Re: [Suit] Firmware Update Paper

Hi David, all,

The open source implementation stemming from our paper [1] is embedded into
the RIOT operating system, which is indeed licensed with LGPL.
The implementation is compliant with draft-ietf-suit-manifest-00 and has
recently been merged into the main branch of RIOT, see [2].
Reuse and further contributions to this code base are welcome!

Relicensing this code is not planned as far as I know (@ code co-authors:
please correct me if I'm wrong).

Related: we know of several companies, big and small, which use RIOT in
their IoT products (and thus use software including -- but not limited to
-- LGPL code) and they are quite happy with it.

Cheers,
Emmanuel

[1] https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=8725488
[2] https://github.com/RIOT-OS/RIOT/tree/master/examples/suit_update

On Wed, Nov 27, 2019 at 9:37 PM David Brown <david.brown@linaro.org> wrote:

> On Wed, Jul 24, 2019 at 05:44:06PM +0000, Hannes Tschofenig wrote:
>
> > Secure Firmware Updates for Constrained IoT Devices Using Open
> Standards: A
> > Reality Check”
> >
> > [1]https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=8725488
>
> There seems to be a prototype implementation mentioned in the paper.
> However, this code seems to be covered by a LGPL license, which
> prevents it from being used in many (arguably most) IoT embedded
> applications.
>
> Is there any chance this code could be released under a friendlier
> license for this market, such as Apache 2.0?  Otherwise, at least for
> MCUboot, we will likely end up having to do a from-scratch
> implementation without referencing this code.
>
> Thanks,
> David
>
> _______________________________________________
> Suit mailing list
> Suit@ietf.org
> https://www.ietf.org/mailman/listinfo/suit
>