Re: [Suit] Introducing draft-moran-suit-manifest-04

David Brown <> Tue, 12 March 2019 23:38 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id CDD70128CE4 for <>; Tue, 12 Mar 2019 16:38:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: (amavisd-new); dkim=pass (2048-bit key)
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id r-ktj0e4TGwQ for <>; Tue, 12 Mar 2019 16:38:39 -0700 (PDT)
Received: from ( [IPv6:2607:f8b0:4864:20::831]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by (Postfix) with ESMTPS id A2BA5128B33 for <>; Tue, 12 Mar 2019 16:38:39 -0700 (PDT)
Received: by with SMTP id v20so4663317qtv.12 for <>; Tue, 12 Mar 2019 16:38:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=15QUJzdNkk7k6QiPcjtBx+QYmAFYDONZ9cm9mhbELHQ=; b=LNh/A/ja6WmqByNAqN6kKdz5/F5gB4DvuSWaqq9lkxKOeidPS76J81w+7kWwRxlPPz hjVwcDS28pyDdoyPTYuVAYTq50q6mpjAxfvjajyjw1pJ4tDO/fSdhh9+Gt17YVo8VyL1 ssZN4uUZxsbBKpnbZfJV864GEqLFxm2I4uJhREhuTjHHrGMNfzqC7cdtpHQ+4AcgEFYK ZII8vCT+W0FnQQ7i0xSCr/I4UIWk8vruWYSdZvxr6IuzsmGmU/Ey8d9hBJXISVtBQCyC sFirgI8vG/KuqnZahl+DhxR05pjccHRAQWvotALJkoOSTJpUUAc/JPaKHO/2IKRvg/yg MbwQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=15QUJzdNkk7k6QiPcjtBx+QYmAFYDONZ9cm9mhbELHQ=; b=ZTJPilJN6Y5RIA6arAvtNY+BtF5oxzIoNWh9/WlIqT7ENt8zDMUtKXhmgvvXMRz7mJ OAbkyJL0NLMJhL8vV9YepquAbgN4utXM5+JW1f+VxouJCrx9PIdjOyHcoccRV9hdzCKh ZjrFJLitc/vD4SJRxUJTXboz0k/eXhm/xQHfpuNpSDUvMyXsYgSfuOR/Ewfrn11jdgoZ SmohwbnnIeLTP1Y7vATJtPY2WT9okeZJrzSwrgeofdHYbSWMYu6pXJXjP5pEc578y9ta TGerY6qn9UNqChd1AZxxjT4IZb+vAbwQxDjaphpCG73DQmn6S4lZExGjUo4rtQYLNOJf OF5g==
X-Gm-Message-State: APjAAAWY56MQiw9Fpgynv5myTOdoXjqscPbljxxIqXqH6rgx+boA316f M570pNlfM1i9/r2wBGx1FkBJLQ==
X-Google-Smtp-Source: APXvYqwHNdoaUft2KxVjidJEemCJaDOtWW+d5U9aoUX6aXYAo3540nbMmOOUcxVA/2YezKsAjNCR3g==
X-Received: by 2002:ac8:1b38:: with SMTP id y53mr3035683qtj.130.1552433918603; Tue, 12 Mar 2019 16:38:38 -0700 (PDT)
Received: from ( []) by with ESMTPSA id p6sm1297671qkk.29.2019. (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 12 Mar 2019 16:38:37 -0700 (PDT)
Date: Tue, 12 Mar 2019 17:38:34 -0600
From: David Brown <>
To: Brendan Moran <>
Cc: "" <>
Message-ID: <>
References: <>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
In-Reply-To: <>
User-Agent: Mutt/1.10.1 (2018-07-13)
Archived-At: <>
Subject: Re: [Suit] Introducing draft-moran-suit-manifest-04
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Tue, 12 Mar 2019 23:38:42 -0000

On Tue, Mar 12, 2019 at 10:34:44AM +0000, Brendan Moran wrote:


>I look forward to discussing this draft in more detail.

So far, my initial impression is that this is a significant
improvement.  I will be spending some time changing my prototype
implementation to work as a manifest "executor" instead of something
that tries to extract data from the manifest to something that
evaluates the manifest.  In the process, I hope to produce some sample
manifests that show the current, as well as in-development multi-image
operations that happen within MCUboot.

One of the push-backs I got to SUIT on the MCUboot project was a
desire to maintain the same semantics between a SUIT manifest and the
existing simplistic manifests.  Unfortunately, that isn't really a
meaningful thing to do with this new manifest format.  However, I
think this new approach is enough of an improvement, that I may argue
to just move to the new SUIT semantics.

I'm sure I'll have more feedback as I work on an implementation.