Re: [Suit] Firmware Update Paper

Brendan Moran <Brendan.Moran@arm.com> Mon, 02 December 2019 15:20 UTC

Return-Path: <Brendan.Moran@arm.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1160912004C for <suit@ietfa.amsl.com>; Mon, 2 Dec 2019 07:20:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=WSvMlgwi; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=armh.onmicrosoft.com header.b=bV4FObnU
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ftcHY8cMqycD for <suit@ietfa.amsl.com>; Mon, 2 Dec 2019 07:20:29 -0800 (PST)
Received: from EUR02-AM5-obe.outbound.protection.outlook.com (mail-eopbgr00052.outbound.protection.outlook.com [40.107.0.52]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA2EB12000F for <suit@ietf.org>; Mon, 2 Dec 2019 07:20:28 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=S3aLnJtq4Qk43DarGlgJ+gPf5MvJrNfLMzrTAfeTyW8=; b=WSvMlgwiYciRcC/9hgEuil+/14a7d6D40++4OLd1KwejNaR+4SD04KYB8GHAgVQf9rH0EY9rBTjDTf3o7RgXp+/1d5cJikVsv4DYNr9ZS9gf0ftCyKcDT48zs0wug6ol8NbxtO+2wED17ufY3nqQyZVQUwSxwyvHFI474i0CgkE=
Received: from AM6PR08CA0015.eurprd08.prod.outlook.com (2603:10a6:20b:b2::27) by AM6PR08MB3815.eurprd08.prod.outlook.com (2603:10a6:20b:8b::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.22; Mon, 2 Dec 2019 15:20:26 +0000
Received: from VE1EUR03FT062.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e09::200) by AM6PR08CA0015.outlook.office365.com (2603:10a6:20b:b2::27) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.20 via Frontend Transport; Mon, 2 Dec 2019 15:20:26 +0000
Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=bestguesspass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by VE1EUR03FT062.mail.protection.outlook.com (10.152.18.252) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.18 via Frontend Transport; Mon, 2 Dec 2019 15:20:26 +0000
Received: ("Tessian outbound 54081306375c:v37"); Mon, 02 Dec 2019 15:20:25 +0000
X-CR-MTA-TID: 64aa7808
Received: from fcb907088dc6.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 878F2976-6362-4963-9769-7A3589F83F90.1; Mon, 02 Dec 2019 15:20:20 +0000
Received: from EUR04-HE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id fcb907088dc6.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Mon, 02 Dec 2019 15:20:20 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=W/foK6JtADKAUHy0vIBJA6mU1rlwUgGgkAvkqqeiWKtR2D65Wliz/PgCLFI4pEDJ1eJhmvIrBN55RzblIapLXVXaTjFzQVf0sqnkoqxvjfFK04Pv7WVmiWff+SHl+RpCIspYVPPZsiNpJfM+mK0z+0UqACt9CCKdBhGDapJOqNV+d8kLdl5PqDLOXqY/JHCOrzUy4lTHMwIiGE9cTzQZK109JgBGGq0iEXiXWIqaKswJOQUtLtlSArZfSgl7XxcdcKvQS0GiqyHA0rZW7XDQcWi7akiLtA/7DW7c7B19MjifJbxoDDW9cFnpNs3naOKYWIWo2ycVfBOy9qddTs+7CQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=za4leCx2xAt9Qcxbv6j5jrhL8bgaWaLWn53RWO2aAHk=; b=lD2PMLycAfCfnhGKDFGdkU2eaR2fYAmCTYxWyRm/03yMd4rlfkF+T4MI3JqDRwK4iSU0Na+kuLmiNiacYGzaCoUFRMsiA2BZoQ+G5S3FOlLz4W350UwIYwL4k7lnK0fN8Rf5xgPgisWqWsMMpLkl4AB7KLB+H0SbErIedliPt9zzNH1vBQi0VtEji7j+vFTB9o70pzoJr1bAmUy/q+kw5optI2tJEl1+s0wjTSYRtZPDapxgfsN1+u+OczImtDwg3kN/QbtzLz+owBzuq5BkhQDofnMeySBzSCc8+WJiB19Z0r3R2rK2pQJl1bSLyDLdCaEfcDvjpox1WoErFjk8dA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=za4leCx2xAt9Qcxbv6j5jrhL8bgaWaLWn53RWO2aAHk=; b=bV4FObnUbXnrUMT3yTlfDsycNDNXMJQ/ZUPO7WYuzqIxHsOEVOws9BUDFX9phEMQcDBNxhPvMvlQ7voatgqdaq37qAIVehvBsJZ1TOPhtJoua95GMLAUPP5TCznwZgRaX41oe7XRGNufwm3WjarMVXYxLbeIZDB1xpznt90GOJg=
Received: from DB6PR0801MB1879.eurprd08.prod.outlook.com (10.168.84.137) by DB6PR0801MB2120.eurprd08.prod.outlook.com (10.169.227.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2495.19; Mon, 2 Dec 2019 15:20:18 +0000
Received: from DB6PR0801MB1879.eurprd08.prod.outlook.com ([fe80::ac0d:8d0f:7729:da46]) by DB6PR0801MB1879.eurprd08.prod.outlook.com ([fe80::ac0d:8d0f:7729:da46%3]) with mapi id 15.20.2495.014; Mon, 2 Dec 2019 15:20:18 +0000
From: Brendan Moran <Brendan.Moran@arm.com>
To: David Brown <david.brown@linaro.org>, Emmanuel Baccelli <Emmanuel.Baccelli@inria.fr>
CC: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: [Suit] Firmware Update Paper
Thread-Index: AQHVpWJvYH911LBnCkW8DT6MW2cO1aeiCpEAgABye4CABHliQA==
Date: Mon, 2 Dec 2019 15:20:18 +0000
Message-ID: <DB6PR0801MB1879D9742622EA0AE08A8B72EA430@DB6PR0801MB1879.eurprd08.prod.outlook.com>
References: <VI1PR08MB53600B1D1A194F49B67B90DFFAC60@VI1PR08MB5360.eurprd08.prod.outlook.com> <20191127203651.GA117656@davidb.org> <CANK0pbaWkn7w2swRgkOqsTubE1os=rDo2BLjrTZ5eW6ePv3WnA@mail.gmail.com> <20191129183627.GA16289@davidb.org>
In-Reply-To: <20191129183627.GA16289@davidb.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ts-tracking-id: 23a49f54-4208-4266-a7fb-9cd0325970b7.1
x-checkrecipientchecked: true
Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Brendan.Moran@arm.com;
x-originating-ip: [217.140.106.49]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-HT: Tenant
X-MS-Office365-Filtering-Correlation-Id: e838fa9e-d7e1-4cfb-addb-08d7773b289c
X-MS-TrafficTypeDiagnostic: DB6PR0801MB2120:|AM6PR08MB3815:
X-Microsoft-Antispam-PRVS: <AM6PR08MB38158A70CB819C65F945F3CBEA430@AM6PR08MB3815.eurprd08.prod.outlook.com>
x-checkrecipientrouted: true
x-ms-oob-tlc-oobclassifiers: OLM:10000;OLM:10000;
x-forefront-prvs: 0239D46DB6
X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(4636009)(366004)(346002)(39860400002)(136003)(396003)(376002)(199004)(189003)(13464003)(6306002)(9686003)(55016002)(186003)(99286004)(110136005)(102836004)(966005)(26005)(305945005)(86362001)(11346002)(81166006)(81156014)(8676002)(25786009)(8936002)(7736002)(3846002)(6116002)(256004)(446003)(14444005)(14454004)(2906002)(5660300002)(74316002)(66446008)(6246003)(66556008)(71190400001)(64756008)(6436002)(316002)(229853002)(6506007)(66946007)(66476007)(76176011)(7696005)(53546011)(4326008)(52536014)(66066001)(15650500001)(33656002)(478600001)(71200400001)(76116006); DIR:OUT; SFP:1101; SCL:1; SRVR:DB6PR0801MB2120; H:DB6PR0801MB1879.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: Rr9dgMmKVMxxRH27sfVIymSKLg7yz7i9Omm5MTKFgVZl6HuTEXKwaQBiMyfGEh7L1TiEjAnBfZMPEJxQVoACzDMyCykOJFEZRuK8sOKNygF0mUFK7KKnbT3lyCymEvbnjW8knccQAYh9bFhNhkLwt4z8U0BPor6S7iVB4seqTbAXcWO/yTrFq5BfgPvKeL1VDbbC5dEG68h7gxl54mTCXR+bJl6vf3Ny46cRe0b1Uyd5GIPm1l5wq2Yypgy69cwgf3ArOtMAA0VsEhsyk50cESwipCF+YdiBzsE5n+PLiIwPjanBbWfFq9VtegZU86j/f+M3BBgr7rJF/6RsQax0G08at8+5shUTEcbH/arlge5fJ4WMk6rmB0q3Mviq3q5nrsXkyCHaQfgJypS4NvQ3Xtkq4+dhfoFGNOkQk+FM/Q2muY0z4XGRbTTMxJUG06en95j/M8tt9JD643kNjJBnSj5VkM3DLDM2D5mkJ+W1V8Q=
x-ms-exchange-transport-forked: True
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0801MB2120
Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Brendan.Moran@arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: VE1EUR03FT062.eop-EUR03.prod.protection.outlook.com
X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(4636009)(136003)(396003)(39860400002)(376002)(346002)(189003)(13464003)(199004)(40434004)(81166006)(8746002)(76176011)(8936002)(9686003)(52536014)(6306002)(4326008)(6246003)(97756001)(36906005)(99286004)(106002)(102836004)(186003)(55016002)(6506007)(966005)(26005)(110136005)(26826003)(478600001)(336012)(25786009)(11346002)(446003)(305945005)(74316002)(33656002)(7696005)(81156014)(8676002)(53546011)(3846002)(50466002)(229853002)(316002)(46406003)(23726003)(70586007)(70206006)(7736002)(66066001)(6116002)(14454004)(22756006)(2906002)(5660300002)(14444005)(5024004)(15650500001)(76130400001)(47776003)(356004)(86362001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM6PR08MB3815; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Pass; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; MX:1; A:1;
X-MS-Office365-Filtering-Correlation-Id-Prvs: 14c227b5-551f-459c-6625-08d7773b23b0
X-Forefront-PRVS: 0239D46DB6
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: mHaIJymiO03yLyHTijaNDJvuh/9PCzsulG4zy7Gvy2pHJQUEy1/eWj/MFW+wNd2Yt2HFkOeBTQAvVXvEa0BgKYoDR5kgEPrt7zqWEiJvB10dyiVFKc4sMKlPRRzy9KcuCsxILs3mr/HRZYE/RwCd3ItK1SpwLUvdb6IbRkLLHN3mpMhnyr4c033LrddTQZPuh4Td0rzFr8rG92ztNybutqB9reGKtLk7fW0ttnPoGKS9KXHXSBhmUNndHPLuBeFvLKfaYv2V8I1anjuwzDOVxEgscOxhTk5/ugo5d+vQkeJ5R5KvF/UqMFwuXRpy+mDNvuEufD/kHZ5aP8HJtBR2HKzeSoB7a2KLSGydlgpDSw4YRd6Hye9j4cZhH7wtcIHr2wQnfdHk8XQ74u53rbVqnIcLhwvdIOjhFIZA09tXpYceQnz2E5AYNK0xh2Aj3Vv7WvnzbFgbCMn2p6W22YZBpRpfGl25vM4D9C5he4g1spw=
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Dec 2019 15:20:26.3306 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: e838fa9e-d7e1-4cfb-addb-08d7773b289c
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR08MB3815
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/k4Clc0f_PSP32XmZriyACN8KczM>
Subject: Re: [Suit] Firmware Update Paper
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Dec 2019 15:20:32 -0000

Hi David,

The manifest generator that I released previously was apache 2.0-licensed. I don't plan to change that for the next release. I'm also developing a manifest parser which I anticipate being released under the same license.

Best Regards,
Brendan

-----Original Message-----
From: Suit <suit-bounces@ietf.org> On Behalf Of David Brown
Sent: 29 November 2019 18:36
To: Emmanuel Baccelli <Emmanuel.Baccelli@inria.fr>
Cc: suit@ietf.org
Subject: Re: [Suit] Firmware Update Paper

On Fri, Nov 29, 2019 at 12:46:42PM +0100, Emmanuel Baccelli wrote:

> The open source implementation stemming from our paper [1] is embedded
> into the RIOT operating system, which is indeed licensed with LGPL.
> The implementation is compliant with draft-ietf-suit-manifest-00 and
> has recently been merged into the main branch of RIOT, see [2].
> Reuse and further contributions to this code base are welcome!
>
> Relicensing this code is not planned as far as I know (@ code co-authors:
> please correct me if I'm wrong).

This is fine.  The authors of the code are free to license the code however they wish.  I just want to make sure it is clear that this code is not useful as a general example, and if the SUIT wishes to have reference code, it will need to be licensed differently.

> Related: we know of several companies, big and small, which use RIOT
> in their IoT products (and thus use software including -- but not
> limited to -- LGPL
> code) and they are quite happy with it.

I'm sure there are a few companies that are willing to use LGPL licensed embedded code, but their existence doesn't negate that there are large numbers of users who will be unable to use (or even look at) this code.

One example is that both Zephyr and MCUboot are licensed under the Apache 2.0 license.  Most parties feel that the Apache 2.0 and the LGPL 2 license are incompatible, and this code cannot be linked together into a single product.  Since I'd like to include SUIT support into MCUboot, this means I'll have to be doing an implementation from scratch.

It's not my place to argue about the licensing of RIOT, but I would like to see reference code for SUIT that can be used as widley as possible, and the licensing of this particular code prevents it from being used for that.

David

_______________________________________________
Suit mailing list
Suit@ietf.org
https://www.ietf.org/mailman/listinfo/suit
IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.