Re: [Suit] SUIT Architecture document review

On Wed, Oct 16, 2019 at 10:41 AM Henk Birkholz <
henk.birkholz@sit.fraunhofer.de> wrote:

> Hi Micheal,
> hi thread,
>
> at Kathleen's keynote address in TCG, the "not new" notion that SUIT
> refers to (S)oftware was raised, which - to the audience - seemed to be
> in contradiction with the content being produced.
>

Yes, but just to be clear, I did say the group was focused on firmware, but
FUIT didn't sound good.

>
> That said, in theory the SUIT manifest could be used to update basically
> things of any size - not only constrained nodes. But I agree with your
> point that this is just a "title" problem. There are solutions, such as
> package systems,  in place that would require a quite more complex and
> elaborate attestation infrastructure and that is not the scope SUIT is
> targeting, I think.
>

Agreed, I am not asking for all types of updates.  Having consistency for
firmware and maybe bios updates for larger systems would be helpful to the
customer.  The same principles for secure updates are applied similarly
anyway across solutions.  The architecture document is a framing one, which
is why I made the comment.

Best regards,
Kathleen

> m2c: wrt to number of secrets and endorsements that would have to be
> maintained per device we also want to be as minimalist as we can be
> while remaining feasible, I think.
>
> Viele Grüße,
>
> Henk
>
> On 16.10.19 16:04, Michael Richardson wrote:
> >
> > Hannes Tschofenig <Hannes.Tschofenig@arm.com> wrote:
> >      > [Hannes] When you say “larger systems” what do you mean? There are
> >      > Windows, Linux and mobile devices out there that already have a
> >      > perfectly fine software update mechanism and we are not trying to
> >      > replace it with this work. For those devices that run regular
> operating
> >      > systems the lightweight design of the software update mechanism is
> >      > apparently less of a concern compared to the design of a firmware
> >      > update mechanism for low end IoT devices, as you have witnessed
> in the
> >      > discussions on this list. When you say “large system” are you then
> >      > referring to a system that runs Windows, Linux or something
> similar or
> >      > do you have some other system in mind?
> >
> > I believe that it would be applicable to Things based upon things that
> look
> > the RPI, running Android IoT or OpenWRT.  While there are package
> systems, a
> > random assortment of packages is undesireable, and can not easily be
> attested
> > to.
> >
> > This is what I think that Kathleen is talking about.
> >
> >
> > --
> > Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
> >   -= IPv6 IoT consulting =-
> >
> >
> >
> >
> > _______________________________________________
> > Suit mailing list
> > Suit@ietf.org
> > https://www.ietf.org/mailman/listinfo/suit
> >
>

-- 

Best regards,
Kathleen