Re: [Suit] [suit]: draft-moran-suit-manifest-02

[David Brown <[e-mail]>]

On Tue, Jul 03, 2018 at 09:08:02PM +0000, Brendan Moran wrote:
>This draft is a significant departure from previous drafts, so I think it is
>important to highlight the changes. The draft requires a lot of text that
>hasn’t been written yet, so I will try to put some of that here for discussion.
>
>[1]https://datatracker.ietf.org/doc/draft-moran-suit-manifest/

># Digest info at the top level
>Digests are used in many places in the manifest. The information required to
>interpret digests, therefore, must be a top-level element. All digests in any
>given manifest must use the same digest algorithm.

Is this possibly overly constraining?  For very resource-constrained
devices, it is reasonable to expect the device to only have a single
digest algorithm available in it.  Would we want another digest
algorithm available to allow higher-processing systems to perhaps use
a stronger check.

I think if we want require a single digest format per manifest, there
should at least be motivating text for doing it this way, as well as
why there is only a single digest allowed per entity.

David