- /dev/null +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.puml @@ -0,0 +1,45 @@ +@startuml + ' keine farben!! +' !theme mimeograph + +skinparam shadowing false + +Title DFD: Multiple GnuPG Signatures for the NetBSD ISO image + +header += Combining Trust from the Web of Trust +Timestamp: %date("yyyy-MM-dd kk:mm Z") +endheader + + + +entity Alice +entity Bob +entity Charly + +database "NetBSD ISO Repository" as ISORepo +database "Public Signature Store" as SigStore + +circle "Download ISO" as P1 +circle "Compute SHA256 Hash" as P2 +circle "Sign ISO Hash\n(Private Key)" as P3 +circle "Publish Signature" as P4 + +Alice --> P1 +P1 --> ISORepo +ISORepo --> P2 +P2 --> P3 +P3 --> P4 +P4 --> SigStore + +Bob --> P1 +Bob --> P2 +Bob --> P3 +Bob --> P4 + +Charly --> P1 +Charly --> P2 +Charly --> P3 +Charly --> P4 + +@enduml diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.svg b/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.svg new file mode 100644 index 0000000..3571e5c --- /dev/null +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/101-Multiple-GnuPG-signatures-Trust.svg @@ -0,0 +1 @@ +<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="893px" preserveAspectRatio="none" style="width:575px;height:893px;background:#FFFFFF;" version="1.1" viewBox="0 0 575 893" width="575px" zoomAndPan="magnify"><title>DFD: Multiple GnuPG Signatures for the NetBSD ISO image</title><defs/><g><g class="header" data-source-line="8"><text fill="#888888" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="273.0969" x="287.9031" y="14.9659">Combining Trust from the Web of Trust</text><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="169.4799" x="391.5201" y="29.7579">Timestamp: 2026-02-23 18:52 +0100</text></g><g class="title" data-source-line="6"><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="409.9185" x="75.5408" y="58.6538">DFD: Multiple GnuPG Signatures for the NetBSD ISO image</text></g><!--entity Alice--><g class="entity" data-qualified-name="Alice" data-source-line="15" id="ent0002"><ellipse cx="287" cy="91.7558" fill="#F1F1F1" rx="12" ry="12" style="stroke:#181818;stroke-width:0.5;"/><line style="stroke:#181818;stroke-width:0.5;" x1="275" x2="299" y1="105.7558" y2="105.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="30.7859" x="271.6071" y="122.7218">Alice</text></g><!--entity Bob--><g class="entity" data-qualified-name="Bob" data-source-line="16" id="ent0003"><ellipse cx="461" cy="91.7558" fill="#F1F1F1" rx="12" ry="12" style="stroke:#181818;stroke-width:0.5;"/><line style="stroke:#181818;stroke-width:0.5;" x1="449" x2="473" y1="105.7558" y2="105.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="26.1799" x="447.91" y="122.7218">Bob</text></g><!--entity Charly--><g class="entity" data-qualified-name="Charly" data-source-line="17" id="ent0004"><ellipse cx="113.0039" cy="91.7558" fill="#F1F1F1" rx="12" ry="12" style="stroke:#181818;stroke-width:0.5;"/><line style="stroke:#181818;stroke-width:0.5;" x1="101.0039" x2="125.0039" y1="105.7558" y2="105.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="41.8878" x="92.06" y="122.7218">Charly</text></g><!--entity ISORepo--><g class="entity" data-qualified-name="ISORepo" data-source-line="19" id="ent0005"><path d="M201.16,320.8158 C201.16,310.8158 287.0047,310.8158 287.0047,310.8158 C287.0047,310.8158 372.8494,310.8158 372.8494,320.8158 L372.8494,348.8837 C372.8494,358.8837 287.0047,358.8837 287.0047,358.8837 C287.0047,358.8837 201.16,358.8837 201.16,348.8837 L201.16,320.8158" fill="#F1F1F1" style="stroke:#181818;stroke-width:0.5;"/><path d="M201.16,320.8158 C201.16,330.8158 287.0047,330.8158 287.0047,330.8158 C287.0047,330.8158 372.8494,330.8158 372.8494,320.8158" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="151.6894" x="211.16" y="349.7818">NetBSD ISO Repository</text></g><!--entity SigStore--><g class="entity" data-qualified-name="SigStore" data-source-line="20" id="ent0006"><path d="M204.18,838.8858 C204.18,828.8858 287.0007,828.8858 287.0007,828.8858 C287.0007,828.8858 369.8214,828.8858 369.8214,838.8858 L369.8214,866.9537 C369.8214,876.9537 287.0007,876.9537 287.0007,876.9537 C287.0007,876.9537 204.18,876.9537 204.18,866.9537 L204.18,838.8858" fill="#F1F1F1" style="stroke:#181818;stroke-width:0.5;"/><path d="M204.18,838.8858 C204.18,848.8858 287.0007,848.8858 287.0007,848.8858 C287.0007,848.8858 369.8214,848.8858 369.8214,838.8858" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="145.6414" x="214.18" y="867.8518">Public Signature Store</text></g><!--entity P1--><g class="entity" data-qualified-name="P1" data-source-line="22" id="ent0007"><ellipse cx="287" cy="218.8158" fill="#F1F1F1" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="93.8976" x="240.0512" y="250.7818">Download ISO</text></g><!--entity P2--><g class="entity" data-qualified-name="P2" data-source-line="23" id="ent0008"><ellipse cx="287" cy="450.8858" fill="#F1F1F1" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="152.5154" x="210.7423" y="482.8518">Compute SHA256 Hash</text></g><!--entity P3--><g class="entity" data-qualified-name="P3" data-source-line="24" id="ent0009"><ellipse cx="287" cy="593.8858" fill="#F1F1F1" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="92.7917" x="240.6042" y="625.8518">Sign ISO Hash</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="81.5217" x="240.6042" y="644.9197">(Private Key)</text></g><!--entity P4--><g class="entity" data-qualified-name="P4" data-source-line="25" id="ent0010"><ellipse cx="287" cy="736.8858" fill="#F1F1F1" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="115.7516" x="229.1242" y="768.8518">Publish Signature</text></g><!--link Alice to P1--><g class="link" data-entity-1="ent0002" data-entity-2="ent0007" data-link-type="dependency" data-source-line="27" id="lnk11"><path d="M287,127.0758 C287,153.3258 287,187.2558 287,203.9958" fill="none" id="Alice-to-P1" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="287,209.9958,291,200.9958,287,204.9958,283,200.9958,287,209.9958" style="stroke:#181818;stroke-width:1;"/></g><!--link P1 to ISORepo--><g class="link" data-entity-1="ent0007" data-entity-2="ent0005" data-link-type="dependency" data-source-line="28" id="lnk12"><path d="M287,227.6558 C287,244.4658 287,278.5358 287,304.3658" fill="none" id="P1-to-ISORepo" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="287,310.3658,291,301.3658,287,305.3658,283,301.3658,287,310.3658" style="stroke:#181818;stroke-width:1;"/></g><!--link ISORepo to P2--><g class="link" data-entity-1="ent0005" data-entity-2="ent0008" data-link-type="dependency" data-source-line="29" id="lnk13"><path d="M287,359.2058 C287,385.0058 287,419.1458 287,436.0058" fill="none" id="ISORepo-to-P2" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="287,442.0058,291,433.0058,287,437.0058,283,433.0058,287,442.0058" style="stroke:#181818;stroke-width:1;"/></g><!--link P2 to P3--><g class="link" data-entity-1="ent0008" data-entity-2="ent0009" data-link-type="dependency" data-source-line="30" id="lnk14"><path d="M287,459.8758 C287,484.6858 287,554.2958 287,578.9858" fill="none" id="P2-to-P3" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="287,584.9858,291,575.9858,287,579.9858,283,575.9858,287,584.9858" style="stroke:#181818;stroke-width:1;"/></g><!--link P3 to P4--><g class="link" data-entity-1="ent0009" data-entity-2="ent0010" data-link-type="dependency" data-source-line="31" id="lnk15"><path d="M287,602.8758 C287,627.6858 287,697.2958 287,721.9858" fill="none" id="P3-to-P4" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="287,727.9858,291,718.9858,287,722.9858,283,718.9858,287,727.9858" style="stroke:#181818;stroke-width:1;"/></g><!--link P4 to SigStore--><g class="link" data-entity-1="ent0010" data-entity-2="ent0006" data-link-type="dependency" data-source-line="32" id="lnk16"><path d="M287,745.7258 C287,762.5358 287,796.6058 287,822.4358" fill="none" id="P4-to-SigStore" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="287,828.4358,291,819.4358,287,823.4358,283,819.4358,287,828.4358" style="stroke:#181818;stroke-width:1;"/></g><!--link Bob to P1--><g class="link" data-entity-1="ent0003" data-entity-2="ent0007" data-link-type="dependency" data-source-line="34" id="lnk17"><path d="M444.63,113.1558 C408.59,137.0858 328.399,190.3377 300.799,208.6577" fill="none" id="Bob-to-P1" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="295.8,211.9758,305.5106,210.3312,299.9658,209.2107,301.0864,203.6659,295.8,211.9758" style="stroke:#181818;stroke-width:1;"/></g><!--link Bob to P2--><g class="link" data-entity-1="ent0003" data-entity-2="ent0008" data-link-type="dependency" data-source-line="35" id="lnk18"><path d="M458.85,127.1358 C453.71,175.2458 437.4,283.0358 390,358.8858 C364.71,399.3558 321.1744,428.9822 301.1044,441.3822" fill="none" id="Bob-to-P2" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="296,444.5358,305.759,443.2082,300.2536,441.9078,301.5541,436.4024,296,444.5358" style="stroke:#181818;stroke-width:1;"/></g><!--link Bob to P3--><g class="link" data-entity-1="ent0003" data-entity-2="ent0009" data-link-type="dependency" data-source-line="36" id="lnk19"><path d="M463.96,127.0258 C465.82,143.8558 468.05,166.6458 469,186.8158 C475.43,322.9758 459.06,365.9658 389,482.8858 C362.36,527.3458 320.0946,565.2972 300.5546,581.7072" fill="none" id="Bob-to-P3" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="295.96,585.5658,305.4244,582.8409,299.7889,582.3503,300.2795,576.7147,295.96,585.5658" style="stroke:#181818;stroke-width:1;"/></g><!--link Bob to P4--><g class="link" data-entity-1="ent0003" data-entity-2="ent0010" data-link-type="dependency" data-source-line="37" id="lnk20"><path d="M477.48,122.2258 C507.5,160.6258 568,248.6058 568,333.8558 C568,333.8558 568,333.8558 568,451.8858 C568,610.7258 348.6898,710.3414 301.2598,730.0714" fill="none" id="Bob-to-P4" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="295.72,732.3758,305.566,732.6123,300.3365,730.4554,302.4934,725.2259,295.72,732.3758" style="stroke:#181818;stroke-width:1;"/></g><!--link Charly to P1--><g class="link" data-entity-1="ent0004" data-entity-2="ent0007" data-link-type="dependency" data-source-line="39" id="lnk21"><path d="M134.34,116.4558 C172.63,141.8758 246.5116,190.9367 273.0616,208.5667" fill="none" id="Charly-to-P1" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="278.06,211.8858,272.7752,203.575,273.8947,209.1199,268.3497,210.2395,278.06,211.8858" style="stroke:#181818;stroke-width:1;"/></g><!--link Charly to P2--><g class="link" data-entity-1="ent0004" data-entity-2="ent0008" data-link-type="dependency" data-source-line="40" id="lnk22"><path d="M115.15,127.1358 C120.29,175.2458 136.6,283.0358 184,358.8858 C209.29,399.3558 252.8256,428.9822 272.8956,441.3822" fill="none" id="Charly-to-P2" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="278,444.5358,272.4459,436.4024,273.7464,441.9078,268.241,443.2082,278,444.5358" style="stroke:#181818;stroke-width:1;"/></g><!--link Charly to P3--><g class="link" data-entity-1="ent0004" data-entity-2="ent0009" data-link-type="dependency" data-source-line="41" id="lnk23"><path d="M111.45,127.1758 C110.07,156.8258 109.2,207.7658 116,250.8158 C132.8,357.2358 132.67,389.2858 186,482.8858 C211.54,527.7158 253.787,565.4791 273.397,581.7891" fill="none" id="Charly-to-P3" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="278.01,585.6258,273.6483,576.7954,274.1658,582.4286,268.5327,582.9461,278.01,585.6258" style="stroke:#181818;stroke-width:1;"/></g><!--link Charly to P4--><g class="link" data-entity-1="ent0004" data-entity-2="ent0010" data-link-type="dependency" data-source-line="42" id="lnk24"><path d="M92.62,127.2658 C61.58,167.9358 6,252.1458 6,333.8558 C6,333.8558 6,333.8558 6,451.8858 C6,610.7258 225.3102,710.3414 272.7402,730.0714" fill="none" id="Charly-to-P4" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="278.28,732.3758,271.5066,725.2259,273.6635,730.4554,268.434,732.6123,278.28,732.3758" style="stroke:#181818;stroke-width:1;"/></g><?plantuml-src LL1DJyCm3BtxLtYL4EEm0-tWC0aaO693Q50n92J49LszDLgJL4aAwh_7JTTrooNlsS_F7tY9UvAQS2jiHdeqWaiS-O8KePAApCwAgW1mUwahOOL2LuZS_4czuuhI4S2dz2NX_7a-GrpLfPSLquMkqmMkvKuBNrjok3KMsHRVo3-kv_YoVaUfn8xh2n8vMRZ39wCogLldJrixZrjhLAZveWpDzX3bVegS5wgQuKKkF8sZXjzajPhaEUxtCwNmExf289qVhFcHzj8t-53A3VNaqMGzV2g4BHi0zXEPS8JHoPmVL1adlR5DXCAreJPoeathZ7s7RN7DOWfYZWK2i95smuU9vkPFbqRahK-GfDV775-WgZtNBn_YcrjS2bTqalWeQPk4gThaZnwdLlxo4V2LcgjEcnorOIvN38DrWYb0k0DE9lTjz_Gwe7wlmzzbOqZZ3YMG9XsQGZeDQ5YEJzcx7M4ym6I0tBmxTgy_PV4PIyxO5Fu1?></g></svg>
\ No newline at end of file diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/200-ThreatModel-SLSA1-DownloadSig.png b/PlantUML-ModelingTrust/GnuPG-WoT-Download/200-ThreatModel-SLSA1-DownloadSig.png Binary files differnew file mode 100644 index 0000000..daac44f --- /dev/null +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/200-ThreatModel-SLSA1-DownloadSig.png diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/200-ThreatModel-SLSA1-DownloadSig.puml b/PlantUML-ModelingTrust/GnuPG-WoT-Download/200-ThreatModel-SLSA1-DownloadSig.puml new file mode 100644 index 0000000..4371bf5 --- /dev/null +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/200-ThreatModel-SLSA1-DownloadSig.puml @@ -0,0 +1,66 @@ +@startuml +left to right direction +skinparam rectangle { + BackgroundColor #F9F9F9 + BorderColor #333 +} + + +right header += Threat Model - Integrity verification of download artifacts with key list! +using independent GnuPG signatures and public keys +as well as a key list with authorised signing keys += %date("yyyy-MM-dd hh:hh") UTC +endheader + +right footer +* Maintainer publishes signed artifacts, public GnuPG keys and signed key list +* The key list or its signature is the central trust anchor +* Both are located in a central place! +* If the key list and the information about signature authorisation of the key list are replaced, manipulated artifacts with valid signatures can be distributed +* The security objective authenticity of the artifacts can therefore be violated +endfooter + + + + +actor "Downloader\n(Verifier)" as User #Green +actor "Attacker\n(MITM / Mirror)" as Attacker #Red +' actor "Keyserver" as Keyserver +' actor "Website with signed key list\nand information about signature authorisation of the key list" as WWW #Orange + + + +rectangle "Maintainer" { + rectangle "Private key\n(on hardware token)" as PrivKey + rectangle "Release artifact\n(binary)" as Artifact + rectangle "Signature\n(.asc)" as Sig +} + +rectangle "Website with signed key list\nand information about signature authorisation of the key list" as Channel #Orange + +rectangle "Verification environment\n(Server)" { + rectangle "Public key\nfrom keyserver\n(fingerprint verified)" as PubKey + rectangle "gpg --verify *.asc" as GPG +} + +PrivKey --> Sig : signs +Artifact --> Sig + +Sig --> Channel +Artifact --> Channel + +Channel --> User +' Attacker -[#Red]-> Channel : MITM attack +Attacker -[#Red]-> Channel: replaces key list + + +' Keyserver --> User: retrieves public keys +Channel --> User: retrieves key list and verifies its signature +User --> GPG +PubKey --> GPG +Artifact --> GPG +Sig --> GPG + +GPG --> User : OK / FAIL +@enduml diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/200-ThreatModel-SLSA1-DownloadSig.svg b/PlantUML-ModelingTrust/GnuPG-WoT-Download/200-ThreatModel-SLSA1-DownloadSig.svg new file mode 100644 index 0000000..3c5b37e --- /dev/null +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/200-ThreatModel-SLSA1-DownloadSig.svg @@ -0,0 +1 @@ +<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="655px" preserveAspectRatio="none" style="width:1402px;height:655px;background:#FFFFFF;" version="1.1" viewBox="0 0 1402 655" width="1402px" zoomAndPan="magnify"><defs/><g><g class="header" data-source-line="8"><text fill="#888888" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="496.7601" x="891.6096" y="14.9659">Threat Model - Integrity verification of download artifacts with key list!</text><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="251.4598" x="1136.9099" y="29.7579">using independent GnuPG signatures and public keys</text><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="224.7398" x="1163.6299" y="43.3779">as well as a key list with authorised signing keys</text><text fill="#888888" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="143.9194" x="1244.4503" y="61.2738">2026-02-23 08:08 UTC</text></g><!--cluster Maintainer--><g class="cluster" data-qualified-name="Maintainer" data-source-line="33" id="ent0004"><rect fill="#F9F9F9" height="205" rx="2.5" ry="2.5" style="stroke:#333333;stroke-width:1;" width="398.91" x="7" y="252.3758"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="77.2377" x="167.8361" y="269.3417">Maintainer</text></g><!--cluster Verification environment\n(Server)--><g class="cluster" data-qualified-name="Verification environment.n.Server." data-source-line="41" id="ent0009"><rect fill="#F9F9F9" height="151" rx="2.5" ry="2.5" style="stroke:#333333;stroke-width:1;" width="617.35" x="255.78" y="73.3758"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="175.7973" x="476.5563" y="90.3417">Verification environment</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="54.4318" x="537.2391" y="109.4097">(Server)</text></g><!--entity PrivKey--><g class="entity" data-qualified-name="Maintainer.PrivKey" data-source-line="34" id="ent0005"><rect fill="#F9F9F9" height="58.1358" rx="2.5" ry="2.5" style="stroke:#333333;stroke-width:0.5;" width="153.7835" x="23" y="383.3058"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="71.9317" x="33" y="408.2717">Private key</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="133.7835" x="33" y="427.3397">(on hardware token)</text></g><!--entity Artifact--><g class="entity" data-qualified-name="Maintainer.Artifact" data-source-line="35" id="ent0006"><rect fill="#F9F9F9" height="58.1358" rx="2.5" ry="2.5" style="stroke:#333333;stroke-width:0.5;" width="120.9536" x="39.41" y="290.3058"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="100.9536" x="49.41" y="315.2717">Release artifact</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="50.0498" x="49.41" y="334.3397">(binary)</text></g><!--entity Sig--><g class="entity" data-qualified-name="Maintainer.Sig" data-source-line="36" id="ent0007"><rect fill="#F9F9F9" height="58.1358" rx="2.5" ry="2.5" style="stroke:#333333;stroke-width:0.5;" width="83.7978" x="306.11" y="314.3058"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="63.7978" x="316.11" y="339.2717">Signature</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="33.4319" x="316.11" y="358.3397">(.asc)</text></g><!--entity PubKey--><g class="entity" data-qualified-name="Verification environment.n.Server..PubKey" data-source-line="42" id="ent0010"><rect fill="#F9F9F9" height="77.2038" rx="2.5" ry="2.5" style="stroke:#333333;stroke-width:0.5;" width="152.4535" x="271.78" y="130.7758"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="65.8277" x="281.78" y="155.7417">Public key</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="99.4836" x="281.78" y="174.8097">from keyserver</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="132.4535" x="281.78" y="193.8776">(fingerprint verified)</text></g><!--entity GPG--><g class="entity" data-qualified-name="Verification environment.n.Server..GPG" data-source-line="43" id="ent0011"><rect fill="#F9F9F9" height="39.0679" rx="2.5" ry="2.5" style="stroke:#333333;stroke-width:0.5;" width="131.2296" x="725.9" y="168.8458"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="111.2296" x="735.9" y="193.8117">gpg --verify *.asc</text></g><!--entity User--><g class="entity" data-qualified-name="User" data-source-line="26" id="ent0002"><ellipse cx="1355.0848" cy="222.8058" fill="#008000" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M1355.0848,230.8058 L1355.0848,257.8058 M1342.0848,238.8058 L1368.0848,238.8058 M1355.0848,257.8058 L1342.0848,272.8058 M1355.0848,257.8058 L1368.0848,272.8058" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="80.5697" x="1314.8" y="289.2717">Downloader</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="56.1958" x="1314.8" y="308.3397">(Verifier)</text></g><!--entity Attacker--><g class="entity" data-qualified-name="Attacker" data-source-line="27" id="ent0003"><ellipse cx="348.0098" cy="486.8058" fill="#FF0000" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M348.0098,494.8058 L348.0098,521.8058 M335.0098,502.8058 L361.0098,502.8058 M348.0098,521.8058 L335.0098,536.8058 M348.0098,521.8058 L361.0098,536.8058" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="54.7818" x="297.54" y="553.2717">Attacker</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="100.9396" x="297.54" y="572.3397">(MITM / Mirror)</text></g><!--entity Channel--><g class="entity" data-qualified-name="Channel" data-source-line="39" id="ent0008"><rect fill="#FFA500" height="58.1358" rx="2.5" ry="2.5" style="stroke:#333333;stroke-width:0.5;" width="418.5645" x="582.24" y="314.3058"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="181.2573" x="592.24" y="339.2717">Website with signed key list</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="398.5645" x="592.24" y="358.3397">and information about signature authorisation of the key list</text></g><!--link PrivKey to Sig--><g class="link" data-entity-1="ent0005" data-entity-2="ent0007" data-link-type="dependency" data-source-line="46" id="lnk12"><path d="M177.08,391.0158 C219.57,379.1058 265.0526,366.3549 300.0926,356.5349" fill="none" id="PrivKey-to-Sig" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="305.87,354.9158,296.1245,353.4929,301.0555,356.2651,298.2833,361.1961,305.87,354.9158" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="31.837" x="207.78" y="369.6428">signs</text></g><!--link Artifact to Sig--><g class="link" data-entity-1="ent0006" data-entity-2="ent0007" data-link-type="dependency" data-source-line="47" id="lnk13"><path d="M160.78,325.2158 C205.75,329.6058 260.1782,334.9144 299.8282,338.7744" fill="none" id="Artifact-to-Sig" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="305.8,339.3558,297.2299,334.5026,300.8235,338.8713,296.4548,342.4649,305.8,339.3558" style="stroke:#181818;stroke-width:1;"/></g><!--link Sig to Channel--><g class="link" data-entity-1="ent0007" data-entity-2="ent0008" data-link-type="dependency" data-source-line="49" id="lnk14"><path d="M390.15,343.3758 C434.68,343.3758 503.1,343.3758 575.78,343.3758" fill="none" id="Sig-to-Channel" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="581.78,343.3758,572.78,339.3758,576.78,343.3758,572.78,347.3758,581.78,343.3758" style="stroke:#181818;stroke-width:1;"/></g><!--link Artifact to Channel--><g class="link" data-entity-1="ent0006" data-entity-2="ent0008" data-link-type="dependency" data-source-line="50" id="lnk15"><path d="M151.79,348.7758 C160.27,354.0858 168.88,359.7358 176.78,365.3758 C190.91,375.4558 190.46,384.4658 206.78,390.3758 C373.72,450.8158 578.7679,408.6087 695.9079,374.5987" fill="none" id="Artifact-to-Channel" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="701.67,372.9258,691.9116,371.5938,696.8683,374.3199,694.1422,379.2766,701.67,372.9258" style="stroke:#181818;stroke-width:1;"/></g><!--link Channel to User--><g class="link" data-entity-1="ent0008" data-entity-2="ent0002" data-link-type="dependency" data-source-line="52" id="lnk16"><path d="M1000.03,313.8158 C1115.79,297.3258 1243.4699,279.1318 1308.4899,269.8718" fill="none" id="Channel-to-User" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="1314.43,269.0258,1304.9559,266.3347,1309.4799,269.7308,1306.0839,274.2548,1314.43,269.0258" style="stroke:#181818;stroke-width:1;"/></g><!--link Channel to User--><g class="link" data-entity-1="ent0008" data-entity-2="ent0002" data-link-type="dependency" data-source-line="58" id="lnk18"><path d="M972.68,372.9258 C1069.08,380.8658 1187.61,377.6658 1284.8,335.3758 C1296.73,330.1858 1303.3208,326.0411 1312.7508,316.8611" fill="none" id="Channel-to-User-1" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="1317.05,312.6758,1307.811,316.0875,1313.4673,316.1635,1313.3913,321.8199,1317.05,312.6758" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="252.3952" x="1031.8" y="331.2728">retrieves key list and verifies its signature</text></g><!--link Attacker to Channel--><g class="link" data-entity-1="ent0003" data-entity-2="ent0008" data-link-type="dependency" data-source-line="54" id="lnk17"><path d="M398.86,516.5858 C440.63,506.7858 501.39,490.7758 552.24,470.3758 C620.98,442.7958 690.4752,403.9563 737.5652,375.9063" fill="none" id="Attacker-to-Channel" style="stroke:#FF0000;stroke-width:1;"/><polygon fill="#FF0000" points="742.72,372.8358,732.9408,374.0051,738.4243,375.3946,737.0349,380.8781,742.72,372.8358" style="stroke:#FF0000;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="96.4341" x="455.24" y="466.2728">replaces key list</text></g><!--link User to GPG--><g class="link" data-entity-1="ent0002" data-entity-2="ent0011" data-link-type="dependency" data-source-line="59" id="lnk19"><path d="M1314.33,227.3458 C1305.21,220.9158 1295.13,215.0958 1284.8,211.3758 C1139.28,159.0358 959.805,168.4988 863.365,178.9588" fill="none" id="User-to-GPG" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="857.4,179.6058,866.7788,182.612,862.3708,179.0667,865.9162,174.6587,857.4,179.6058" style="stroke:#181818;stroke-width:1;"/></g><!--link GPG to User--><g class="link" data-entity-1="ent0011" data-entity-2="ent0002" data-link-type="dependency" data-source-line="64" id="lnk23"><path d="M857.6,204.4158 C905.27,215.5758 971.7,229.9258 1030.8,238.3758 C1132.36,252.8958 1247.1752,259.1659 1308.3452,261.7159" fill="none" id="GPG-to-User" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="1314.34,261.9658,1305.5144,257.5944,1309.3443,261.7576,1305.1812,265.5875,1314.34,261.9658" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="56.0691" x="1129.8" y="234.2728">OK / FAIL</text></g><!--link PubKey to GPG--><g class="link" data-entity-1="ent0010" data-entity-2="ent0011" data-link-type="dependency" data-source-line="60" id="lnk20"><path d="M424.66,172.6358 C509.43,176.2858 639.4456,181.8777 719.5856,185.3277" fill="none" id="PubKey-to-GPG" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="725.58,185.5858,716.7604,181.2024,720.5846,185.3708,716.4163,189.195,725.58,185.5858" style="stroke:#181818;stroke-width:1;"/></g><!--link Artifact to GPG--><g class="link" data-entity-1="ent0006" data-entity-2="ent0011" data-link-type="dependency" data-source-line="61" id="lnk21"><path d="M160.59,308.0358 C289.34,283.5758 586.3754,227.1557 719.7054,201.8257" fill="none" id="Artifact-to-GPG" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="725.6,200.7058,716.0116,198.4559,720.6879,201.639,717.5047,206.3153,725.6,200.7058" style="stroke:#181818;stroke-width:1;"/></g><!--link Sig to GPG--><g class="link" data-entity-1="ent0007" data-entity-2="ent0011" data-link-type="dependency" data-source-line="62" id="lnk22"><path d="M390.15,331.5158 C431.39,319.4158 496.59,299.7258 552.24,280.3758 C618.42,257.3758 688.1057,229.9604 736.0257,210.6304" fill="none" id="Sig-to-GPG" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="741.59,208.3858,731.7471,208.0431,736.953,210.2563,734.7398,215.4622,741.59,208.3858" style="stroke:#181818;stroke-width:1;"/></g><g class="footer" data-source-line="15"><ellipse cx="844.1853" cy="585.9596" fill="#888888" rx="2.5" ry="2.5"/><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="355.9296" x="850.6853" y="590.5297">Maintainer publishes signed artifacts, public GnuPG keys and signed key list</text><ellipse cx="897.3153" cy="599.5796" fill="#888888" rx="2.5" ry="2.5"/><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="249.6697" x="903.8153" y="604.1496">The key list or its signature is the central trust anchor</text><ellipse cx="941.0752" cy="613.1996" fill="#888888" rx="2.5" ry="2.5"/><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="162.1499" x="947.5752" y="617.7696">Both are located in a central place!</text><ellipse cx="662.4306" cy="626.8196" fill="#888888" rx="2.5" ry="2.5"/><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="719.4391" x="668.9306" y="631.3896">If the key list and the information about signature authorisation of the key list are replaced, manipulated artifacts with valid signatures can be distributed</text><ellipse cx="846.5202" cy="640.4396" fill="#888888" rx="2.5" ry="2.5"/><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="351.2598" x="853.0202" y="645.0096">The security objective authenticity of the artifacts can therefore be violated</text></g><?plantuml-src jLHBJzj04BxlhnWILGL4sWEd8b49g8WGZOeWa4FfOMsFussStMXs7HHL_U-TMJy3wgLI7SN9pdxp-kPHOXuWE22pB09aXZ0DnbdbLyPkDEarY4JRPOdmIm5SwdIr95VPxCgLZc1y_Ka-SkCeGsgafwUdwhTIgZPReEOhTGxpWb07cBaCIvZ0ZGsu91Dsi4KokKcr-0QNG-PUREbq1fg2oNKQFBoOKC0ATr0Q7mvKvOrTWh4PRf1VDi3KLdTJy6PfTQW8FMYRmQPAIfEAdbUQZM1P0l_gpb9jLrUXS6GyPj60c8ugvm3lCXtmSBJZPpARJR8CYkAiA4P7y3Y_KkoxoQx9DNSkyEaOPjhOm5-aEWXVS4XY70TPdRG1ri6BpnXsWsk3P7Fp0lkOcM8JV9yh60-10IdpGBg4G1MZj4qvATQzT98Ymqh75BDTOvc15hmfTOe73Bl9ev7EYmGY0cDpH-kwDZfnLHWuRedhAhTlWH64qK5s0cjjpQOgOmIlwhhLfSc6jKkrXGIv8NqWarIiqd3WCQrYoxZaf_Jgjew1Sp5f5DSXzFR54ai8EGaKcrlZOWnIkwPQyZ2OQHrzQJeFwTaUFiMsH3eQITCyUgxbU4g8jaLVXC034R6pc_aCFiBC4Bb6eRs5yJsxUm-DqYrN6ObRFeAw4_I81IRU1AovUTKBprRgyiyr6O4uNImMCFv6FDSekVSpFkhRTXG7Vd1rHsRBn8afpfTD5vgo5wbnS2kqTSu2ufJsDU-nHEtxgh1wOgocNSDJ8zvNUcWJOlG7xTCQorBPB0FSVoMBFLuLsbhULnrV0zzFmxs5Tcl8sJNt8eVy48jwz9R5RYCzsvpSEWvznB9Ipfi7QKDSWsOdOjRmMYLlQ5rkbZ2PHDmEZeMZ29tUJOMYfXAC-2oimLdCsgkMxVP2ARcLGvFfFg8LgfO74SeeSBjs3JxvBYt-euUpjpWGEYBKtu5dxOBm_RPJRBeVYzQV87aPu9QXmxN-EguXRc-NDOJw_TsfubYBil1MqzmTzvWGGKkL_5VywhnomjzkUVwlBsw-_W40?></g></svg>
\ No newline at end of file diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/201-ThreatModel-SLSA4-ReproducibleBuilds.png b/PlantUML-ModelingTrust/GnuPG-WoT-Download/201-ThreatModel-SLSA4-ReproducibleBuilds.png Binary files differnew file mode 100644 index 0000000..fb7b8c4 --- /dev/null +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/201-ThreatModel-SLSA4-ReproducibleBuilds.png diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/201-ThreatModel-SLSA4-ReproducibleBuilds.puml b/PlantUML-ModelingTrust/GnuPG-WoT-Download/201-ThreatModel-SLSA4-ReproducibleBuilds.puml new file mode 100644 index 0000000..8e37210 --- /dev/null +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/201-ThreatModel-SLSA4-ReproducibleBuilds.puml @@ -0,0 +1,104 @@ +@startuml +left to right direction +skinparam rectangle { + BackgroundColor #FFF6F6 + BorderColor #550000 +} +skinparam note { + BackgroundColor #FFFFCC +} + +right header += Threat Model - Reproducible Builds according to SLSA Level 4 +using independent GnuPG signatures and keys +as well as Reproducible Builds according to SLSA Level 4 +corresponding to the Tor Browser release process, as well as NixOS, Debian and NetBSD += %date("yyyy-MM-dd hh:mm") +endheader + +right footer += Advantages: +* Consistency between source code and binaries through Reproducible Builds +* No single trust anchor -> at least 2 independent builders +* Subsequent manipulation detectable through checksums in the Git Transparency Log +* Insider attacks made more difficult through multiple signatures +* Key misuse detectable through checksums in the Git Transparency Log and temporal correlation via timestamps +* Each box is a trust boarder +endfooter + + + +caption += Threat Model - Reproducible Builds according to SLSA Level 4 +endcaption + +actor "Downloader\n(Verifier)" as User #Green +actor "Internet\n(Insecure)" as Net +actor "NTP Server 1" as NTP1 +actor "NTP Server 2 " as NTP2 +actor "Attacker\n(Insider / External)" as Attacker #Red +'actor "Trusted Commiter 1" as Committer1 +'actor "Trusted Commiter 2" as Committer2 + +actor "Keyserver 1" as Keyserver1 +actor "Keyserver 2" as Keyserver2 + + +rectangle "Maintainer" { + rectangle "Source Code\n(in Git)" as Source + rectangle "Git Release Tag\n(GnuPG-signed)" as Tag +} + +rectangle "Independent build pipelines\n(at least 2)" { + rectangle "Pipe A" as B1 + rectangle "Pipe B" as B2 +} + +rectangle "Download artefacts" { + rectangle "Artefact A\n(Checksum)" as A1 + rectangle "Artefact B\n(Checksum)" as A2 +} + +rectangle "Git Transparency Log\n(tamper-hardened)" as Log +rectangle "Distributed ledger with\n Merkle Tree records\n (Blockchain)" as Ledger + +rectangle "Operational environment\n(of the downloader)" { + rectangle "Known public signing keys\n(obtained from at least\n 2 independent trust paths)" as Keys + rectangle "Rebuild pipeline\n(Reproducible)" as Rebuild + rectangle "Verification policy\n (organisational measure\n from BSI TR)" as Policy +} + +NTP1 --> Log : Time +NTP2 --> Log : Time + +Keyserver1 --> Keys : retrieves +Keyserver2 --> Keys : retrieves + +Source --> B1 +Source --> B2 + +B1 --> A1 +B2 --> A2 + +A1 --> Log : Checksum +A2 --> Log : Checksum + +A1 --> Ledger : Checksum +A2 --> Ledger : Checksum + +Tag --> Source + +Net --> User +Attacker -[#Red]-> B1 : compromises +Attacker -[#Red]-> Net : controls +Attacker -[#Red]-> Tag : compromises private key +'// Commiter1 --> Tag : generates valid signature +'// Commiter2 --> Tag : generates valid signature + + +User --> Rebuild +User --> Log +Keys --> Policy +Rebuild --> Policy +Policy --> User : ACCEPT / REJECT +@enduml diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/201-ThreatModel-SLSA4-ReproducibleBuilds.svg b/PlantUML-ModelingTrust/GnuPG-WoT-Download/201-ThreatModel-SLSA4-ReproducibleBuilds.svg new file mode 100644 index 0000000..231e779 --- /dev/null +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/201-ThreatModel-SLSA4-ReproducibleBuilds.svg @@ -0,0 +1 @@ +<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="893px" preserveAspectRatio="none" style="width:1670px;height:893px;background:#FFFFFF;" version="1.1" viewBox="0 0 1670 893" width="1670px" zoomAndPan="magnify"><defs/><g><g class="header" data-source-line="10"><text fill="#888888" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="422.9104" x="1233.095" y="14.9659">Threat Model - Reproducible Builds according to SLSA Level 4</text><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="220.4198" x="1435.5856" y="29.7579">using independent GnuPG signatures and keys</text><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="262.5298" x="1393.4757" y="43.3779">as well as Reproducible Builds according to SLSA Level 4</text><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="414.2194" x="1241.786" y="56.9979">corresponding to the Tor Browser release process, as well as NixOS, Debian and NetBSD</text><text fill="#888888" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="112.6295" x="1543.3759" y="74.8938">2026-02-23 06:52</text></g><!--cluster Maintainer--><g class="cluster" data-qualified-name="Maintainer" data-source-line="46" id="ent0009"><rect fill="#FFF6F6" height="112" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:1;" width="452" x="327.93" y="542.9958"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="77.2377" x="515.3111" y="559.9617">Maintainer</text></g><!--cluster Independent build pipelines\n(at least 2)--><g class="cluster" data-qualified-name="Independent build pipelines.n.at least 2." data-source-line="51" id="ent0012"><rect fill="#FFF6F6" height="187" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:1;" width="211" x="881.11" y="536.9958"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="195.9572" x="888.6314" y="553.9617">Independent build pipelines</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="73.2617" x="949.9791" y="573.0296">(at least 2)</text></g><!--cluster Download artefacts--><g class="cluster" data-qualified-name="Download artefacts" data-source-line="56" id="ent0015"><rect fill="#FFF6F6" height="205" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:1;" width="153" x="1228.19" y="546.9958"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="137.0875" x="1236.1463" y="563.9617">Download artefacts</text></g><!--cluster Operational environment\n(of the downloader)--><g class="cluster" data-qualified-name="Operational environment.n.of the downloader." data-source-line="64" id="ent0020"><rect fill="#FFF6F6" height="244" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:1;" width="497.11" x="597.08" y="86.9958"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="178.1633" x="756.5533" y="103.9617">Operational environment</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="137.9275" x="776.6713" y="123.0296">(of the downloader)</text></g><!--entity Source--><g class="entity" data-qualified-name="Maintainer.Source" data-source-line="47" id="ent0010"><rect fill="#FFF6F6" height="58.1358" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:0.5;" width="102.6697" x="661.26" y="580.9258"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="82.6697" x="671.26" y="605.8917">Source Code</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="43.1618" x="671.26" y="624.9596">(in Git)</text></g><!--entity Tag--><g class="entity" data-qualified-name="Maintainer.Tag" data-source-line="48" id="ent0011"><rect fill="#FFF6F6" height="58.1358" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:0.5;" width="123.1516" x="343.93" y="580.9258"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="100.9536" x="353.93" y="605.8917">Git Release Tag</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="103.1516" x="353.93" y="624.9596">(GnuPG-signed)</text></g><!--entity B1--><g class="entity" data-qualified-name="Independent build pipelines.n.at least 2..B1" data-source-line="52" id="ent0013"><rect fill="#FFF6F6" height="39.0679" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:0.5;" width="61.1738" x="955.53" y="668.4658"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="41.1738" x="965.53" y="693.4317">Pipe A</text></g><!--entity B2--><g class="entity" data-qualified-name="Independent build pipelines.n.at least 2..B2" data-source-line="53" id="ent0014"><rect fill="#FFF6F6" height="39.0679" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:0.5;" width="61.3278" x="955.45" y="594.4658"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="41.3278" x="965.45" y="619.4317">Pipe B</text></g><!--entity A1--><g class="entity" data-qualified-name="Download artefacts.A1" data-source-line="57" id="ent0016"><rect fill="#FFF6F6" height="58.1358" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:0.5;" width="96.4397" x="1255.97" y="677.9258"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="64.7078" x="1265.97" y="702.8917">Artefact A</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="76.4397" x="1265.97" y="721.9596">(Checksum)</text></g><!--entity A2--><g class="entity" data-qualified-name="Download artefacts.A2" data-source-line="58" id="ent0017"><rect fill="#FFF6F6" height="58.1358" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:0.5;" width="96.4397" x="1255.97" y="584.9258"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="64.8618" x="1265.97" y="609.8917">Artefact B</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="76.4397" x="1265.97" y="628.9596">(Checksum)</text></g><!--entity Keys--><g class="entity" data-qualified-name="Operational environment.n.of the downloader..Keys" data-source-line="65" id="ent0021"><rect fill="#FFF6F6" height="77.2038" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:0.5;" width="199.0313" x="613.08" y="144.3958"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="173.8513" x="623.08" y="169.3617">Known public signing keys</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="150.0654" x="623.08" y="188.4296">(obtained from at least</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="175.3913" x="626.72" y="207.4976">2 independent trust paths)</text></g><!--entity Rebuild--><g class="entity" data-qualified-name="Operational environment.n.of the downloader..Rebuild" data-source-line="66" id="ent0022"><rect fill="#FFF6F6" height="58.1358" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:0.5;" width="125.8396" x="649.68" y="256.9258"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="105.8396" x="659.68" y="281.8917">Rebuild pipeline</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="95.5776" x="659.68" y="300.9596">(Reproducible)</text></g><!--entity Policy--><g class="entity" data-qualified-name="Operational environment.n.of the downloader..Policy" data-source-line="67" id="ent0023"><rect fill="#FFF6F6" height="77.2038" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:0.5;" width="184.1494" x="894.04" y="155.3958"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="116.2835" x="904.04" y="180.3617">Verification policy</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="160.5094" x="907.68" y="199.4296">(organisational measure</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="81.6617" x="907.68" y="218.4976">from BSI TR)</text></g><!--entity User--><g class="entity" data-qualified-name="User" data-source-line="34" id="ent0002"><ellipse cx="1304.1848" cy="212.4258" fill="#008000" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M1304.1848,220.4258 L1304.1848,247.4258 M1291.1848,228.4258 L1317.1848,228.4258 M1304.1848,247.4258 L1291.1848,262.4258 M1304.1848,247.4258 L1317.1848,262.4258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="80.5697" x="1263.9" y="278.8917">Downloader</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="56.1958" x="1263.9" y="297.9596">(Verifier)</text></g><!--entity Net--><g class="entity" data-qualified-name="Net" data-source-line="35" id="ent0003"><ellipse cx="405.5049" cy="362.4258" fill="#F1F1F1" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M405.5049,370.4258 L405.5049,397.4258 M392.5049,378.4258 L418.5049,378.4258 M405.5049,397.4258 L392.5049,412.4258 M405.5049,397.4258 L418.5049,412.4258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="53.7318" x="372.78" y="428.8917">Internet</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="65.4497" x="372.78" y="447.9596">(Insecure)</text></g><!--entity NTP1--><g class="entity" data-qualified-name="NTP1" data-source-line="36" id="ent0004"><ellipse cx="1304.1878" cy="345.9658" fill="#F1F1F1" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M1304.1878,353.9658 L1304.1878,380.9658 M1291.1878,361.9658 L1317.1878,361.9658 M1304.1878,380.9658 L1291.1878,395.9658 M1304.1878,380.9658 L1317.1878,395.9658" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="84.3357" x="1262.02" y="412.4317">NTP Server 1</text></g><!--entity NTP2--><g class="entity" data-qualified-name="NTP2" data-source-line="37" id="ent0005"><ellipse cx="1304.1878" cy="459.9658" fill="#F1F1F1" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M1304.1878,467.9658 L1304.1878,494.9658 M1291.1878,475.9658 L1317.1878,475.9658 M1304.1878,494.9658 L1291.1878,509.9658 M1304.1878,494.9658 L1317.1878,509.9658" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="84.3357" x="1260.2" y="526.4317">NTP Server 2</text></g><!--entity Attacker--><g class="entity" data-qualified-name="Attacker" data-source-line="38" id="ent0006"><ellipse cx="66.4658" cy="569.4258" fill="#FF0000" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M66.4658,577.4258 L66.4658,604.4258 M53.4658,585.4258 L79.4658,585.4258 M66.4658,604.4258 L53.4658,619.4258 M66.4658,604.4258 L79.4658,619.4258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="54.7818" x="6" y="635.8917">Attacker</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="120.9315" x="6" y="654.9596">(Insider / External)</text></g><!--entity Keyserver1--><g class="entity" data-qualified-name="Keyserver1" data-source-line="42" id="ent0007"><ellipse cx="405.5118" cy="231.9658" fill="#F1F1F1" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M405.5118,239.9658 L405.5118,266.9658 M392.5118,247.9658 L418.5118,247.9658 M405.5118,266.9658 L392.5118,281.9658 M405.5118,266.9658 L418.5118,281.9658" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="76.5237" x="367.25" y="298.4317">Keyserver 1</text></g><!--entity Keyserver2--><g class="entity" data-qualified-name="Keyserver2" data-source-line="43" id="ent0008"><ellipse cx="405.5118" cy="117.9658" fill="#F1F1F1" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M405.5118,125.9658 L405.5118,152.9658 M392.5118,133.9658 L418.5118,133.9658 M405.5118,152.9658 L392.5118,167.9658 M405.5118,152.9658 L418.5118,167.9658" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="76.5237" x="367.25" y="184.4317">Keyserver 2</text></g><!--entity Log--><g class="entity" data-qualified-name="Log" data-source-line="61" id="ent0018"><rect fill="#FFF6F6" height="58.1358" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:0.5;" width="159.9855" x="1498.1" y="461.9258"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="139.9855" x="1508.1" y="486.8917">Git Transparency Log</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="125.1455" x="1508.1" y="505.9596">(tamper-hardened)</text></g><!--entity Ledger--><g class="entity" data-qualified-name="Ledger" data-source-line="62" id="ent0019"><rect fill="#FFF6F6" height="77.2038" rx="2.5" ry="2.5" style="stroke:#550000;stroke-width:0.5;" width="171.8154" x="1492.19" y="633.3958"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="151.8154" x="1502.19" y="658.3617">Distributed ledger with</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="131.9635" x="1505.83" y="677.4296">Merkle Tree records</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="79.2677" x="1505.83" y="696.4976">(Blockchain)</text></g><!--link NTP1 to Log--><g class="link" data-entity-1="ent0004" data-entity-2="ent0018" data-link-type="dependency" data-source-line="70" id="lnk24"><path d="M1346.78,394.4358 C1389.26,412.2458 1450.4365,437.8963 1501.1565,459.1563" fill="none" id="NTP1-to-Log" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="1506.69,461.4758,1499.936,454.3076,1502.0787,459.5429,1496.8434,461.6856,1506.69,461.4758" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="30.069" x="1414.69" y="413.0228">Time</text></g><!--link NTP2 to Log--><g class="link" data-entity-1="ent0005" data-entity-2="ent0018" data-link-type="dependency" data-source-line="71" id="lnk25"><path d="M1348.57,490.9958 C1388.61,490.9958 1443.03,490.9958 1491.7,490.9958" fill="none" id="NTP2-to-Log" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="1497.7,490.9958,1488.7,486.9958,1492.7,490.9958,1488.7,494.9958,1497.7,490.9958" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="30.069" x="1414.69" y="486.8928">Time</text></g><!--link Keyserver1 to Keys--><g class="link" data-entity-1="ent0007" data-entity-2="ent0021" data-link-type="dependency" data-source-line="73" id="lnk26"><path d="M444.22,253.1058 C486.07,242.1358 549.4863,225.5081 607.0163,210.4181" fill="none" id="Keyserver1-to-Keys" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="612.82,208.8958,603.0996,207.3101,607.9836,210.1644,605.1294,215.0483,612.82,208.8958" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="53.612" x="512.58" y="214.1028">retrieves</text></g><!--link Keyserver2 to Keys--><g class="link" data-entity-1="ent0008" data-entity-2="ent0021" data-link-type="dependency" data-source-line="74" id="lnk27"><path d="M444.22,153.1958 C486.07,157.8658 549.3269,164.9114 606.8569,171.3214" fill="none" id="Keyserver2-to-Keys" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="612.82,171.9858,604.3183,167.0138,607.8508,171.4321,603.4324,174.9646,612.82,171.9858" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="53.612" x="512.58" y="155.8928">retrieves</text></g><!--link Source to B1--><g class="link" data-entity-1="ent0010" data-entity-2="ent0013" data-link-type="dependency" data-source-line="76" id="lnk28"><path d="M764.35,624.5758 C820.53,640.7158 903.4334,664.5285 949.4334,677.7485" fill="none" id="Source-to-B1" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="955.2,679.4058,947.655,673.0755,950.3945,678.0247,945.4453,680.7643,955.2,679.4058" style="stroke:#181818;stroke-width:1;"/></g><!--link Source to B2--><g class="link" data-entity-1="ent0010" data-entity-2="ent0014" data-link-type="dependency" data-source-line="77" id="lnk29"><path d="M764.35,610.7458 C820.53,611.5758 903.2007,612.7871 949.2007,613.4671" fill="none" id="Source-to-B2" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="955.2,613.5558,946.2601,609.4232,950.2005,613.4819,946.1419,617.4223,955.2,613.5558" style="stroke:#181818;stroke-width:1;"/></g><!--link B1 to A1--><g class="link" data-entity-1="ent0013" data-entity-2="ent0016" data-link-type="dependency" data-source-line="79" id="lnk30"><path d="M1017.13,689.7958 C1072.15,693.1058 1183.5308,699.8056 1249.5508,703.7756" fill="none" id="B1-to-A1" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="1255.54,704.1358,1246.7963,699.6028,1250.549,703.8357,1246.3161,707.5884,1255.54,704.1358" style="stroke:#181818;stroke-width:1;"/></g><!--link B2 to A2--><g class="link" data-entity-1="ent0014" data-entity-2="ent0017" data-link-type="dependency" data-source-line="80" id="lnk31"><path d="M1017.13,613.9958 C1072.15,613.9958 1183.52,613.9958 1249.54,613.9958" fill="none" id="B2-to-A2" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="1255.54,613.9958,1246.54,609.9958,1250.54,613.9958,1246.54,617.9958,1255.54,613.9958" style="stroke:#181818;stroke-width:1;"/></g><!--link A1 to Log--><g class="link" data-entity-1="ent0016" data-entity-2="ent0018" data-link-type="dependency" data-source-line="82" id="lnk32"><path d="M1352.82,706.9758 C1386.43,704.6858 1430.88,696.7858 1462.19,672.9958 C1484.98,655.6758 1477.46,640.5458 1492.19,615.9958 C1512.37,582.3658 1534.4579,550.272 1552.2379,525.322" fill="none" id="A1-to-Log" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="1555.72,520.4358,1547.2394,525.4438,1552.8183,524.5077,1553.7544,530.0865,1555.72,520.4358" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="63.1801" x="1398.19" y="668.8928">Checksum</text></g><!--link A2 to Log--><g class="link" data-entity-1="ent0017" data-entity-2="ent0018" data-link-type="dependency" data-source-line="83" id="lnk33"><path d="M1352.86,592.4258 C1396.96,572.4858 1457.4134,545.1389 1506.3734,522.9889" fill="none" id="A2-to-Log" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="1511.84,520.5158,1501.9914,520.5811,1507.2845,522.5767,1505.2889,527.8699,1511.84,520.5158" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="63.1801" x="1398.19" y="541.0328">Checksum</text></g><!--link A1 to Ledger--><g class="link" data-entity-1="ent0016" data-entity-2="ent0019" data-link-type="dependency" data-source-line="85" id="lnk34"><path d="M1352.65,725.4058 C1384,735.0758 1425.85,743.1758 1462.19,733.9958 C1481.31,729.1658 1495.4388,723.3218 1512.7088,713.9318" fill="none" id="A1-to-Ledger" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="1517.98,711.0658,1508.1625,711.8507,1513.5873,713.4542,1511.9839,718.879,1517.98,711.0658" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="63.1801" x="1398.19" y="729.8928">Checksum</text></g><!--link A2 to Ledger--><g class="link" data-entity-1="ent0017" data-entity-2="ent0019" data-link-type="dependency" data-source-line="86" id="lnk35"><path d="M1352.86,624.1658 C1391.17,632.3358 1440.0822,642.7633 1485.9022,652.5433" fill="none" id="A2-to-Ledger" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="1491.77,653.7958,1483.8032,648.0052,1486.8801,652.7521,1482.1333,655.829,1491.77,653.7958" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="63.1801" x="1398.19" y="630.3128">Checksum</text></g><!--link Tag to Source--><g class="link" data-entity-1="ent0011" data-entity-2="ent0010" data-link-type="dependency" data-source-line="88" id="lnk36"><path d="M467.51,609.9958 C524.2,609.9958 601.66,609.9958 654.81,609.9958" fill="none" id="Tag-to-Source" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="660.81,609.9958,651.81,605.9958,655.81,609.9958,651.81,613.9958,660.81,609.9958" style="stroke:#181818;stroke-width:1;"/></g><!--link Net to User--><g class="link" data-entity-1="ent0003" data-entity-2="ent0002" data-link-type="dependency" data-source-line="90" id="lnk37"><path d="M438.57,402.6958 C538.34,401.1458 851.65,391.4158 1102.19,330.9958 C1160.05,317.0458 1218.1148,292.834 1257.9448,274.594" fill="none" id="Net-to-User" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="1263.4,272.0958,1253.5518,272.2063,1258.854,274.1776,1256.8827,279.4799,1263.4,272.0958" style="stroke:#181818;stroke-width:1;"/></g><!--link Attacker to B1--><g class="link" data-entity-1="ent0006" data-entity-2="ent0013" data-link-type="dependency" data-source-line="91" id="lnk38"><path d="M127.21,621.8558 C178.25,631.6958 253.71,645.5558 319.93,654.9958 C563.18,689.6758 854.9304,689.5827 949.0904,688.5327" fill="none" id="Attacker-to-B1" style="stroke:#FF0000;stroke-width:1;"/><polygon fill="#FF0000" points="955.09,688.4658,946.046,684.5664,950.0903,688.5215,946.1352,692.5659,955.09,688.4658" style="stroke:#FF0000;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="82.7841" x="498.08" y="670.0928">compromises</text></g><!--link Attacker to Net--><g class="link" data-entity-1="ent0006" data-entity-2="ent0003" data-link-type="dependency" data-source-line="92" id="lnk39"><path d="M127.33,573.2258 C199.03,529.1958 311.3474,460.216 367.5174,425.716" fill="none" id="Attacker-to-Net" style="stroke:#FF0000;stroke-width:1;"/><polygon fill="#FF0000" points="372.63,422.5758,362.8676,423.8777,368.3695,425.1926,367.0545,430.6945,372.63,422.5758" style="stroke:#FF0000;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="49.647" x="209.93" y="460.0628">controls</text></g><!--link Attacker to Tag--><g class="link" data-entity-1="ent0006" data-entity-2="ent0011" data-link-type="dependency" data-source-line="93" id="lnk40"><path d="M127.33,609.9958 C188.24,609.9958 276.17,609.9958 337.49,609.9958" fill="none" id="Attacker-to-Tag" style="stroke:#FF0000;stroke-width:1;"/><polygon fill="#FF0000" points="343.49,609.9958,334.49,605.9958,338.49,609.9958,334.49,613.9958,343.49,609.9958" style="stroke:#FF0000;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="153.0881" x="157.93" y="605.8928">compromises private key</text></g><!--link User to Rebuild--><g class="link" data-entity-1="ent0002" data-entity-2="ent0022" data-link-type="dependency" data-source-line="98" id="lnk41"><path d="M1263.56,255.2158 C1163.01,260.8458 903.3606,275.3701 781.8506,282.1801" fill="none" id="User-to-Rebuild" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="775.86,282.5158,785.0697,286.0059,780.8522,282.236,784.6221,278.0185,775.86,282.5158" style="stroke:#181818;stroke-width:1;"/></g><!--link User to Log--><g class="link" data-entity-1="ent0002" data-entity-2="ent0018" data-link-type="dependency" data-source-line="99" id="lnk42"><path d="M1344.93,283.8358 C1359.07,295.0258 1374.99,307.8958 1389.19,319.9958 C1445.76,368.2058 1504.8975,422.9271 1541.6975,457.5071" fill="none" id="User-to-Log" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="1546.07,461.6158,1542.2504,452.5378,1542.4263,458.1919,1536.7721,458.3677,1546.07,461.6158" style="stroke:#181818;stroke-width:1;"/></g><!--link Keys to Policy--><g class="link" data-entity-1="ent0021" data-entity-2="ent0023" data-link-type="dependency" data-source-line="100" id="lnk43"><path d="M812.39,186.9958 C838.93,188.0758 861.5048,188.9948 887.6248,190.0448" fill="none" id="Keys-to-Policy" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="893.62,190.2858,884.7879,185.9275,888.624,190.085,884.4666,193.9211,893.62,190.2858" style="stroke:#181818;stroke-width:1;"/></g><!--link Rebuild to Policy--><g class="link" data-entity-1="ent0022" data-entity-2="ent0023" data-link-type="dependency" data-source-line="101" id="lnk44"><path d="M775.89,264.8858 C810.8,253.0558 849.3071,240.0104 888.0771,226.8804" fill="none" id="Rebuild-to-Policy" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="893.76,224.9558,883.9525,224.0541,889.0242,226.5596,886.5187,231.6313,893.76,224.9558" style="stroke:#181818;stroke-width:1;"/></g><!--link Policy to User--><g class="link" data-entity-1="ent0023" data-entity-2="ent0002" data-link-type="dependency" data-source-line="102" id="lnk45"><path d="M1078.54,211.0658 C1139.8,222.4958 1211.5017,235.8859 1257.6217,244.4859" fill="none" id="Policy-to-User" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="1263.52,245.5858,1255.4057,240.0038,1258.6047,244.6692,1253.9393,247.8682,1263.52,245.5858" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="100.1911" x="1111.19" y="214.1128">ACCEPT / REJECT</text></g><g class="caption" data-source-line="30"><text fill="#000000" font-family="sans-serif" font-size="18" font-weight="bold" lengthAdjust="spacing" textLength="543.7407" x="556.1323" y="777.2377">Threat Model - Reproducible Builds according to SLSA Level 4</text></g><g class="footer" data-source-line="18"><text fill="#888888" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="86.6457" x="1343.3879" y="799.4776">Advantages:</text><ellipse cx="1207.7509" cy="809.6995" fill="#888888" rx="2.5" ry="2.5"/><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="356.9197" x="1214.2509" y="814.2695">Consistency between source code and binaries through Reproducible Builds</text><ellipse cx="1253.8858" cy="823.3195" fill="#888888" rx="2.5" ry="2.5"/><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="264.6497" x="1260.3858" y="827.8895">No single trust anchor -> at least 2 independent builders</text><ellipse cx="1185.7959" cy="836.9395" fill="#888888" rx="2.5" ry="2.5"/><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="400.8296" x="1192.2959" y="841.5095">Subsequent manipulation detectable through checksums in the Git Transparency Log</text><ellipse cx="1236.9508" cy="850.5595" fill="#888888" rx="2.5" ry="2.5"/><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="298.5198" x="1243.4508" y="855.1295">Insider attacks made more difficult through multiple signatures</text><ellipse cx="1122.916" cy="864.1795" fill="#888888" rx="2.5" ry="2.5"/><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="526.5894" x="1129.416" y="868.7495">Key misuse detectable through checksums in the Git Transparency Log and temporal correlation via timestamps</text><ellipse cx="1323.3108" cy="877.7995" fill="#888888" rx="2.5" ry="2.5"/><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="125.7999" x="1329.8108" y="882.3695">Each box is a trust boarder</text></g><?plantuml-src fLRRRXit47tdLmni58cB2Ac590y1Ma1IRCEDxHYMsfUc3zJkI4jubzoINDb6qN_l6Ux5agK0lUX10ZdtcJE7AdaLAJhoPbr4oetdB1fdLRWtjjPULoGtsgvBfZyLqLHdzsll6flFNEay7P-Vdtyu_o0IvtFstUtxzp_We_xQycDT_BQByzaCoghDec0DJ-f7MXIUTQHhbtD98xhZshkyoSmIoKmRK-Q1T9OXhh5hAM9-DP_G5M-W_KurGMwDpRbcVDb85xQvlQ1WrbR7nZECRKxt_1IK3lJ0PKdu_NT1S0z7jREzD1PC2nGrzUuXi4VtIjQ12Kup3k4DROMwCOzVvc_e4o-DjYcP6uxJ-ITKJj_bElBheoTyHjVNepodelXOLKSd2iLq3UhQjNBehBHhac-qZNhDuQFwdcRE1XCYs-o9bXmVc2q5r_YCAKD3KxobiTeRT28M6CYwE5GzNDquacRYAlecH9Xc1MeS_KIOZjGNQRpJwQLOiXVRURCC_4SZjvMsfcvABG2ZdAC0I-BqmRE2i_lGL06-KYClJAI5rpO0GQcEAxU6oqiK1ky87W6b0ByeftAUWT_LocHD6GUV5GwcHf3diSF3PtwYoeG6W_clUQJ-HQvgvtL92GTTPHkZAPgAGzHLBT7ET5RGqZsI0PIw5YwTbdMHQNRpmoVJTLg-_uby-EmzAPr5JEheatkmfHFKVBMlVsLlLeRzoP6Wy1U1wV651pvwxKkBX2n7wABNdA5hhIxmsUlSB6vfpdu3uzDMjhWzFI0SKoyTzz99cbjAfH_bMpfxb9YwR0FrAdHynxbwrHakf7MS0zfLPU8GkJtYV4hVLXtlgevfw0t04BOB6SvmjwSotbKHD-gP8O-kjS466il-A77TbcZUxjuC8qNXG1PGrHRRIdQr1N9t7NSiz1eMYRr60cFEMplS9z9yjhfykODKcvfBv1FWuNbPJ_QokuKUJPBRwUa1qRGLZLy4x755saTUeLjXp_Eaaz04ASowrUgcVFeDrUc-wil8XtOILh9px4U5RDVGAA6DxQH1Yzui6y57oVaQOtqmiVXgwPhzFJGMM0R92_k5lj7hQUco-wp0N3j_oMWddI-8cjOVPC1sOxop5QQ0ZDmgSKW-RE1-ypzR2AbkbgN94b79Lil39ERBXAUSLjvL0zyYgrt6RLcbrh489mD4TwFSyIuau7oRLrgpJcdNiYMChAMtsY7B9scBysimUkZBhf0Oc0AIbEfqVacBkzRhRRAH2GfBq0WlXr3eHrg09-Lk_F9ERMsXYEG8cMTC3ZGNrDOA7fIhRjz424HldyPAJLkl0E2qjGU-r6Gxinv-QZ8-T3iej_WveBydKDZN9EhsNO5DqraOM0sCD_fDEE_tb3RCCrTXHdYiKDC17V4XIZPwLnxKaAWxRl1Vn6pmxq8GfbwzVJjmP5jHgx_6zW3GqDxeqkJFpoVjc8p_cObIwPKHtHvWmuKiPvgU73gWz53Tkcf_XduXtcGsExjTuEcuE_lvRBRu6m00?></g></svg>
\ No newline at end of file diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.png b/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.png Binary files differindex dae1c1b..1bf7971 100644 --- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.png +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.png diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg b/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg index 6f3cbac..16b0263 100644 --- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg @@ -1 +1 @@ -<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="1006px" preserveAspectRatio="none" style="width:818px;height:1006px;background:#FFFFFF;" version="1.1" viewBox="0 0 818 1006" width="818px" zoomAndPan="magnify"><title>Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)</title><defs/><g><g class="header" data-source-line="8"><text fill="#888888" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="242.507" x="562.0221" y="14.9659">Attack Flows and Trust Boundaries</text><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="169.4799" x="635.0492" y="29.7579">Timestamp: 2026-02-22 15:47 +0100</text></g><g class="title" data-source-line="6"><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="750.1033" x="27.2129" y="58.6538">Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)</text></g><!--cluster Internet--><g class="cluster" data-qualified-name="Internet" data-source-line="38" id="ent0002"><rect fill="none" height="133.07" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="94" x="557.18" y="262.8258"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="58.7718" x="574.7941" y="279.7918">Internet</text></g><!--cluster DMZ--><g class="cluster" data-qualified-name="DMZ" data-source-line="42" id="ent0004"><rect fill="none" height="93.07" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="310" x="113.18" y="496.3558"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="31.5559" x="252.4021" y="513.3218">DMZ</text></g><!--cluster Internal Network--><g class="cluster" data-qualified-name="Internal Network" data-source-line="47" id="ent0009"><rect fill="none" height="326.6" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="487" x="36.18" y="80.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="122.0235" x="218.6682" y="97.7218">Internal Network</text></g><!--entity Attacker--><g class="entity" data-qualified-name="Internet.Attacker" data-source-line="39" id="ent0003"><ellipse cx="604.1819" cy="309.3258" fill="#FF0000" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M604.1819,317.3258 L604.1819,344.3258 M591.1819,325.3258 L617.1819,325.3258 M604.1819,344.3258 L591.1819,359.3258 M604.1819,344.3258 L617.1819,359.3258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#FF0000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="61.6838" x="573.34" y="375.7918">Black Hat</text></g><!--entity WWW--><g class="entity" data-qualified-name="DMZ.WWW" data-source-line="43" id="ent0005"><rect fill="#F1F1F1" height="39.0679" rx="2.5" ry="2.5" style="stroke:#181818;stroke-width:0.5;" width="142.3875" x="128.98" y="534.3558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="122.3875" x="138.98" y="559.3218">Public Web Server:</text></g><g class="entity" data-qualified-name="DMZ.GMN6" data-source-line="44" id="ent0007"><path d="M306.84,540.0358 L306.84,549.8958 L271.62,553.8958 L306.84,557.8958 L306.84,567.7418 A0,0 0 0 0 306.84,567.7418 L407.5171,567.7418 A0,0 0 0 0 407.5171,567.7418 L407.5171,550.0358 L397.5171,540.0358 L306.84,540.0358 A0,0 0 0 0 306.84,540.0358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M397.5171,540.0358 L397.5171,550.0358 L407.5171,550.0358 L397.5171,540.0358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="79.6771" x="312.84" y="558.9328">T, I, DoS, EoP</text></g><!--entity BS--><g class="entity" data-qualified-name="Internal Network.BS" data-source-line="48" id="ent0010"><rect fill="#F1F1F1" height="39.0679" rx="2.5" ry="2.5" style="stroke:#181818;stroke-width:0.5;" width="93.8357" x="52.26" y="138.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="73.8357" x="62.26" y="163.7218">CVS RelEng</text></g><g class="entity" data-qualified-name="Internal Network.GMN11" data-source-line="49" id="ent0012"><path d="M180.68,144.4358 L180.68,154.2858 L146.19,158.2858 L180.68,162.2858 L180.68,172.1418 A0,0 0 0 0 180.68,172.1418 L253.6801,172.1418 A0,0 0 0 0 253.6801,172.1418 L253.6801,154.4358 L243.6801,144.4358 L180.68,144.4358 A0,0 0 0 0 180.68,144.4358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M243.6801,144.4358 L243.6801,154.4358 L253.6801,154.4358 L243.6801,144.4358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="52.0001" x="186.68" y="163.3328">T, R, EoP</text></g><!--entity Repo--><g class="entity" data-qualified-name="Internal Network.Repo" data-source-line="50" id="ent0014"><path d="M60.13,326.3258 C60.13,316.3258 129.1748,316.3258 129.1748,316.3258 C129.1748,316.3258 198.2195,316.3258 198.2195,326.3258 L198.2195,354.3937 C198.2195,364.3937 129.1748,364.3937 129.1748,364.3937 C129.1748,364.3937 60.13,364.3937 60.13,354.3937 L60.13,326.3258" fill="#F1F1F1" style="stroke:#181818;stroke-width:0.5;"/><path d="M60.13,326.3258 C60.13,336.3258 129.1748,336.3258 129.1748,336.3258 C129.1748,336.3258 198.2195,336.3258 198.2195,326.3258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="87.8916" x="70.13" y="355.2918">Release Repo</text><text fill="#FF0000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="26.5579" x="161.6616" y="355.2918">HVT</text></g><g class="entity" data-qualified-name="Internal Network.GMN15" data-source-line="51" id="ent0016"><path d="M369.36,326.5058 L369.36,336.3558 L198.58,340.3558 L369.36,344.3558 L369.36,354.2118 A0,0 0 0 0 369.36,354.2118 L498.9881,354.2118 A0,0 0 0 0 498.9881,354.2118 L498.9881,336.5058 L488.9881,326.5058 L369.36,326.5058 A0,0 0 0 0 369.36,326.5058" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M488.9881,326.5058 L488.9881,336.5058 L498.9881,336.5058 L488.9881,326.5058" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="108.6281" x="375.36" y="345.4028">S, T, R, I, DoS, EoP</text></g><!--entity Security Officer--><g class="entity" data-qualified-name="Internal Network.Security Officer" data-source-line="52" id="ent0018"><ellipse cx="339.1788" cy="127.2558" fill="#00FF00" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M339.1788,135.2558 L339.1788,162.2558 M326.1788,143.2558 L352.1788,143.2558 M339.1788,162.2558 L326.1788,177.2558 M339.1788,162.2558 L352.1788,177.2558" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="100.7576" x="288.8" y="193.7218">Security Officer</text></g><!--link BS to Repo--><g class="link" data-entity-1="ent0010" data-entity-2="ent0014" data-link-type="dependency" data-source-line="63" id="lnk19"><path d="M91.63,178.1958 C85.53,196.0058 78.78,223.3858 84.18,246.8258 C89.95,271.8958 100.4099,292.8748 111.1299,310.9548" fill="none" id="BS-to-Repo" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="114.19,316.1158,113.0406,306.3343,111.6399,311.815,106.1592,310.4144,114.19,316.1158" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="188.3962" x="85.18" y="242.7228">(DF1) Publish ISO + Checksums</text></g><!--link Security Officer to Repo--><g class="link" data-entity-1="ent0018" data-entity-2="ent0014" data-link-type="dependency" data-source-line="64" id="lnk20"><path d="M316.99,198.1058 C306.54,214.3358 293.09,232.6758 278.18,246.8258 C248.35,275.1158 213.8418,296.4679 182.8718,313.0179" fill="none" id="Security Officer-to-Repo" style="stroke:#008000;stroke-width:2;"/><polygon fill="#008000" points="177.58,315.8458,187.4029,315.1319,181.9898,313.4893,183.6324,308.0761,177.58,315.8458" style="stroke:#008000;stroke-width:2;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="188.2012" x="295.01" y="242.7228">(DF2) Sign Checksums (GnuPG)</text></g><!--link Repo to WWW--><g class="link" data-entity-1="ent0014" data-entity-2="ent0005" data-link-type="dependency" data-source-line="65" id="lnk21"><path d="M132.85,364.5058 C137.7,392.5258 147.41,440.8658 162.18,480.3558 C169.3,499.3958 177.2972,514.6129 185.6372,528.9129" fill="none" id="Repo-to-WWW" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="188.66,534.0958,187.5811,524.3062,186.141,529.7767,180.6705,528.3366,188.66,534.0958" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="131.5471" x="163.18" y="457.2528">(DF3) Deploy Artifacts</text></g><!--link WWW to Repo--><g class="link" data-entity-1="ent0005" data-entity-2="ent0014" data-link-type="dependency" data-source-line="77" id="lnk24"><path d="M128.73,543.5358 C89.66,534.3758 44.4,516.2358 20.18,480.3558 C6,459.3658 8.86,446.0258 20.18,423.3558 C32.81,398.0358 52.2623,381.5848 74.8923,367.9348" fill="none" id="WWW-to-Repo" style="stroke:#800080;stroke-width:1;stroke-dasharray:7,7;"/><polygon fill="#800080" points="80.03,364.8358,70.2574,366.0591,75.7486,367.4183,74.3894,372.9095,80.03,364.8358" style="stroke:#800080;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="115.1281" x="21.18" y="438.2528">(AT2) Pivot to Repo</text><path d="M56.7651,448.0618 L56.7651,475.0618 L99.7651,475.0618 L99.7651,458.0618 L89.7651,448.0618 L56.7651,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M89.7651,448.0618 L89.7651,458.0618 L99.7651,458.0618 L89.7651,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="22.958" x="62.7651" y="466.9589">EoP</text></g><!--link WWW to Attacker--><g class="link" data-entity-1="ent0005" data-entity-2="ent0003" data-link-type="dependency" data-source-line="66" id="lnk22"><path d="M226.65,533.8658 C254.94,513.4858 296.14,483.6058 299.18,480.3558 C319.62,458.4558 309.25,438.3758 335.18,423.3558 C371.36,402.3958 484.52,431.3058 523.18,415.3558 C542.02,407.5858 555.0498,397.6506 568.7398,383.7506" fill="none" id="WWW-to-Attacker" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="572.95,379.4758,563.7848,383.0812,569.4415,383.0382,569.4845,388.6949,572.95,379.4758" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="277.5113" x="336.18" y="457.2528">(DF4) Distribute ISO + Checksums + Signature</text></g><!--link Attacker to WWW--><g class="link" data-entity-1="ent0003" data-entity-2="ent0005" data-link-type="dependency" data-source-line="74" id="lnk23"><path d="M622.7,380.3558 C634.53,411.6458 643.42,454.4958 618.18,480.3558 C605.41,493.4458 306.5,482.5058 289.18,488.3558 C261.87,497.5858 240.2273,514.3045 223.4373,529.8145" fill="none" id="Attacker-to-WWW" style="stroke:#FF0000;stroke-width:1;stroke-dasharray:7,7;"/><polygon fill="#FF0000" points="219.03,533.8858,228.3552,530.7171,222.7028,530.4931,222.9268,524.8406,219.03,533.8858" style="stroke:#FF0000;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="175.1492" x="635.38" y="438.2528">(AT1) Exploit Webserver Vuln</text><path d="M700.9756,448.0618 L700.9756,475.0618 L743.9756,475.0618 L743.9756,458.0618 L733.9756,448.0618 L700.9756,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M733.9756,448.0618 L733.9756,458.0618 L743.9756,458.0618 L733.9756,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="22.958" x="706.9756" y="466.9589">EoP</text></g><!--link Repo to Repo--><g class="link" data-entity-1="ent0014" data-entity-2="ent0014" data-link-type="dependency" data-source-line="80" id="lnk25"><path d="M198.71,321.1358 C218.23,321.9758 233.22,328.3858 233.22,340.3558 C233.22,352.3358 224.2243,358.4748 204.7043,359.3248" fill="none" id="Repo-to-Repo" style="stroke:#FFA500;stroke-width:2;stroke-dasharray:7,7;"/><polygon fill="#FFA500" points="198.71,359.5858,207.8755,363.1905,203.7053,359.3683,207.5275,355.1981,198.71,359.5858" style="stroke:#FFA500;stroke-width:2;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="106.8601" x="239.22" y="309.2528">(AT3) Replace ISO</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="85.5921" x="249.854" y="326.9589">&& Checksum</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="81.6531" x="251.8235" y="344.6649">&& Signature</text><path d="M258.464,359.4739 L258.464,386.4739 L326.464,386.4739 L326.464,369.4739 L316.464,359.4739 L258.464,359.4739" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M316.464,359.4739 L316.464,369.4739 L326.464,369.4739 L316.464,359.4739" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="47.372" x="264.464" y="378.3709">Tamper</text></g><g class="legend" data-source-line="13"><rect fill="#DDDDDD" height="380.2904" rx="7.5" ry="7.5" style="stroke:#000000;stroke-width:1;" width="242.5111" x="550.0181" y="606.4258"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="48.5098" x="558.6581" y="628.3918">STRIDE</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="90.6777" x="614.4478" y="628.3918">Abbreviation</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="7.686" x="558.6581" y="647.4597">S</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="58.9258" x="614.4478" y="647.4597">Spoofing</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="7.784" x="558.6581" y="666.5276">T</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="71.8897" x="614.4478" y="666.5276">Tampering</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="8.708" x="558.6581" y="685.5955">R</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="79.7297" x="614.4478" y="685.5955">Repudiation</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="4.746" x="558.6581" y="704.6634">I</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="151.2134" x="614.4478" y="704.6634">Information Disclosure</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="26.3759" x="555.0181" y="723.7313">DoS</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="109.1156" x="614.4478" y="723.7313">Denial of Service</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="24.7239" x="555.0181" y="742.7993">EoP</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="137.2135" x="614.4478" y="742.7993">Elevation of Privilege</text><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="613.4258" y2="613.4258"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="632.4937" y2="632.4937"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="651.5617" y2="651.5617"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="670.6296" y2="670.6296"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="689.6975" y2="689.6975"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="708.7654" y2="708.7654"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="727.8333" y2="727.8333"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="746.9012" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="555.0181" y1="613.4258" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="610.8079" x2="610.8079" y1="613.4258" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="769.3012" x2="769.3012" y1="613.4258" y2="746.9012"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="3.64" x="555.0181" y="763.8672"> </text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="128.9115" x="555.0181" y="782.9351">Relationship Colour</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="46.0178" x="558.6581" y="804.003">Colour</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="91.3356" x="643.5817" y="804.003">Attack Phase</text><rect fill="#FF0000" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="808.105"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="25.2139" x="558.6581" y="823.0709">Red</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="85.3297" x="643.5817" y="823.0709">Initial Exploit</text><rect fill="#800080" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="827.1729"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="81.2837" x="558.6581" y="842.1388">Deep Purple</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="119.8955" x="643.5817" y="842.1388">Lateral Movement</text><rect fill="#FFA500" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="846.2408"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="49.7278" x="558.6581" y="861.2068">Orange</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="117.9216" x="643.5817" y="861.2068">Integrity Violation</text><rect fill="#008000" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="865.3087"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="40.4178" x="558.6581" y="880.2747">Green</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="123.0875" x="643.5817" y="880.2747">Legitimate Signing</text><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="789.0371" y2="789.0371"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="808.105" y2="808.105"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="827.1729" y2="827.1729"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="846.2408" y2="846.2408"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="865.3087" y2="865.3087"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="884.3767" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="555.0181" y1="789.0371" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="639.9417" x2="639.9417" y1="789.0371" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="770.3092" x2="770.3092" y1="789.0371" y2="884.3767"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="3.64" x="555.0181" y="901.3426"> </text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="201.6272" x="555.0181" y="920.4105">LightGray box: Trust Boundary</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="232.5111" x="555.0181" y="939.4784">Notes on Relation: STRIDE category</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="89.8517" x="555.0181" y="958.5463">DF: Data Flow</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="98.8956" x="555.0181" y="977.6143">AT: Attack Path</text></g><?plantuml-src rLLjQzj84Fvy-oicDjV4d4tJtXMAI09E_593d1ZB9D2q7zRII5eixOhTbLDpxd-_sLNyrhhqkFjmdC0WpSu-y_8yCuPJMA2G20dNSvGd9-mKJco61K8X2bIfvcN6c5a8MNBD2p0PZzMpa2dTo0qoDXCsH-XQowC537Br35p6CDELiN2jAXbpBT04K70foYhd5cCOXVSW2fxIlRlUmKcKORGmLM5U6v5ARYkD1ix2sx3xfiLOXZn6pIxtmvcZyIYj0etbHHd0hp51dpLMz7J6uquSms8H50LyRBI0eOnVK5cEANs15cbcsVeImjbqrEi3lNNdSurBmQrGSitM40BzIgKIrmTdc95XHi5GRonJiaonhEBwbhUDo3QIYT95RUi94-NAK8tkkAV2DVHG2fw3IY14lHIHF-choHhwEIxhQtGuqM8fNBvqpAQO-mEJYH9kLAugxTAlttpwTRSc6JT8S1VD93cdvueIZ5r6mhgO_IzbheG5x_6Upj-JHm-nX4cbonpNS4jzrEGvLaiIY7nnJHB-pe7TQovJT7WMKoti2Xw4ohVLNpGTedCSQaH9Q9XIO6e5GaXSrurZjwxxGyrNC5TVWaDUL-nEMT830Mvg3ZOiHOIJAdBf3GBeSSkzE5Xt5cpBvpPpTDSqCnBwwJzy66CQ8qlbal8RhbujqJQWcTCa1RiA_cG0FB9AG-CY8ZPqe36-kivTDX-ulNZjZLSDuEObITJG70mSEUmh74JfZJyU3x3dCwdckOZW4UTUFQW33_tu-4X-lqZgNIrkfo0o0hMt3QCsaFBQG29ZNuyKHdpVeNrMUl7J-3SFeIEcBrCVzphyFknrM4UT-e3W76Ww-PoK2GswY-w5vaR1NiS-FCmEUkNEsJV0_au005HAZRzVs9Q74AFAQ_C-IMYwDDLqVkx6mTNE_fKe_fkhZ55BEvshJGFEUeCtBV1AC9bVjB_1pMQfiYFrTvwQgHl8jir4j91epENRpmTuRrj-G7SmS3QKrMJOOjx71Q_LHBw_jsXbq1vPGLTRaL3N3NE7pcahSU_vHyljFwl5l28UlqcKtiFD_lz_qh8jblfB6cx7t6GOVzxrgZiZdZOxbqRM-8c5XogNp4kRjXoDsoAe1wNkubEpzBju3sx3KtT6F4t4KbcmgXwHOp0rPKzDvRVr2ywFkE_EY4_we8tbAVeaNxtQakG_TYmT1gl_31rnHmCU1Y4fZ5KiajLE09yaNJqAUGf_3_JTBlFXPBXBzCV8zFm5?></g></svg>
\ No newline at end of file +<?plantuml 1.2026.1?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentStyleType="text/css" data-diagram-type="DESCRIPTION" height="1006px" preserveAspectRatio="none" style="width:818px;height:1006px;background:#FFFFFF;" version="1.1" viewBox="0 0 818 1006" width="818px" zoomAndPan="magnify"><title>Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)</title><defs/><g><g class="header" data-source-line="8"><text fill="#888888" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="242.507" x="562.0221" y="14.9659">Attack Flows and Trust Boundaries</text><text fill="#888888" font-family="sans-serif" font-size="10" lengthAdjust="spacing" textLength="169.4799" x="635.0492" y="29.7579">Timestamp: 2026-02-23 18:52 +0100</text></g><g class="title" data-source-line="6"><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="750.1033" x="27.2129" y="58.6538">Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)</text></g><!--cluster Internet--><g class="cluster" data-qualified-name="Internet" data-source-line="38" id="ent0002"><rect fill="none" height="133.07" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="94" x="557.18" y="262.8258"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="58.7718" x="574.7941" y="279.7918">Internet</text></g><!--cluster DMZ--><g class="cluster" data-qualified-name="DMZ" data-source-line="42" id="ent0004"><rect fill="none" height="93.07" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="310" x="113.18" y="496.3558"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="31.5559" x="252.4021" y="513.3218">DMZ</text></g><!--cluster Internal Network--><g class="cluster" data-qualified-name="Internal Network" data-source-line="47" id="ent0009"><rect fill="none" height="326.6" rx="2.5" ry="2.5" style="stroke:#D3D3D3;stroke-width:1;" width="487" x="36.18" y="80.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="122.0235" x="218.6682" y="97.7218">Internal Network</text></g><!--entity Attacker--><g class="entity" data-qualified-name="Internet.Attacker" data-source-line="39" id="ent0003"><ellipse cx="604.1819" cy="309.3258" fill="#FF0000" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M604.1819,317.3258 L604.1819,344.3258 M591.1819,325.3258 L617.1819,325.3258 M604.1819,344.3258 L591.1819,359.3258 M604.1819,344.3258 L617.1819,359.3258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#FF0000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="61.6838" x="573.34" y="375.7918">Black Hat</text></g><!--entity WWW--><g class="entity" data-qualified-name="DMZ.WWW" data-source-line="43" id="ent0005"><rect fill="#F1F1F1" height="39.0679" rx="2.5" ry="2.5" style="stroke:#181818;stroke-width:0.5;" width="142.3875" x="128.98" y="534.3558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="122.3875" x="138.98" y="559.3218">Public Web Server:</text></g><g class="entity" data-qualified-name="DMZ.GMN6" data-source-line="44" id="ent0007"><path d="M306.84,540.0358 L306.84,549.8958 L271.62,553.8958 L306.84,557.8958 L306.84,567.7418 A0,0 0 0 0 306.84,567.7418 L407.5171,567.7418 A0,0 0 0 0 407.5171,567.7418 L407.5171,550.0358 L397.5171,540.0358 L306.84,540.0358 A0,0 0 0 0 306.84,540.0358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M397.5171,540.0358 L397.5171,550.0358 L407.5171,550.0358 L397.5171,540.0358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="79.6771" x="312.84" y="558.9328">T, I, DoS, EoP</text></g><!--entity BS--><g class="entity" data-qualified-name="Internal Network.BS" data-source-line="48" id="ent0010"><rect fill="#F1F1F1" height="39.0679" rx="2.5" ry="2.5" style="stroke:#181818;stroke-width:0.5;" width="93.8357" x="52.26" y="138.7558"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="73.8357" x="62.26" y="163.7218">CVS RelEng</text></g><g class="entity" data-qualified-name="Internal Network.GMN11" data-source-line="49" id="ent0012"><path d="M180.68,144.4358 L180.68,154.2858 L146.19,158.2858 L180.68,162.2858 L180.68,172.1418 A0,0 0 0 0 180.68,172.1418 L253.6801,172.1418 A0,0 0 0 0 253.6801,172.1418 L253.6801,154.4358 L243.6801,144.4358 L180.68,144.4358 A0,0 0 0 0 180.68,144.4358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M243.6801,144.4358 L243.6801,154.4358 L253.6801,154.4358 L243.6801,144.4358" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="52.0001" x="186.68" y="163.3328">T, R, EoP</text></g><!--entity Repo--><g class="entity" data-qualified-name="Internal Network.Repo" data-source-line="50" id="ent0014"><path d="M60.13,326.3258 C60.13,316.3258 129.1748,316.3258 129.1748,316.3258 C129.1748,316.3258 198.2195,316.3258 198.2195,326.3258 L198.2195,354.3937 C198.2195,364.3937 129.1748,364.3937 129.1748,364.3937 C129.1748,364.3937 60.13,364.3937 60.13,354.3937 L60.13,326.3258" fill="#F1F1F1" style="stroke:#181818;stroke-width:0.5;"/><path d="M60.13,326.3258 C60.13,336.3258 129.1748,336.3258 129.1748,336.3258 C129.1748,336.3258 198.2195,336.3258 198.2195,326.3258" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="87.8916" x="70.13" y="355.2918">Release Repo</text><text fill="#FF0000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="26.5579" x="161.6616" y="355.2918">HVT</text></g><g class="entity" data-qualified-name="Internal Network.GMN15" data-source-line="51" id="ent0016"><path d="M369.36,326.5058 L369.36,336.3558 L198.58,340.3558 L369.36,344.3558 L369.36,354.2118 A0,0 0 0 0 369.36,354.2118 L498.9881,354.2118 A0,0 0 0 0 498.9881,354.2118 L498.9881,336.5058 L488.9881,326.5058 L369.36,326.5058 A0,0 0 0 0 369.36,326.5058" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M488.9881,326.5058 L488.9881,336.5058 L498.9881,336.5058 L488.9881,326.5058" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="108.6281" x="375.36" y="345.4028">S, T, R, I, DoS, EoP</text></g><!--entity Security Officer--><g class="entity" data-qualified-name="Internal Network.Security Officer" data-source-line="52" id="ent0018"><ellipse cx="339.1788" cy="127.2558" fill="#00FF00" rx="8" ry="8" style="stroke:#181818;stroke-width:0.5;"/><path d="M339.1788,135.2558 L339.1788,162.2558 M326.1788,143.2558 L352.1788,143.2558 M339.1788,162.2558 L326.1788,177.2558 M339.1788,162.2558 L352.1788,177.2558" fill="none" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="100.7576" x="288.8" y="193.7218">Security Officer</text></g><!--link BS to Repo--><g class="link" data-entity-1="ent0010" data-entity-2="ent0014" data-link-type="dependency" data-source-line="63" id="lnk19"><path d="M91.63,178.1958 C85.53,196.0058 78.78,223.3858 84.18,246.8258 C89.95,271.8958 100.4099,292.8748 111.1299,310.9548" fill="none" id="BS-to-Repo" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="114.19,316.1158,113.0406,306.3343,111.6399,311.815,106.1592,310.4144,114.19,316.1158" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="188.3962" x="85.18" y="242.7228">(DF1) Publish ISO + Checksums</text></g><!--link Security Officer to Repo--><g class="link" data-entity-1="ent0018" data-entity-2="ent0014" data-link-type="dependency" data-source-line="64" id="lnk20"><path d="M316.99,198.1058 C306.54,214.3358 293.09,232.6758 278.18,246.8258 C248.35,275.1158 213.8418,296.4679 182.8718,313.0179" fill="none" id="Security Officer-to-Repo" style="stroke:#008000;stroke-width:2;"/><polygon fill="#008000" points="177.58,315.8458,187.4029,315.1319,181.9898,313.4893,183.6324,308.0761,177.58,315.8458" style="stroke:#008000;stroke-width:2;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="188.2012" x="295.01" y="242.7228">(DF2) Sign Checksums (GnuPG)</text></g><!--link Repo to WWW--><g class="link" data-entity-1="ent0014" data-entity-2="ent0005" data-link-type="dependency" data-source-line="65" id="lnk21"><path d="M132.85,364.5058 C137.7,392.5258 147.41,440.8658 162.18,480.3558 C169.3,499.3958 177.2972,514.6129 185.6372,528.9129" fill="none" id="Repo-to-WWW" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="188.66,534.0958,187.5811,524.3062,186.141,529.7767,180.6705,528.3366,188.66,534.0958" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="131.5471" x="163.18" y="457.2528">(DF3) Deploy Artifacts</text></g><!--link WWW to Repo--><g class="link" data-entity-1="ent0005" data-entity-2="ent0014" data-link-type="dependency" data-source-line="77" id="lnk24"><path d="M128.73,543.5358 C89.66,534.3758 44.4,516.2358 20.18,480.3558 C6,459.3658 8.86,446.0258 20.18,423.3558 C32.81,398.0358 52.2623,381.5848 74.8923,367.9348" fill="none" id="WWW-to-Repo" style="stroke:#800080;stroke-width:1;stroke-dasharray:7,7;"/><polygon fill="#800080" points="80.03,364.8358,70.2574,366.0591,75.7486,367.4183,74.3894,372.9095,80.03,364.8358" style="stroke:#800080;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="115.1281" x="21.18" y="438.2528">(AT2) Pivot to Repo</text><path d="M56.7651,448.0618 L56.7651,475.0618 L99.7651,475.0618 L99.7651,458.0618 L89.7651,448.0618 L56.7651,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M89.7651,448.0618 L89.7651,458.0618 L99.7651,458.0618 L89.7651,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="22.958" x="62.7651" y="466.9589">EoP</text></g><!--link WWW to Attacker--><g class="link" data-entity-1="ent0005" data-entity-2="ent0003" data-link-type="dependency" data-source-line="66" id="lnk22"><path d="M226.65,533.8658 C254.94,513.4858 296.14,483.6058 299.18,480.3558 C319.62,458.4558 309.25,438.3758 335.18,423.3558 C371.36,402.3958 484.52,431.3058 523.18,415.3558 C542.02,407.5858 555.0498,397.6506 568.7398,383.7506" fill="none" id="WWW-to-Attacker" style="stroke:#181818;stroke-width:1;"/><polygon fill="#181818" points="572.95,379.4758,563.7848,383.0812,569.4415,383.0382,569.4845,388.6949,572.95,379.4758" style="stroke:#181818;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="277.5113" x="336.18" y="457.2528">(DF4) Distribute ISO + Checksums + Signature</text></g><!--link Attacker to WWW--><g class="link" data-entity-1="ent0003" data-entity-2="ent0005" data-link-type="dependency" data-source-line="74" id="lnk23"><path d="M622.7,380.3558 C634.53,411.6458 643.42,454.4958 618.18,480.3558 C605.41,493.4458 306.5,482.5058 289.18,488.3558 C261.87,497.5858 240.2273,514.3045 223.4373,529.8145" fill="none" id="Attacker-to-WWW" style="stroke:#FF0000;stroke-width:1;stroke-dasharray:7,7;"/><polygon fill="#FF0000" points="219.03,533.8858,228.3552,530.7171,222.7028,530.4931,222.9268,524.8406,219.03,533.8858" style="stroke:#FF0000;stroke-width:1;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="175.1492" x="635.38" y="438.2528">(AT1) Exploit Webserver Vuln</text><path d="M700.9756,448.0618 L700.9756,475.0618 L743.9756,475.0618 L743.9756,458.0618 L733.9756,448.0618 L700.9756,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M733.9756,448.0618 L733.9756,458.0618 L743.9756,458.0618 L733.9756,448.0618" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="22.958" x="706.9756" y="466.9589">EoP</text></g><!--link Repo to Repo--><g class="link" data-entity-1="ent0014" data-entity-2="ent0014" data-link-type="dependency" data-source-line="80" id="lnk25"><path d="M198.71,321.1358 C218.23,321.9758 233.22,328.3858 233.22,340.3558 C233.22,352.3358 224.2243,358.4748 204.7043,359.3248" fill="none" id="Repo-to-Repo" style="stroke:#FFA500;stroke-width:2;stroke-dasharray:7,7;"/><polygon fill="#FFA500" points="198.71,359.5858,207.8755,363.1905,203.7053,359.3683,207.5275,355.1981,198.71,359.5858" style="stroke:#FFA500;stroke-width:2;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="106.8601" x="239.22" y="309.2528">(AT3) Replace ISO</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="85.5921" x="249.854" y="326.9589">&& Checksum</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="81.6531" x="251.8235" y="344.6649">&& Signature</text><path d="M258.464,359.4739 L258.464,386.4739 L326.464,386.4739 L326.464,369.4739 L316.464,359.4739 L258.464,359.4739" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><path d="M316.464,359.4739 L316.464,369.4739 L326.464,369.4739 L316.464,359.4739" fill="#FEFFDD" style="stroke:#181818;stroke-width:0.5;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacing" textLength="47.372" x="264.464" y="378.3709">Tamper</text></g><g class="legend" data-source-line="13"><rect fill="#DDDDDD" height="380.2904" rx="7.5" ry="7.5" style="stroke:#000000;stroke-width:1;" width="242.5111" x="550.0181" y="606.4258"/><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="48.5098" x="558.6581" y="628.3918">STRIDE</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="90.6777" x="614.4478" y="628.3918">Abbreviation</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="7.686" x="558.6581" y="647.4597">S</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="58.9258" x="614.4478" y="647.4597">Spoofing</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="7.784" x="558.6581" y="666.5276">T</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="71.8897" x="614.4478" y="666.5276">Tampering</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="8.708" x="558.6581" y="685.5955">R</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="79.7297" x="614.4478" y="685.5955">Repudiation</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="4.746" x="558.6581" y="704.6634">I</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="151.2134" x="614.4478" y="704.6634">Information Disclosure</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="26.3759" x="555.0181" y="723.7313">DoS</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="109.1156" x="614.4478" y="723.7313">Denial of Service</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="24.7239" x="555.0181" y="742.7993">EoP</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="137.2135" x="614.4478" y="742.7993">Elevation of Privilege</text><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="613.4258" y2="613.4258"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="632.4937" y2="632.4937"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="651.5617" y2="651.5617"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="670.6296" y2="670.6296"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="689.6975" y2="689.6975"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="708.7654" y2="708.7654"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="727.8333" y2="727.8333"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="769.3012" y1="746.9012" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="555.0181" y1="613.4258" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="610.8079" x2="610.8079" y1="613.4258" y2="746.9012"/><line style="stroke:#000000;stroke-width:1;" x1="769.3012" x2="769.3012" y1="613.4258" y2="746.9012"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="3.64" x="555.0181" y="763.8672"> </text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="128.9115" x="555.0181" y="782.9351">Relationship Colour</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="46.0178" x="558.6581" y="804.003">Colour</text><text fill="#000000" font-family="sans-serif" font-size="14" font-weight="bold" lengthAdjust="spacing" textLength="91.3356" x="643.5817" y="804.003">Attack Phase</text><rect fill="#FF0000" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="808.105"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="25.2139" x="558.6581" y="823.0709">Red</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="85.3297" x="643.5817" y="823.0709">Initial Exploit</text><rect fill="#800080" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="827.1729"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="81.2837" x="558.6581" y="842.1388">Deep Purple</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="119.8955" x="643.5817" y="842.1388">Lateral Movement</text><rect fill="#FFA500" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="846.2408"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="49.7278" x="558.6581" y="861.2068">Orange</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="117.9216" x="643.5817" y="861.2068">Integrity Violation</text><rect fill="#008000" height="19.0679" style="stroke:none;stroke-width:1;" width="84.9237" x="555.0181" y="865.3087"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="40.4178" x="558.6581" y="880.2747">Green</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="123.0875" x="643.5817" y="880.2747">Legitimate Signing</text><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="789.0371" y2="789.0371"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="808.105" y2="808.105"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="827.1729" y2="827.1729"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="846.2408" y2="846.2408"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="865.3087" y2="865.3087"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="770.3092" y1="884.3767" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="555.0181" x2="555.0181" y1="789.0371" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="639.9417" x2="639.9417" y1="789.0371" y2="884.3767"/><line style="stroke:#000000;stroke-width:1;" x1="770.3092" x2="770.3092" y1="789.0371" y2="884.3767"/><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="3.64" x="555.0181" y="901.3426"> </text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="201.6272" x="555.0181" y="920.4105">LightGray box: Trust Boundary</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="232.5111" x="555.0181" y="939.4784">Notes on Relation: STRIDE category</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="89.8517" x="555.0181" y="958.5463">DF: Data Flow</text><text fill="#000000" font-family="sans-serif" font-size="14" lengthAdjust="spacing" textLength="98.8956" x="555.0181" y="977.6143">AT: Attack Path</text></g><?plantuml-src rLLjQzj84Fvy-oicDjV4d4tJtXMAI09E_593d1ZB9D2q7zRII5eixOhTbLDpxd-_sLNyrhhqkFjmdC0WpSu-y_8yCuPJMA2G20dNSvGd9-mKJco61K8X2bIfvcN6c5a8MNBD2p0PZzMpa2dTo0qoDXCsH-XQowC537Br35p6CDELiN2jAXbpBT04K70foYhd5cCOXVSW2fxIlRlUmKcKORGmLM5U6v5ARYkD1ix2sx3xfiLOXZn6pIxtmvcZyIYj0etbHHd0hp51dpLMz7J6uquSms8H50LyRBI0eOnVK5cEANs15cbcsVeImjbqrEi3lNNdSurBmQrGSitM40BzIgKIrmTdc95XHi5GRonJiaonhEBwbhUDo3QIYT95RUi94-NAK8tkkAV2DVHG2fw3IY14lHIHF-choHhwEIxhQtGuqM8fNBvqpAQO-mEJYH9kLAugxTAlttpwTRSc6JT8S1VD93cdvueIZ5r6mhgO_IzbheG5x_6Upj-JHm-nX4cbonpNS4jzrEGvLaiIY7nnJHB-pe7TQovJT7WMKoti2Xw4ohVLNpGTedCSQaH9Q9XIO6e5GaXSrurZjwxxGyrNC5TVWaDUL-nEMT830Mvg3ZOiHOIJAdBf3GBeSSkzE5Xt5cpBvpPpTDSqCnBwwJzy66CQ8qlbal8RhbujqJQWcTCa1RiA_cG0FB9AG-CY8ZPqe36-kivTDX-ulNZjZLSDuEObITJG70mSEUmh74JfZJyU3x3dCwdckOZW4UTUFQW33_tu-4X-lqZgNIrkfo0o0hMt3QCsaFBQG29ZNuyKHdpVeNrMUl7J-3SFeIEcBrCVzphyFknrM4UT-e3W76Ww-PoK2GswY-w5vaR1NiS-FCmEUkNEsJV0_au005HAZRzVs9Q74AFAQ_C-IMYwDDLqVkx6mTNE_fKe_fkhZ55BEvshJGFEUeCtBV1AC9bVjB_1pMQfiYFrTvwQgHl8jir4j91epENRpmTuRrj-G7SmS3QKrMJOOjx71Q_LHBw_jsXbq1vPGLTRaL3N3NE7pcahSU_vHyljFwl5l28UlqcKtiFD_lz_qh8jblfB6cx7t6GOVzxrgZiZdZOxbqRM-8c5XogNp4kRjXoDsoAe1wNkubEpzBju3sx3KtT6F4t4KbcmgXwHOp0rPKzDvRVr2ywFkE_EY4_we8tbAVeaNxtQakG_TYmT1gl_31rnHmCU1Y4fZ5KiajLE09yaNJqAUGf_3_JTBlFXPBXBzCV8zFm5?></g></svg>
\ No newline at end of file diff --git a/PlantUML-ModelingTrust/README.adoc b/PlantUML-ModelingTrust/README.adoc index 39940da..79ee029 100644 --- a/PlantUML-ModelingTrust/README.adoc +++ b/PlantUML-ModelingTrust/README.adoc @@ -18,6 +18,13 @@ I will extend the process from SLSA Level 1 to SLSA Level 4, which will include += Applied Examples: GnuPG Key Signing + +The sub directory `GnuPG-WoT-Download` contains applied examples of the trust modeling. It is work in progress, but already contains some diagrams. + +My goal is to model a reproducible builds distribution process with a zero trust architecture. And threat model it in PASTA as well as STRIDE. + + == Archimate Diagrams diff --git a/README.adoc b/README.adoc index e6a83fa..7412102 100644 --- a/README.adoc +++ b/README.adoc @@ -2,5 +2,7 @@ . `GetPlantUML-CheatSheets.sh` .. downloads some useful ArchiMate cheat sheets/overviews/examples via `wget` -. PlantUML-ModelingTrust +. `PlantUML-ModelingTrust` .. Modeling Trust/Risk/Trust Anchors, Chains, and Boarders in Archimate +. `PlantUML-ModelingTrust/GnuPG-WoT-Download/` +.. A GnuPG Key Signing Party and Download Signatures (SLSA1) modeled in Archimate |
