[Suit] draft-ietf-suit-firmware-encryption-04
Hannes Tschofenig <Hannes.Tschofenig@arm.com> Wed, 20 April 2022 16:25 UTC
Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19F4B3A0A33 for <suit@ietfa.amsl.com>; Wed, 20 Apr 2022 09:25:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.908
X-Spam-Level:
X-Spam-Status: No, score=-1.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=YOFXBKZF; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=YOFXBKZF
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zc-n2gV0F8Mq for <suit@ietfa.amsl.com>; Wed, 20 Apr 2022 09:25:51 -0700 (PDT)
Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0620.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe1e::620]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 716EA3A083F for <suit@ietf.org>; Wed, 20 Apr 2022 09:25:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ouq5jzLBJpPoj7ZSlYeEmoC5B6tSAayZo1lB28nfvW8=; b=YOFXBKZFUORPdcWegkykUyRwaKaNG3L+BtM8W1kkCZK6g/l2VBNSFthIlpec4hh6OMyrvSceZo+l4BQxkR/MAXGXu1v2NLrzpjGz2VBoSp/+/hE66VinpMThEszSuqrG7jXDVGldSwz2cGObCq4KnNMpOP+CwjJmNSLPRvoHQpo=
Received: from DB6PR0301CA0019.eurprd03.prod.outlook.com (2603:10a6:4:3e::29) by VE1PR08MB5264.eurprd08.prod.outlook.com (2603:10a6:803:105::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5164.20; Wed, 20 Apr 2022 16:25:43 +0000
Received: from DB5EUR03FT026.eop-EUR03.prod.protection.outlook.com (2603:10a6:4:3e:cafe::96) by DB6PR0301CA0019.outlook.office365.com (2603:10a6:4:3e::29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5186.13 via Frontend Transport; Wed, 20 Apr 2022 16:25:43 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;dmarc=pass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT026.mail.protection.outlook.com (10.152.20.159) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5186.14 via Frontend Transport; Wed, 20 Apr 2022 16:25:43 +0000
Received: ("Tessian outbound 78191104f1b7:v118"); Wed, 20 Apr 2022 16:25:43 +0000
X-CR-MTA-TID: 64aa7808
Received: from 930439eca1db.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 356973D7-0E4F-49E9-9E07-662610FB2F41.1; Wed, 20 Apr 2022 16:25:37 +0000
Received: from EUR05-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 930439eca1db.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Wed, 20 Apr 2022 16:25:37 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NvQva470W/tZ1P6H1jOBbgAuRloY4+xWGK5CU6mk/+aCJREixpBCo2z0cODfPGksg1I3T0GH/rXxdEhjgPCdZABbzJAuAmY2+48YiMq/Jk+lofAl7c8oGm8mgPaZ7AjmL06sjZJ16t8IYxvT37ZiJE/qY1HrlimCHP6j4airyP4vnDTEDs0NpntAGa72ktkVGAV2l9VARzbnML3x3W4p7alvRrdbqb6IVh1MMmpi1yqvVwyUE27FMT4nT+eWEVOVziLR6DWdyYGtQQZn6Y2V80fjD9ZFPjhTrr4aF5w95NSpR9Y/Onaz6nZLJtPmUTXtzonvoI0z0BJkFGDVb7+/fQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Ouq5jzLBJpPoj7ZSlYeEmoC5B6tSAayZo1lB28nfvW8=; b=f4IT2ZT2jkPsz1oyAv0ogMIp7cuilgCcZV233biY9r04c4LkHW3wcyFDQxoT0EQBvTa2/VqzC+oF9tEr28wqQWo3SEFpNMU/ZRpOOb9NoNqlW6RZGGKrc5P0WKXpFCvVYQYtTr2NudbHcUtRfubJoUUev1HLBXW3WNj9+3ziU0sUMeLAyLIg+PovWCSEjzqNu4ac0129tzZ9a84KEGUsUkSfQ9lotHqKCBIdkHu5BydBPDTtp0PEuQ/THMoCiilrnESiMTfJlAq2LkafVrlnFTQ5MeWEY08zbZig0vg6Fj2TSQlZMjG89qsdTIZkfoRjS9E6euj+wX/P4owzvZPvrg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ouq5jzLBJpPoj7ZSlYeEmoC5B6tSAayZo1lB28nfvW8=; b=YOFXBKZFUORPdcWegkykUyRwaKaNG3L+BtM8W1kkCZK6g/l2VBNSFthIlpec4hh6OMyrvSceZo+l4BQxkR/MAXGXu1v2NLrzpjGz2VBoSp/+/hE66VinpMThEszSuqrG7jXDVGldSwz2cGObCq4KnNMpOP+CwjJmNSLPRvoHQpo=
Received: from DBBPR08MB5915.eurprd08.prod.outlook.com (2603:10a6:10:20d::17) by AM6PR08MB4280.eurprd08.prod.outlook.com (2603:10a6:20b:b6::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5164.20; Wed, 20 Apr 2022 16:25:35 +0000
Received: from DBBPR08MB5915.eurprd08.prod.outlook.com ([fe80::5896:9eec:b108:9a3]) by DBBPR08MB5915.eurprd08.prod.outlook.com ([fe80::5896:9eec:b108:9a3%8]) with mapi id 15.20.5164.025; Wed, 20 Apr 2022 16:25:35 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: draft-ietf-suit-firmware-encryption-04
Thread-Index: AdhU0wDgHxHbsIHfRJyQKloO/Pp6LQ==
Date: Wed, 20 Apr 2022 16:25:35 +0000
Message-ID: <DBBPR08MB5915C2FB3E55776486130B09FAF59@DBBPR08MB5915.eurprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ts-tracking-id: F4BBB9B4F7889846A55DB125F227358D.0
x-checkrecipientchecked: true
Authentication-Results-Original: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com;
X-MS-Office365-Filtering-Correlation-Id: a385557e-a65f-4c70-6244-08da22ea6a99
x-ms-traffictypediagnostic: AM6PR08MB4280:EE_|DB5EUR03FT026:EE_|VE1PR08MB5264:EE_
X-Microsoft-Antispam-PRVS: <VE1PR08MB5264E27C6909C578F049AA01FAF59@VE1PR08MB5264.eurprd08.prod.outlook.com>
x-checkrecipientrouted: true
nodisclaimer: true
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: 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
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DBBPR08MB5915.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230001)(4636009)(366004)(71200400001)(5660300002)(966005)(166002)(6916009)(86362001)(508600001)(83380400001)(186003)(33656002)(38070700005)(2906002)(38100700002)(4744005)(8936002)(9686003)(316002)(55016003)(66556008)(66476007)(66446008)(64756008)(66946007)(6506007)(76116006)(52536014)(26005)(8676002)(7696005)(122000001); DIR:OUT; SFP:1101;
Content-Type: multipart/alternative; boundary="_000_DBBPR08MB5915C2FB3E55776486130B09FAF59DBBPR08MB5915eurp_"
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB4280
Original-Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT026.eop-EUR03.prod.protection.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs: 8ca1e866-386d-40e1-7b18-08da22ea65ff
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: IJDTwklAQkgq/qGJIhDbcm4QzFUxW63k4RzzK3doW0Axq4G8ymFCq1AQSVttKJu7JpGwQVOXnPi+q2eQmDxd9c4HZsebfgVBs9xv8wwv1a3M3U+OGGvzC1tSiprjtXYtpkNrQzoY6t4WY17g8aAIZCqMGy7kR/S65ud4Iz+JcUBLjMPRixQwNbzfhA1uWZcba7rF09EAx0GNph99NipgewPX7QAm67KjqAwsfDOQqLEv3iihdoIbxKXkz0bKUyA5LsuImL3K04EalqjVUaMJNyGfTZTXHChYHBEoBmkNk/0mpWgvZgLGn9wJWBEvbs0SZHP5vpLxpPzB0pM0oME8dCA9Trzdv/XA8DV/1q7TTsf2tkchYkJh4tIXR1FEqdEGwuEaiRqBNUum1wWYJ5eieyTDVxyTg9dFwiaEcqnONHLrPyqYgMqFxE7oB1Gvpd5lMHI/OfM5U2ajhx1UMTpx28PeKECLnUdAuNNnieUh7B29y3YREBzx3B+cMjmx3e9fyKe2/YpNx5kozcwao/d9F+HAK+LKemoTrzeLKw4XtHCKfRYC5j4nrxlkhaviBhKCan8JPr4/d3CsQD9N58451BW6gRtkgkKGKIIqnE/uqJ3xW6bcYfxIbEdNfe6d/n8/bLe3JjUbYuUA7vfRPLwlFd1x2DlSvOZP9qZ2s9RpMEvvxrS+nZE9ZcOZq7lBvOh7aLimgBStdsuZxlR0M3mMAMOmlAOXeupckCV7zTc8CRVauRFetlhXTVhd0BHKdcAF/wpcw24bPPHLopSzdUggkg==
X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(13230001)(4636009)(46966006)(36840700001)(40470700004)(966005)(86362001)(26005)(36860700001)(356005)(6506007)(7696005)(52536014)(2906002)(5660300002)(508600001)(33656002)(81166007)(83380400001)(8936002)(166002)(55016003)(9686003)(40460700003)(47076005)(336012)(70586007)(186003)(316002)(6916009)(8676002)(70206006)(82310400005); DIR:OUT; SFP:1101;
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Apr 2022 16:25:43.2400 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: a385557e-a65f-4c70-6244-08da22ea6a99
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-AuthSource: DB5EUR03FT026.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1PR08MB5264
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/buN3xGi1BbaAd5DFhiAA8fQVdzE>
Subject: [Suit] draft-ietf-suit-firmware-encryption-04
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Apr 2022 16:26:03 -0000
Hi all I have just submitted version -04 of the firmware encryption draft: https://datatracker.ietf.org/doc/html/draft-ietf-suit-firmware-encryption-04 This version of the draft details the CEK verification, which was introduced as an optional feature to deal with battery exhaustion attacks. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.
- [Suit] draft-ietf-suit-firmware-encryption-04 Hannes Tschofenig