Re: [Suit] Which type of devices?

Hi Brendan,
Yes, the C99 compiler spec contains certain disclaimers as different processor architectures may pad or store certain data structures in different ways, for example how a compiler/processor implements “Int” or pack Boolean arrays in different ways.
The draft circumvents such issues by only using UInt and by aligning on 16bit boundaries. That way the data structure can be mapped directly by any compiler.
Again, for firmware development, this is pretty common practice.
Martin

From: Suit <suit-bounces@ietf.org> On Behalf Of Brendan Moran
Sent: Thursday, November 8, 2018 4:47 AM
To: Martin Pagel <Martin.Pagel=40microsoft.com@dmarc.ietf.org>
Cc: Hannes Tschofenig <Hannes.Tschofenig@arm.com>; suit@ietf.org; Matthias Waehlisch <m.waehlisch@fu-berlin.de>
Subject: Re: [Suit] Which type of devices?

Hi Martin,

Perhaps I have misunderstood something. The C99 standard (ISO/IEC 9899:1999) says:

6.7.2.1 Structure and union specifiers
…
12 Each non-bit-field member of a structure or union object is aligned in an implementation defined manner appropriate to its type.

13 Within a structure object, the non-bit-field members and the units in which bit-fields reside have addresses that increase in the order in which they are declared. A pointer to a structure object, suitably converted, points to its initial member (or if that member is a bit-field, then to the unit in which it resides), and vice versa. There may be unnamed padding within a structure object, but not at its beginning.

From my reading, this says that:
1) Alignment of members is implementation defined.
2) Padding in the structure is implementation defined.
3) The only guarantee you have is monotonically increasing address of structure members.

If my reading is correct, then a “proper struct definition” does not change whether or not the compiler is allowed to take liberties with the alignment or padding of a structure. There is no guarantee of consistency between compilers, nor between versions of the same compiler. There may be incidental consistency, but this is not adequate to make an argument about wire format definition, nor about complexity of parsers.

If even just alignment of members is implementation defined (6.7.2.1.12 clearly says it is) then a structure is not adequate to define nor to deserialise a wire format.

Perhaps someone can correct me if I have misinterpreted ISO/IEC 9899:1999.

Best Regards,
Brendan

On 8 Nov 2018, at 05:05, Martin Pagel <Martin.Pagel=40microsoft.com@dmarc.ietf.org<mailto:Martin.Pagel=40microsoft.com@dmarc.ietf.org>> wrote:

Hannes and Matthias,
I think there is an increasingly large spectrum of MCUs with different capabilities, some now include crypto accelerators, then the crypto code overhead is quite small.

We currently use the proposed format in a quite constrained MCU implementation, for both software update and secure boot. Crypto operations are done via crypto accelerator. We use a simple C Struct to access the manifest elements, no need for schema validation. With the proper Struct definition this is compiler safe, Brendan.

Brendan talked about a life cycle on how to drop data elements once they are not needed anymore. This is complexity we would like to avoid on constrained MCUs with a simple memory mapped binary structure.
Martin

-----Original Message-----
From: Suit <suit-bounces@ietf.org<mailto:suit-bounces@ietf.org>> On Behalf Of Hannes Tschofenig
Sent: Wednesday, November 7, 2018 8:35 PM
To: Matthias Waehlisch <m.waehlisch@fu-berlin.de<mailto:m.waehlisch@fu-berlin.de>>
Cc: suit@ietf.org<mailto:suit@ietf.org>
Subject: Re: [Suit] Which type of devices?

Hi Matthias,

The contribution by Martin with his custom binary format (as an alternative binary format to the CBOR/COSE standardized format) is based on his impression that
* a custom binary format allows to reduce the size of the manifest by some (yet unknown) number of bytes, and
* CBOR and COSE libraries are not used in industrial IoT deployments.

I personally think that this discussion is unrelated to the device classes since the overhead really comes from the crypto, as several speakers on the microphone noted.

Ciao
Hannes

-----Original Message-----
From: Matthias Waehlisch <m.waehlisch@fu-berlin.de<mailto:m.waehlisch@fu-berlin.de>>
Sent: Thursday, November 8, 2018 11:02 AM
To: Hannes Tschofenig <Hannes.Tschofenig@arm.com<mailto:Hannes.Tschofenig@arm.com>>
Cc: suit@ietf.org<mailto:suit@ietf.org>
Subject: RE: [Suit] Which type of devices?

Hi Hannes,

 after Brendan's presentation there were some remarks on this. The discussion made slightly the impression that the group needs to argue why the SUIT solution should also fit into Class 1 devices.

 Based on the charter, the SUIT solution needs to suit Class 1, which has implications on design decisions and on which topic the WG invests time mostly.

 Supporting Class 1 devices is the default, anything else is nice to have.

Cheers
 matthias

On Thu, 8 Nov 2018, Hannes Tschofenig wrote:

Hi Matthias,

Which discussion during the meeting today did you give you the
impression that we are not aiming for this goal?

Ciao
Hannes

-----Original Message-----
From: Suit <suit-bounces@ietf.org<mailto:suit-bounces@ietf.org>> On Behalf Of Matthias Waehlisch
Sent: Thursday, November 8, 2018 10:10 AM
To: suit@ietf.org<mailto:suit@ietf.org>
Subject: [Suit] Which type of devices?

Hi,

 I didn't get the discussion today. Just as a reminder, the SUIT WG Charter says explicitly: "This group will focus on defining a firmware update solution (taking into account past learnings from RFC 4108 and other firmware update solutions) that will be usable on Class 1 (as defined in RFC 7228) devices, i.e., devices with ~10 KiB RAM and ~100 KiB flash. "

Cheers
 matthias

--
Matthias Waehlisch
..  Freie Universitaet Berlin, Computer Science ...
https://na01.safelinks.protection.outlook.com/?url=http:%2F%2Fwww.cs.f
u-berlin.de<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fu-berlin.de%2F&data=02%7C01%7Cmartin.pagel%40microsoft.com%7Ce991ec9c37ca4156335508d645784eec%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636772780368525145&sdata=YRQLioo3qkr7wInqgmy%2FHCpvgONzyxYb7ZD1DopMcy8%3D&reserved=0>%2F~waehl&amp;data=02%7C01%7Cmartin.pagel%40microsoft.com<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2F40microsoft.com%2F&data=02%7C01%7Cmartin.pagel%40microsoft.com%7Ce991ec9c37ca4156335508d645784eec%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636772780368535157&sdata=mG4Rm5UTzMhJ3Dtp2XDmU%2Bx0zEV%2B1JiUn6K8FUtYZ14%3D&reserved=0>%7
Ca39ff4cf1fd74f0dba5d08d645339c7e%7C72f988bf86f141af91ab2d7cd011db47%7
C1%7C0%7C636772485305445335&amp;sdata=ct5txfAAcRM%2BgHw1GoOImrr3bhU8ou
ByV2kMW%2BjGbHw%3D&amp;reserved=0

_______________________________________________
Suit mailing list
Suit@ietf.org<mailto:Suit@ietf.org>
https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.i
etf.org<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fetf.org%2F&data=02%7C01%7Cmartin.pagel%40microsoft.com%7Ce991ec9c37ca4156335508d645784eec%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636772780368545165&sdata=K%2F1CzS578eTN1Q1utbcOrRKz%2BWTu0m2OtVO%2Biu6ar7Q%3D&reserved=0>%2Fmailman%2Flistinfo%2Fsuit&amp;data=02%7C01%7Cmartin.pagel%40
microsoft.com<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmicrosoft.com%2F&data=02%7C01%7Cmartin.pagel%40microsoft.com%7Ce991ec9c37ca4156335508d645784eec%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636772780368545165&sdata=3ftPKCFlKMZC74Abp%2Bj7kssQHOQt2Qc0kzs8vdjw0zw%3D&reserved=0>%7Ca39ff4cf1fd74f0dba5d08d645339c7e%7C72f988bf86f141af91a
b2d7cd011db47%7C1%7C0%7C636772485305445335&amp;sdata=%2FjHzLtzk04XkWqc
uOAAsYjD9Wz%2FK7xxvsqILxP6Rr%2Fc%3D&amp;reserved=0
IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

--
Matthias Waehlisch
...  Freie Universitaet Berlin, Computer Science ... https://na01.safelinks.protection.outlook.com/?url=http:%2F%2Fwww.cs.fu-berlin.de%2F~waehl&amp;data=02%7C01%7Cmartin.pagel%40microsoft.com%7Ca39ff4cf1fd74f0dba5d08d645339c7e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636772485305445335&amp;sdata=ct5txfAAcRM%2BgHw1GoOImrr3bhU8ouByV2kMW%2BjGbHw%3D&amp;reserved=0<https://na01.safelinks.protection.outlook.com/?url=http:%2F%2Fwww.cs.fu-berlin.de%2F~waehl&data=02%7C01%7Cmartin.pagel%40microsoft.com%7Ce991ec9c37ca4156335508d645784eec%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636772780368555169&sdata=sdY9S%2FdHzNbWpORtLZSPDqlE1E9643zE8i3XhyJl9YU%3D&reserved=0>
IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

_______________________________________________
Suit mailing list
Suit@ietf.org<mailto:Suit@ietf.org>
https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fsuit&amp;data=02%7C01%7Cmartin.pagel%40microsoft.com%7Ca39ff4cf1fd74f0dba5d08d645339c7e%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636772485305445335&amp;sdata=%2FjHzLtzk04XkWqcuOAAsYjD9Wz%2FK7xxvsqILxP6Rr%2Fc%3D&amp;reserved=0<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fsuit&data=02%7C01%7Cmartin.pagel%40microsoft.com%7Ce991ec9c37ca4156335508d645784eec%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636772780368565178&sdata=cabS4zzZwKo%2BauzP4lIjlHRZkACa0Ti%2BiziTumz2Rks%3D&reserved=0>

_______________________________________________
Suit mailing list
Suit@ietf.org<mailto:Suit@ietf.org>
https://www.ietf.org/mailman/listinfo/suit<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fsuit&data=02%7C01%7Cmartin.pagel%40microsoft.com%7Ce991ec9c37ca4156335508d645784eec%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636772780368565178&sdata=cabS4zzZwKo%2BauzP4lIjlHRZkACa0Ti%2BiziTumz2Rks%3D&reserved=0>

IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.