Re: [Suit] I-D Action: draft-ietf-suit-manifest-21.txt

Brendan Moran <brendan.moran.ietf@gmail.com> Wed, 09 November 2022 15:20 UTC

Return-Path: <brendan.moran.ietf@gmail.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F301C1524D2 for <suit@ietfa.amsl.com>; Wed, 9 Nov 2022 07:20:11 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.105
X-Spam-Level:
X-Spam-Status: No, score=-7.105 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5hAUZyh0MuWY for <suit@ietfa.amsl.com>; Wed, 9 Nov 2022 07:20:10 -0800 (PST)
Received: from mail-ej1-x634.google.com (mail-ej1-x634.google.com [IPv6:2a00:1450:4864:20::634]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1001BC152570 for <suit@ietf.org>; Wed, 9 Nov 2022 07:20:10 -0800 (PST)
Received: by mail-ej1-x634.google.com with SMTP id q9so47687343ejd.0 for <suit@ietf.org>; Wed, 09 Nov 2022 07:20:09 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=c5ojhyZDwDPfOZb7wGr4BqbwpHxFcWaXWpnSA6fQ4PQ=; b=V4e14IOAawItj7h8CXUQar9E3Qpk+ddYE+rZuYt09OVTveWKhlss7HupXcE1yD/OLU +zelJtsYrKvdqYQgIg+1ju84JZkOG1vuz7ZU97g2KOZdPXi2BBWXubb+vc7ta24RDnsq iBuBDUQZRCPsa6GHq3De1UdnIL6sxD0ywnODpgEMJ6Ow7k5eJ+TrQpeoYpuJpI6wctvj iVqPnzQ7Ov3buy5ODJD/o0bS7pHJHtBu9FTwO0ir9mpGlub99lh18BH2FyMfQzcqom/N oYNS7o4w3LB9XZx2gdZMr6N1UkFRvj37CG+Jh1SyED7su7dvcQoVsNSILWDijTBWJpRg 2vVA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=c5ojhyZDwDPfOZb7wGr4BqbwpHxFcWaXWpnSA6fQ4PQ=; b=sshu7G+ntbkC/iBMNL5XH+CCGl0s7cwCsLKR6sNU0tlrSX2i7oOF6+T5zpYJr7KBXr DG4A66q+qGfYX8PQWg3FXCc5jtcUy3xHIFn9tgEvM+IvGtQDGLBux7NNky0w6OEO3iQU Pi/DiXUfGaqARHr6PgMse/p6rPU5LBrY96HGhZ5UxXpJdzUbQdC5DYVNeLCP5nzsbnb1 nVKTR/QT8FwzWomD/HByTpGmJ0dbh+rAsnMFB+yashk0fPO4b4fBTzO+H6SxycCBMC93 iSKr12tM6Ne18fFPHhSVDa/7P+xchnFBTIZMGlNFRO/3bGiddLuz43zTgJmRm6wciCf1 Uhow==
X-Gm-Message-State: ACrzQf20pZLJZ4WedPt5CjbYfvxXLsBmJKvXhbhVBSYvPSCv8G9Cnv4m Cec8xFgpH0MFkKDCNOxGkCR7jgoOVnE7qmMMgHAEjZ0N7eQ=
X-Google-Smtp-Source: AMsMyM57aQU5wQduGM6+HGNAG8O6XwUgVRJbMp0TmSeZNkNOUFgTSrQyvKIjobNM1xFShklmO2gMcAAjjgl6PsL2LZo=
X-Received: by 2002:a17:907:2705:b0:7ad:855d:1050 with SMTP id w5-20020a170907270500b007ad855d1050mr57544068ejk.443.1668007207465; Wed, 09 Nov 2022 07:20:07 -0800 (PST)
MIME-Version: 1.0
References: <166800707566.11788.4275859030584975795@ietfa.amsl.com>
In-Reply-To: <166800707566.11788.4275859030584975795@ietfa.amsl.com>
From: Brendan Moran <brendan.moran.ietf@gmail.com>
Date: Wed, 09 Nov 2022 15:19:56 +0000
Message-ID: <CAPmVn1MY5nKc6RrF9MbV9iqN=vnWHVhDGHAQAfMCC4M6yfkpEQ@mail.gmail.com>
To: suit@ietf.org
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/YEYEBaLTNmb1INFnu2IUY_bceIw>
Subject: Re: [Suit] I-D Action: draft-ietf-suit-manifest-21.txt
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Nov 2022 15:20:11 -0000

Dear suit list,

I received some questions regarding whether or not SUIT Manifest
Processors could use the verify sequence at the end of the update
procedure as well as at the beginning of the invoke procedure. This is
absolutely fine with me, and I believe it is non-controversial, so I
have added a clarification.

Best Regards,
Brendan

On Wed, Nov 9, 2022 at 3:18 PM <internet-drafts@ietf.org> wrote:
>
>
> A New Internet-Draft is available from the on-line Internet-Drafts directories.
> This draft is a work item of the Software Updates for Internet of Things WG of the IETF.
>
>         Title           : A Concise Binary Object Representation (CBOR)-based Serialization Format for the Software Updates for Internet of Things (SUIT) Manifest
>         Authors         : Brendan Moran
>                           Hannes Tschofenig
>                           Henk Birkholz
>                           Koen Zandberg
>                           Øyvind Rønningstad
>   Filename        : draft-ietf-suit-manifest-21.txt
>   Pages           : 94
>   Date            : 2022-11-09
>
> Abstract:
>    This specification describes the format of a manifest.  A manifest is
>    a bundle of metadata about code/data obtained by a recipient (chiefly
>    the firmware for an IoT device), where to find the that code/data,
>    the devices to which it applies, and cryptographic information
>    protecting the manifest.  Software updates and Trusted Invocation
>    both tend to use sequences of common operations, so the manifest
>    encodes those sequences of operations, rather than declaring the
>    metadata.
>
>
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-suit-manifest/
>
> There is also an htmlized version available at:
> https://datatracker.ietf.org/doc/html/draft-ietf-suit-manifest-21
>
> A diff from the previous version is available at:
> https://www.ietf.org/rfcdiff?url2=draft-ietf-suit-manifest-21
>
>
> Internet-Drafts are also available by rsync at rsync.ietf.org::internet-drafts
>
>
> _______________________________________________
> Suit mailing list
> Suit@ietf.org
> https://www.ietf.org/mailman/listinfo/suit