Last Call: <draft-ietf-suit-firmware-encryption-20.txt> (Encrypted Payloads in SUIT Manifests) to Proposed Standard

The IESG <iesg-secretary@ietf.org> Fri, 12 July 2024 17:55 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Subject: Last Call: <draft-ietf-suit-firmware-encryption-20.txt> (Encrypted Payloads in SUIT Manifests) to Proposed Standard
Auto-Submitted: auto-generated
Precedence: bulk
Sender: iesg-secretary@ietf.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
Message-ID: <172080694150.172882.17767548186434130473@dt-datatracker-6985b689b-qpmzb>
Date: Fri, 12 Jul 2024 10:55:41 -0700
Message-ID-Hash: P7A552BN5SLFYUSS7FSCCAAI7JZ2LDED
CC: akira.tsukamoto@gmail.com, david.waltermire@nist.gov, draft-ietf-suit-firmware-encryption@ietf.org, suit-chairs@ietf.org, suit@ietf.org
Reply-To: last-call@ietf.org
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-announce/qgM0CuRNmD3RrQhANXaGVKy0yZ0>

The IESG has received a request from the Software Updates for Internet of
Things WG (suit) to consider the following document: - 'Encrypted Payloads in
SUIT Manifests'
  <draft-ietf-suit-firmware-encryption-20.txt> as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits final
comments on this action. Please send substantive comments to the
last-call@ietf.org mailing lists by 2024-08-02. Exceptionally, comments may
be sent to iesg@ietf.org instead. In either case, please retain the beginning
of the Subject line to allow automated sorting.

Abstract


   This document specifies techniques for encrypting software, firmware,
   machine learning models, and personalization data by utilizing the
   IETF SUIT manifest.  Key agreement is provided by ephemeral-static
   (ES) Diffie-Hellman (DH) and AES Key Wrap (AES-KW).  ES-DH uses
   public key cryptography while AES-KW uses a pre-shared key.
   Encryption of the plaintext is accomplished with conventional
   symmetric key cryptography.




The file can be obtained via
https://datatracker.ietf.org/doc/draft-ietf-suit-firmware-encryption/



No IPR declarations have been submitted directly on this I-D.


The document contains these normative downward references.
See RFC 3967 for additional information: 
    rfc9053: CBOR Object Signing and Encryption (COSE): Initial Algorithms (Informational - Internet Engineering Task Force (IETF))

Last Call: <draft-ietf-suit-firmware-encryption-2… The IESG