[Suit] Version -08 of draft-ietf-suit-firmware-encryption

Hannes Tschofenig <Hannes.Tschofenig@arm.com> Thu, 06 October 2022 11:21 UTC

Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE560C1524C1 for <suit@ietfa.amsl.com>; Thu, 6 Oct 2022 04:21:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.907
X-Spam-Level:
X-Spam-Status: No, score=-1.907 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_MSPIKE_H2=-0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=7KV3XJTM; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=7KV3XJTM
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IFG9y5lJF4Dg for <suit@ietfa.amsl.com>; Thu, 6 Oct 2022 04:21:19 -0700 (PDT)
Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70053.outbound.protection.outlook.com [40.107.7.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB494C14CE42 for <suit@ietf.org>; Thu, 6 Oct 2022 04:21:18 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass; b=lMh8pIBf6tUk3OF51M/Zw1T0NCq9TU+Nvm4xJ7j3nnLyDrpckbEdk7IWeyCz0bGfmmpeJuCkXAfV4lDYYwXwpAg1qu6KnFWBsF/wXRq2CNxMnoewvL3KEgPT11LkeAQicdUz+UVznUSxDr7AFTsnvYwCAPm35NgDtlMvp/4PJ4ObWBqsaB50Iy/rSgZm1N9LUgLJFxxilEgQV9o/inNnyVbjIDz2LzdvLl20U48GnwzZixS1pC7+xhoH6sYUtFFSXqfFgSnmE1IbrA86lVxjQgAgW9c12yVFRd9dLtmBYmCTcN6eY3PL6gs/53GXmIDQlmKmkiyJ+BRezgjN5J7qLg==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=OO/v3ur09vMhCEF8fk4zreNcWwF3DXjabBaK4c0ORfI=; b=BF38W1+9jPiTjnFunrZe1jx1rS6VZT/PnkXV4OnoPcteoCG40o3k9X8ppPkux9R3wWDdO5rN8rwhScnkJPYgOza5FsfFG9mM4/xQu3UZOuC+EBwMvtVUgZPfeOzCtOoISqYyFI+z3wQQtktrPEwd3VyD8HzhX+HyYvsUdV7ysHmn1S446Rn+CGYXqXiSWN8CunEaLpbErtJojOvaX5SdAh+JZOwVWBpChV4NawF/T5v0xSb7uPWFkfSxnb+F7e7Wz3yZmEZiK7Eg5zyKiXxdmRQ8OxIb4AZKDWI6YN/G2gRkgvUTZsPfmfM/j8ssizM1B+LZexh2hPu/K1o1WlKYnQ==
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is 63.35.35.123) smtp.rcpttodomain=ietf.org smtp.mailfrom=arm.com; dmarc=pass (p=none sp=none pct=100) action=none header.from=arm.com; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com; arc=pass (0 oda=1 ltdi=1 spf=[1,1,smtp.mailfrom=arm.com] dkim=[1,1,header.d=arm.com] dmarc=[1,1,header.from=arm.com])
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OO/v3ur09vMhCEF8fk4zreNcWwF3DXjabBaK4c0ORfI=; b=7KV3XJTMRMFXglP4/WVWOiidCpputwXM73TD6vg7ZgohxNGfeu5x0hV+G3zmgf4zNDPpFwzR7/scg+mxvt2V+mrJd0oHI4uS0zXXJlJhl/poiawE6BQK0PqgcdNEmR2EwJhYOC705LafT+KCkcaNhdMb7XLNHecJ2AqOjqgdhJA=
Received: from AM6P193CA0052.EURP193.PROD.OUTLOOK.COM (2603:10a6:209:8e::29) by AM9PR08MB6227.eurprd08.prod.outlook.com (2603:10a6:20b:285::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5676.24; Thu, 6 Oct 2022 11:21:14 +0000
Received: from VE1EUR03FT058.eop-EUR03.prod.protection.outlook.com (2603:10a6:209:8e:cafe::56) by AM6P193CA0052.outlook.office365.com (2603:10a6:209:8e::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5676.32 via Frontend Transport; Thu, 6 Oct 2022 11:21:14 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;dmarc=pass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; pr=C
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by VE1EUR03FT058.mail.protection.outlook.com (10.152.19.86) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5709.10 via Frontend Transport; Thu, 6 Oct 2022 11:21:13 +0000
Received: ("Tessian outbound 99ee3885c6d5:v128"); Thu, 06 Oct 2022 11:21:13 +0000
X-CR-MTA-TID: 64aa7808
Received: from 0ee918bf96e7.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 891B4050-ABA2-46DD-B538-870A22CFF928.1; Thu, 06 Oct 2022 11:21:06 +0000
Received: from EUR01-DB5-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 0ee918bf96e7.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 06 Oct 2022 11:21:06 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=dsUsZ2wvQZXB94rou/UbVp+itPVRj7/Y5g0tOSwM7+MxKOGxwl6l9TCHUqVf9cLsccDWCFbx2V6vQ56AwHG9e5Xh+/1CGFlrA18c3jUFgwqLhzQ2pSgfkhEKaDf2301Q35wSZlLh4GzwLuztK9L/ApMaBiHRLXVlE2h9Q9JKUJWz+USvvvS5Eieqxp0vPRSYzGb3YigtmnUz7fWKA9X6tVNWNUElu8jxiiIxbMKJ84vnQ7u2FVmi/pFa4xYFY6zV+dOqA+BMI1K/DGwR5EwifNIS6RecaEK5xVxUXSlxgYFFM2y0jeGckZOyQ2Cr0kcFrirFKHktUh9DE3sidXNh3A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=OO/v3ur09vMhCEF8fk4zreNcWwF3DXjabBaK4c0ORfI=; b=liHrJXe06XAx9JDUyp3Zk4FzHHjZ0sdMUnR+7lDjezc7Atm/ZQbHPyKLjvC4bCq2SkngBFnaoQofJugWXSFL7cYMTU58yc5LILOy3qir0fkVCDODfkc1/gDSGicu/MvxqNPtkA5vHGCNvcMvJ4Iw3BcJE2bG2Io7hnHMp5OImytt6FXFRI49znX76PqKlMsYVzOUzP91bM6YsSsJpX/WnLVctK+4Xe8oNFr+JOc7lwVrYv2kWMEzrW/o4Bik/V5PZfKq6Jug8Ky7888ocolXB2BXUe9+vOgK6r44DYdNk+mlMFKmJaa0oXurcE9bfQJ+hKF0SJkejtYzsHkRpcpnOw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=OO/v3ur09vMhCEF8fk4zreNcWwF3DXjabBaK4c0ORfI=; b=7KV3XJTMRMFXglP4/WVWOiidCpputwXM73TD6vg7ZgohxNGfeu5x0hV+G3zmgf4zNDPpFwzR7/scg+mxvt2V+mrJd0oHI4uS0zXXJlJhl/poiawE6BQK0PqgcdNEmR2EwJhYOC705LafT+KCkcaNhdMb7XLNHecJ2AqOjqgdhJA=
Received: from DBBPR08MB5915.eurprd08.prod.outlook.com (2603:10a6:10:20d::17) by AS8PR08MB6248.eurprd08.prod.outlook.com (2603:10a6:20b:298::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5676.28; Thu, 6 Oct 2022 11:21:05 +0000
Received: from DBBPR08MB5915.eurprd08.prod.outlook.com ([fe80::d48c:61b9:7a6a:88bc]) by DBBPR08MB5915.eurprd08.prod.outlook.com ([fe80::d48c:61b9:7a6a:88bc%9]) with mapi id 15.20.5676.032; Thu, 6 Oct 2022 11:21:05 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: Version -08 of draft-ietf-suit-firmware-encryption
Thread-Index: AdjZdT8fRSteuaRySHmfB7sb1h85AQ==
Date: Thu, 06 Oct 2022 11:21:05 +0000
Message-ID: <DBBPR08MB5915F38D7A9D72AF41BAE2B6FA5C9@DBBPR08MB5915.eurprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ts-tracking-id: 903419E9637B7E42AD687CF7BCB4FF6A.0
x-checkrecipientchecked: true
Authentication-Results-Original: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com;
x-ms-traffictypediagnostic: DBBPR08MB5915:EE_|AS8PR08MB6248:EE_|VE1EUR03FT058:EE_|AM9PR08MB6227:EE_
X-MS-Office365-Filtering-Correlation-Id: 40a7748c-2812-4b0a-5ba8-08daa78ce0d1
x-checkrecipientrouted: true
nodisclaimer: true
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: qVg0t3iMSvWhKWRMlQbbMxbnn2h/IaAjB4k6/abrqx7kH85zxDANDKJpsCaUgaVFwtkrUUxF/JpTki5c+XFa0e2mQ/boJE7ab1dMB9r/1mzkaPl0ZBKiUiQafjFhzKmZZrRQHb/3pLxAQSzzJsBvHddvAFy9zn2i3pb04AOhF4MuRGl1QGbQH1IOFYy+EueCI1IUlywNXA9cYCfhsSK76BWRyJcWb7NEEXocfGz0dRdypV0vts7wvNXhHmxTY1QBg0H0xAgyONfl726xRyNSgJ0wG9w0c2F3NB4Mr9hTiSQgxOsOu7T8A9xNpBLX5H7HU0Vkz7r6O2UUP7INQBooycex+41CMYKd3/Nuwz7E/PSOsfTapXUGqMoxlkbaLKIOuxXlUoCoOdivjhQKdxCu5JOkJWjR/FxPY51FwQzvNwnOFrE+rS71A7v18StKJWzo89OgpM57JaVjZff/v9vGOokkylDbLJhpXObpsWEuutj/+sy7hk2YYlTMeZEobIvYmGmejFz0f+wHPF/WQj0LbnXcy3ee8hbyAsKpYyd00Ggwz5fxJgg9tZCR/gKGdpv8DMbMngMsTV3IDroESJDVejZe5PAoTdvPXP2/WOSGD0cMhhpniU277OCHo0PYKP6Xl4CNHrOBi9oQv/wwOWmRCLM8z/XW41Nof3b6cxHBXISIsXb1jqS5vGdZbipMLDLRfXOdXNYnjwPzI7dY+RIGQciSSJDj+vWfpfZ64n6sZjsQ5euH2CSbjXI+y6Q0LM7y/c33Vta+R78/VaXdj8CrHSqngj7IJgLGA67tji7sJaGXIH+E213BSu9Af2ncX9K4dSkAJ5iUxO8TyAsE1+fs9Q==
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DBBPR08MB5915.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230022)(4636009)(346002)(376002)(366004)(136003)(39860400002)(396003)(451199015)(2906002)(186003)(38100700002)(38070700005)(122000001)(86362001)(66556008)(83380400001)(478600001)(33656002)(8676002)(55016003)(66946007)(66476007)(66446008)(64756008)(316002)(6916009)(966005)(7696005)(52536014)(9686003)(71200400001)(4744005)(76116006)(6506007)(8936002)(41300700001)(5660300002)(26005); DIR:OUT; SFP:1101;
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR08MB6248
Original-Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: VE1EUR03FT058.eop-EUR03.prod.protection.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs: 33684a0a-3c2e-4970-9885-08daa78cdbf6
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(13230022)(4636009)(39860400002)(346002)(376002)(136003)(396003)(451199015)(36840700001)(46966006)(40470700004)(83380400001)(5660300002)(47076005)(86362001)(82310400005)(9686003)(81166007)(40460700003)(26005)(33656002)(82740400003)(966005)(6916009)(356005)(36860700001)(336012)(6506007)(52536014)(7696005)(316002)(70206006)(70586007)(8676002)(186003)(2906002)(8936002)(4744005)(41300700001)(55016003)(40480700001)(478600001); DIR:OUT; SFP:1101;
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Oct 2022 11:21:13.4329 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 40a7748c-2812-4b0a-5ba8-08daa78ce0d1
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-AuthSource: VE1EUR03FT058.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9PR08MB6227
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/ZC6qOJLTjrwnGALAJryjmdzWwdE>
Subject: [Suit] Version -08 of draft-ietf-suit-firmware-encryption
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 06 Oct 2022 11:21:24 -0000

Hi all,

I just published a snapshot of the "Encrypted Payloads in SUIT Manifests" draft:
https://datatracker.ietf.org/doc/html/draft-ietf-suit-firmware-encryption-08

The updates focus on editorial improvements and on expanding the text in Section 8 "Firmware Updates on IoT Devices with Flash Memory".

There is still one major open issue, see https://github.com/suit-wg/suit-firmware-encryption/issues/7.

Ciao
Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.