Re: [Suit] Firmware Update Paper

[Michael Richardson <[e-mail]>]

Michael Richardson <[e-mail]> wrote:
    > Emmanuel Baccelli <[e-mail]> wrote:
    >> in the paper [1] for our experiements we used CoAP as transport, over UDP,
    >> 6LoWPAN and IEEE 802.15.4 low power radio.

    > CoAP Block Mode?

Hi, I know that you answered, and I actually posted my question before I had
finished all of the paper :-)
(That's a new kind of pie chart you've used...)

As I understand it, in the pure-CoAP scenario you provided an endpoint to
which the SUIT manifest was pushed (using Block1).   The target device then
evaluated the manifest, and if it validated and was new, then it downloaded
the new firmware.

Similarly, the same thing was done with a LwM2M-OTA situation.
Neither situation had any transport security (DTLS), and relied upon the
verification of the manifest.  So we had end-to-end integrity, but no
privacy.

Of course, the 802.15.4 network could have L2 security... did you have that?
I'm asking because it's an additional crypto load.

At this point quite a number of people would like to standardized some
transport for SUIT manifests for use in some situations like you have described.
That was deemed outside the scope for the current SUIT effort (and I agreed
with the reasons at the time), and I wouldn't expect everyone to agree to use
it.   Some have expected OCF or another to do something here.

I wonder if there is interest in doing things at the IETF?

--
Michael Richardson <[e-mail]>, Sandelman Software Works
 -= IPv6 IoT consulting =-