Re: [Suit] Firmware Update Paper

Szymon Słupik <simon@silvair.com> Tue, 03 December 2019 08:53 UTC

Return-Path: <simon@silvair.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E17121201DC for <suit@ietfa.amsl.com>; Tue, 3 Dec 2019 00:53:42 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=silvair-com.20150623.gappssmtp.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f2EQKR9LM2SP for <suit@ietfa.amsl.com>; Tue, 3 Dec 2019 00:53:39 -0800 (PST)
Received: from mail-lj1-x230.google.com (mail-lj1-x230.google.com [IPv6:2a00:1450:4864:20::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E90E120131 for <suit@ietf.org>; Tue, 3 Dec 2019 00:53:39 -0800 (PST)
Received: by mail-lj1-x230.google.com with SMTP id e10so2826448ljj.6 for <suit@ietf.org>; Tue, 03 Dec 2019 00:53:38 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=silvair-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=5MYRoFfHc3UQamTVJ6ngpOM1J7S1Fz0tJ0C3l7e0H9k=; b=I/UTMqpUdAWU1wm/6GOC8bqoz1B1kTBwkuw/LmMvzwo3cYYg5xaxfhSt5R6ldiKRFD Ip4Hhu7E4JSVs4cSZtXRj7tVL/TCgSGChRDOxc9Km4jt4nFTswm70ebKMZT1lf9RX3uF DS13vj9S8QAy06Yeebbkx3dDegGmslZDrpEMGy5fpJFnxjl9MT40HiLf3so6v9wi1fyV 7EfmuvTZHeyRO4hVMoGQlIjsm9796Z4ZajjixZTjti1Fd1i7Ky60OLjnHV98PpNorchg UwKcyJUHaG/39+Hq4tcxMKFNsIS0Z4hrPXbyuqGJWzMR117j+j4GSFpdsDbQUYcpZuzh 64wQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=5MYRoFfHc3UQamTVJ6ngpOM1J7S1Fz0tJ0C3l7e0H9k=; b=W4h2ItUw9Y7yZwrkD3lngYCx2UKCw6u2zUEve9HB+Ra/wYjQ/WgJfId/TVxrJaF2Yz iRXAQD6A0y5+ayURw/SsZolSaMFVIlK0QrcgrYGgdc1X5/n9wim4r1S35YPy1CkTa4Un QHGcH5lVxdPH1bD9qXEWop1G7M9BwQn2PVTLSnWg+nY+FzFup++PmwUh3olNQRsO1cxv 1QPZ6UocqDBr0ttm2PTN/19osWYfECZAkjBzbaaBWx/d172ziLySxwVR7vYaIFMKxQuU Ex9EgN0kLEFJY7s7Leg2yXgKj15yfrdarGIq+t4iofxNJnfnazvbhqz90YMQZj15NmtM LmfA==
X-Gm-Message-State: APjAAAXeTtzDQ66HnqIipVbk00YHs/NEmcXU1j3q7W9v9rl6raOCrJai iLprG1NUzuvI5E7dsUy7K/GGGBinW5bWWsYCDaA10Q==
X-Google-Smtp-Source: APXvYqw5DoCAhJaAasptsiNtWFV7Tnp/gIxGUKVb/FfJo/l5P/G057Z8ghyu/iBtpPDwn0WVg7cjV52FKq+bf5wOg3A=
X-Received: by 2002:a2e:9694:: with SMTP id q20mr613850lji.248.1575363217204; Tue, 03 Dec 2019 00:53:37 -0800 (PST)
MIME-Version: 1.0
References: <VI1PR08MB53600B1D1A194F49B67B90DFFAC60@VI1PR08MB5360.eurprd08.prod.outlook.com> <20191127203651.GA117656@davidb.org> <CANK0pbaWkn7w2swRgkOqsTubE1os=rDo2BLjrTZ5eW6ePv3WnA@mail.gmail.com> <20191129183627.GA16289@davidb.org> <DB6PR0801MB1879D9742622EA0AE08A8B72EA430@DB6PR0801MB1879.eurprd08.prod.outlook.com> <CABNHR1yEFvgEzHjBhpqTW-FX+LQTVYuSJE_9SP9OMwzjWsdORQ@mail.gmail.com> <CANK0pbaf8TTtMOSKHD0D-73+MCzSdjk7p+6hVO0WzpSxhF2fVg@mail.gmail.com>
In-Reply-To: <CANK0pbaf8TTtMOSKHD0D-73+MCzSdjk7p+6hVO0WzpSxhF2fVg@mail.gmail.com>
From: =?UTF-8?Q?Szymon_S=C5=82upik?= <simon@silvair.com>
Date: Tue, 3 Dec 2019 17:53:00 +0900
Message-ID: <CABNHR1z4N=uH9d5DvyYi17DCULqu3T6Ve9k-_EJr-37zUjF-uw@mail.gmail.com>
To: Emmanuel Baccelli <Emmanuel.Baccelli@inria.fr>
Cc: Brendan Moran <Brendan.Moran@arm.com>, David Brown <david.brown@linaro.org>, "suit@ietf.org" <suit@ietf.org>
Content-Type: multipart/alternative; boundary="000000000000f43dfd0598c8d453"
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/VjsnEFdHWGEWcXzN6AhhGWDRl1E>
Subject: Re: [Suit] Firmware Update Paper
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Dec 2019 08:53:43 -0000

Thanks Emmanuel,

So the PHY data rate was 250kb/s, right?

WRT Figure 3 (tIme spent) 38% is signature verification and 60% is
transfer. That seems like signature verification is taking a huge amount
of time... or was it a different data rate?

Best

Simon


On Tue, Dec 3, 2019 at 5:37 PM Emmanuel Baccelli <Emmanuel.Baccelli@inria.fr>
wrote:

> Hi Szymon
>
> in the paper [1] for our experiements we used CoAP as transport, over UDP,
> 6LoWPAN and IEEE 802.15.4 low power radio.
>
> However the open source RIOT implementation which stemmed out also works
> out-of-the-box on other link layers too (among others BLE [3], wired [1]
> ...).
>
> Cheers,
>
> Emmanuel
>
> [1] https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=8725488
> [2] https://github.com/RIOT-OS/RIOT/tree/master/examples/suit_update
> [3] https://github.com/RIOT-OS/RIOT/pull/12391
>
> On Tue, Dec 3, 2019 at 12:58 AM Szymon Słupik <simon@silvair.com> wrote:
>
>> Hi Hannes,
>>
>> What transport did you use? I could not find that information explicitly
>> stated in the paper...
>>
>> Thanks!
>>
>> Simon
>>
>> On Tue, Dec 3, 2019 at 12:20 AM Brendan Moran <Brendan.Moran@arm.com>
>> wrote:
>>
>>> Hi David,
>>>
>>> The manifest generator that I released previously was apache
>>> 2.0-licensed. I don't plan to change that for the next release. I'm also
>>> developing a manifest parser which I anticipate being released under the
>>> same license.
>>>
>>> Best Regards,
>>> Brendan
>>>
>>> -----Original Message-----
>>> From: Suit <suit-bounces@ietf.org> On Behalf Of David Brown
>>> Sent: 29 November 2019 18:36
>>> To: Emmanuel Baccelli <Emmanuel.Baccelli@inria.fr>
>>> Cc: suit@ietf.org
>>> Subject: Re: [Suit] Firmware Update Paper
>>>
>>> On Fri, Nov 29, 2019 at 12:46:42PM +0100, Emmanuel Baccelli wrote:
>>>
>>> > The open source implementation stemming from our paper [1] is embedded
>>> > into the RIOT operating system, which is indeed licensed with LGPL.
>>> > The implementation is compliant with draft-ietf-suit-manifest-00 and
>>> > has recently been merged into the main branch of RIOT, see [2].
>>> > Reuse and further contributions to this code base are welcome!
>>> >
>>> > Relicensing this code is not planned as far as I know (@ code
>>> co-authors:
>>> > please correct me if I'm wrong).
>>>
>>> This is fine.  The authors of the code are free to license the code
>>> however they wish.  I just want to make sure it is clear that this code is
>>> not useful as a general example, and if the SUIT wishes to have reference
>>> code, it will need to be licensed differently.
>>>
>>> > Related: we know of several companies, big and small, which use RIOT
>>> > in their IoT products (and thus use software including -- but not
>>> > limited to -- LGPL
>>> > code) and they are quite happy with it.
>>>
>>> I'm sure there are a few companies that are willing to use LGPL licensed
>>> embedded code, but their existence doesn't negate that there are large
>>> numbers of users who will be unable to use (or even look at) this code.
>>>
>>> One example is that both Zephyr and MCUboot are licensed under the
>>> Apache 2.0 license.  Most parties feel that the Apache 2.0 and the LGPL 2
>>> license are incompatible, and this code cannot be linked together into a
>>> single product.  Since I'd like to include SUIT support into MCUboot, this
>>> means I'll have to be doing an implementation from scratch.
>>>
>>> It's not my place to argue about the licensing of RIOT, but I would like
>>> to see reference code for SUIT that can be used as widley as possible, and
>>> the licensing of this particular code prevents it from being used for that.
>>>
>>> David
>>>
>>> _______________________________________________
>>> Suit mailing list
>>> Suit@ietf.org
>>> https://www.ietf.org/mailman/listinfo/suit
>>> IMPORTANT NOTICE: The contents of this email and any attachments are
>>> confidential and may also be privileged. If you are not the intended
>>> recipient, please notify the sender immediately and do not disclose the
>>> contents to any other person, use it for any purpose, or store or copy the
>>> information in any medium. Thank you.
>>>
>>> _______________________________________________
>>> Suit mailing list
>>> Suit@ietf.org
>>> https://www.ietf.org/mailman/listinfo/suit
>>>
>>