%% You should probably cite draft-ietf-lamps-csr-attestation-29 instead of this revision.
@techreport{ietf-lamps-csr-attestation-23,
    number =    {draft-ietf-lamps-csr-attestation-23},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-ietf-lamps-csr-attestation/23/},
    author =    {Mike Ounsworth and Hannes Tschofenig and Henk Birkholz and Monty Wiseman and Ned Smith},
    title =     {{Use of Remote Attestation with Certification Signing Requests}},
    pagetotal = 16,
    year =      ,
    month =     ,
    day =       ,
    abstract =  {Certification Authorities (CAs) issuing certificates to Public Key Infrastructure (PKI) end entities may require a certificate signing request (CSR) to include additional verifiable information to confirm policy compliance. For example, a CA may require an end entity to demonstrate that the private key corresponding to a CSR's public key is secured by a hardware security module (HSM), is not exportable, etc. The process of generating, transmitting, and verifying additional information required by the CA is called remote attestation. While work is currently underway to standardize various aspects of remote attestation, a variety of proprietary mechanisms have been in use for years, particularly regarding protection of private keys. This specification defines an ASN.1 structure for remote attestation that can accommodate proprietary and standardized attestation mechanisms, as well as an attribute and an extension to carry the structure in PKCS\#10 and Certificate Request Message Format (CRMF) messages, respectively.},
}