Re: [Suit] SUIT Architecture document review

Hannes Tschofenig <Hannes.Tschofenig@arm.com> Wed, 16 October 2019 14:02 UTC

Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD47A1200F4 for <suit@ietfa.amsl.com>; Wed, 16 Oct 2019 07:02:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=OizyESIM; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=armh.onmicrosoft.com header.b=ipuVv9/m
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yx9bmhK2x-wf for <suit@ietfa.amsl.com>; Wed, 16 Oct 2019 07:02:44 -0700 (PDT)
Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70058.outbound.protection.outlook.com [40.107.7.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E293120026 for <suit@ietf.org>; Wed, 16 Oct 2019 07:02:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=evDUAZlOx6YK9X7883tNnFZgJDkO9vZVwfGm94XEh4k=; b=OizyESIMKyuFxxEgRICV+XMp8MiYtaL/fP+eZAnXkLVt90NT6otnQG2WoLvc8xiY5FPm+qPkuX3/Hq+qAFM5X2y1So4+Ttkh5KSS/3WcCzEhoJxXm4hCuhVWSiUcPc4E7y0+5veKsA3wX6K73qQIaq6boOUFQkhC6azENN+pats=
Received: from DB7PR08CA0025.eurprd08.prod.outlook.com (2603:10a6:5:16::38) by AM5PR0801MB1652.eurprd08.prod.outlook.com (2603:10a6:203:3c::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2347.22; Wed, 16 Oct 2019 14:02:38 +0000
Received: from DB5EUR03FT024.eop-EUR03.prod.protection.outlook.com (2a01:111:f400:7e0a::204) by DB7PR08CA0025.outlook.office365.com (2603:10a6:5:16::38) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2347.18 via Frontend Transport; Wed, 16 Oct 2019 14:02:38 +0000
Authentication-Results: spf=fail (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=none action=none header.from=arm.com;
Received-SPF: Fail (protection.outlook.com: domain of arm.com does not designate 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT024.mail.protection.outlook.com (10.152.20.67) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2305.15 via Frontend Transport; Wed, 16 Oct 2019 14:02:38 +0000
Received: ("Tessian outbound 0cf06bf5c60e:v33"); Wed, 16 Oct 2019 14:02:38 +0000
X-CR-MTA-TID: 64aa7808
Received: from 0457cdd84f8f.1 (ip-172-16-0-2.eu-west-1.compute.internal [104.47.14.50]) by 64aa7808-outbound-1.mta.getcheckrecipient.com id 14D88AC5-86CF-403B-AFF0-53D8B83E7DCD.1; Wed, 16 Oct 2019 14:02:33 +0000
Received: from EUR04-VI1-obe.outbound.protection.outlook.com (mail-vi1eur04lp2050.outbound.protection.outlook.com [104.47.14.50]) by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 0457cdd84f8f.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Wed, 16 Oct 2019 14:02:33 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=WgdL1I1gmJeh/IHOdFsaA8jh74m7oqk43/AkVL4i/yyTLk8o+dQQHXpQCg7sPNFhVDPPrkDIrg0UNFlMwnDNlfKl8g+WdAA4iEdtpTM93fM4PVEGrutoWm2h1UQkDNq8g4fyPigP/9PHzUJ0BCPWhe/ipreXkrGJ67ab200oMo8Scee/ETXSsD/QCm9YdSOumySBIBYXMGPCRbmP1b2AEHBRpxNpr64QlHtUSP6mWH9ooVvh0pxYHRdENQjqOUueLFIcFdAIrIDQwdCCQzhXd2XDbZTRPIChXW0NZ8TZYbi3aadhH4VeKZpFzvVNg4efBKHdvIo2OzBRSNLNzVfReA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VolKQ6rBuK8TYm9pMhHwhyI9S7WlJAu7A4QnF/ywtdQ=; b=oAuSVKYQQwZWhDpNcUmiGlnzOKSJbSNAO39Yl222+sRFKi41jsXsVLx6rwfUZ36gGHGBwXTF7vvlBn0xICECPnAPzhgwTb10HCN9ykPM/DId8al9guIbzOFiUQTL37XhsnoeiyGU5wlqcJrkjg+8Ei4j+YU0rZ0+aGrBEnC7EQsvY8D+eLx9NH+/gTwQuUNAIxlGM8ZvnBzHDkJ01+r+zBeQKPL8svsYZANWNNP4iy76GmhDzjJJaSi+UH05Mw2bz5um5t4Ja5WqgJuhDcfduOJcXPVlkQ5QPvS80f1fxsI4sd7NgRQH9OHW/NzdstyMgzJMMJFHoL8lnkzLecekvw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VolKQ6rBuK8TYm9pMhHwhyI9S7WlJAu7A4QnF/ywtdQ=; b=ipuVv9/m9DcoB+ZpU86qFRtAPnCPLFIdqM+1Jz71n7dn5knHZpJ+Q4Oq5hYrnG47ITmbnvtowwidEfiVwSFs31aR5f3rq87C5pv12NpGqf9e2QrQjsXambp8I63zraPumYwbIM/Lh/31eW/fxXB5VYChUpvmIDDpqV8VTMkJ38c=
Received: from VI1PR08MB5360.eurprd08.prod.outlook.com (52.133.245.74) by VI1PR08MB3631.eurprd08.prod.outlook.com (20.177.61.82) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2347.22; Wed, 16 Oct 2019 14:02:31 +0000
Received: from VI1PR08MB5360.eurprd08.prod.outlook.com ([fe80::b003:8767:35c7:e31]) by VI1PR08MB5360.eurprd08.prod.outlook.com ([fe80::b003:8767:35c7:e31%2]) with mapi id 15.20.2347.023; Wed, 16 Oct 2019 14:02:31 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com>
CC: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: [Suit] SUIT Architecture document review
Thread-Index: AQHVfi5MFcuuBhgJPUC100r00P0hL6db5a9QgAFHwQCAAALz8A==
Date: Wed, 16 Oct 2019 14:02:31 +0000
Message-ID: <VI1PR08MB5360F6EBFE5E90FC9BB6E35EFA920@VI1PR08MB5360.eurprd08.prod.outlook.com>
References: <VI1PR08MB53604B1D9121DC24D28D4B4AFA920@VI1PR08MB5360.eurprd08.prod.outlook.com> <6F8C5374-5881-44C7-805F-354A08253002@gmail.com>
In-Reply-To: <6F8C5374-5881-44C7-805F-354A08253002@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ts-tracking-id: 2cd32e1a-14da-418b-98cb-0db015183216.1
x-checkrecipientchecked: true
Authentication-Results-Original: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
x-originating-ip: [80.92.123.83]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-Correlation-Id: 60e12ab2-a3be-4062-570a-08d7524180b6
X-MS-Office365-Filtering-HT: Tenant
X-MS-TrafficTypeDiagnostic: VI1PR08MB3631:|AM5PR0801MB1652:
X-Microsoft-Antispam-PRVS: <AM5PR0801MB165210B9EE163B8F4AB360A9FA920@AM5PR0801MB1652.eurprd08.prod.outlook.com>
x-checkrecipientrouted: true
x-ms-oob-tlc-oobclassifiers: OLM:10000;OLM:10000;
x-forefront-prvs: 0192E812EC
X-Forefront-Antispam-Report-Untrusted: SFV:NSPM; SFS:(10009020)(979002)(4636009)(136003)(346002)(366004)(396003)(376002)(39860400002)(199004)(189003)(51914003)(316002)(7696005)(81166006)(33656002)(52536014)(71190400001)(229853002)(6306002)(478600001)(25786009)(2906002)(6246003)(790700001)(4326008)(3846002)(9326002)(6116002)(55016002)(6436002)(81156014)(8936002)(9686003)(8676002)(54896002)(186003)(26005)(74316002)(102836004)(476003)(86362001)(6916009)(71200400001)(7736002)(64756008)(66556008)(14444005)(66476007)(6506007)(99286004)(76116006)(14454004)(76176011)(5660300002)(11346002)(446003)(486006)(66066001)(66446008)(66946007)(256004)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR08MB3631; H:VI1PR08MB5360.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: 2ocKNeSB3jS+NkeOWqwu+git+kGufV8Mv8ksPZWwLte63masfZyv0Wftgw0+OhX0Lm/ZKAgEy84twIXyXTIgNwNYj1CNv2fkbIG9FDHgVXjcFkbyXo4sfk8CF+oxGGKcopT4Cxp91dkanoHcTcSwbfQ0VeYIP/E0/+zKEXPprh+dzf1eSgkpRtbND6DVBAZcvUIJECDqrDFT7HpeiSCCBCulnx/7BbP05NQWX4oDpUZmOOui2M5Z5t04WsGGbhrPJgDZAhTbc/Sl5FxixgZd6KUOniwnXXk0wYlBNyrVLLR8FcODxduTiYxrkfbA5Y2OFrGSsPwcFszAYzhlVH5eljO/kxlChV9xk4HRtwjqUxZov22i4RZ0n6BPSVOVKImNEdzYj4hDD0/a6zWuqbwT9/Efd3k774/KwkD4Ltq5bMs=
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_VI1PR08MB5360F6EBFE5E90FC9BB6E35EFA920VI1PR08MB5360eurp_"
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR08MB3631
Original-Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT024.eop-EUR03.prod.protection.outlook.com
X-Forefront-Antispam-Report: CIP:63.35.35.123; IPV:CAL; SCL:-1; CTRY:IE; EFV:NLI; SFV:NSPM; SFS:(10009020)(979002)(4636009)(136003)(376002)(346002)(39860400002)(396003)(1110001)(339900001)(40434004)(51914003)(199004)(189003)(7696005)(26005)(74316002)(356004)(6506007)(336012)(26826003)(8676002)(33964004)(99286004)(11346002)(2906002)(3846002)(126002)(478600001)(6116002)(790700001)(476003)(14444005)(5024004)(14454004)(486006)(446003)(76176011)(8936002)(81166006)(81156014)(186003)(7736002)(33656002)(9326002)(25786009)(71190400001)(102836004)(66066001)(4326008)(5660300002)(70206006)(86362001)(9686003)(70586007)(16586007)(22756006)(6306002)(229853002)(54896002)(55016002)(52536014)(316002)(6862004)(76130400001)(6246003)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5PR0801MB1652; H:64aa7808-outbound-1.mta.getcheckrecipient.com; FPR:; SPF:Fail; LANG:en; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; A:1; MX:1;
X-MS-Office365-Filtering-Correlation-Id-Prvs: 1fa3f0cb-d513-4ee0-589d-08d752417cef
X-Forefront-PRVS: 0192E812EC
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 4IR2bHjfgCx+NlpcraXzqdfldvgn0kgvd3OuNHv4cY+Mfn3wUQddOM6b/3LKomklDXFfI5Kp0ZBeu2+gpL/pzvLQaDf6FmiyY1f1Fj3FXePCrEVF6fNG2QFh1hoRcjvd5C7ECWjnnFtPOIbRbVdEED9jzz7XCXXQxTp6/QAsMqTvswVW6bSw/+x9vEE/sfoiTEiXjEdbaVX/qTV5KpEvcDwkWhzf0v+WNW4wuiFdusvlr/m6XrltH35LprNmKABibhpmiVIUjTUmcKmOqhmjxLUi5EwAQugAuV3JubB5qLJQ0iD77hDADl+yOkOnfhdCLQ/6OS2tTWWaBk3aQ7GAoZbZUZnyWFL8RGN7nmnyF5iTo787wRRPmg3SlOudtt4nXMQTUqrxf2eXiH+IboZD2Ftjq2kAPcIMwiQMuJYmoXQ=
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Oct 2019 14:02:38.1459 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 60e12ab2-a3be-4062-570a-08d7524180b6
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0801MB1652
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/mhN9W-VFl0-Q_UcRuDQoQdH7des>
Subject: Re: [Suit] SUIT Architecture document review
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Oct 2019 14:02:47 -0000

Hi Kathleen,

Thanks for the quick response.

I will focus on this issue only:

[Hannes] When you say “larger systems” what do you mean? There are Windows, Linux and mobile devices out there that already have a perfectly fine software update mechanism and we are not trying to replace it with this work. For those devices that run regular operating systems the lightweight design of the software update mechanism is apparently less of a concern compared to the design of a firmware update mechanism for low end IoT devices, as you have witnessed in the discussions on this list. When you say “large system” are you then referring to a system that runs Windows, Linux or something similar or do you have some other system in mind?

Yes, bios or other firmware updates across numerous platforms that may have methods that are secure, but not consistent could be interesting.  This is for larger than IoT, but not OS or software to your point as this is difficult for enterprises that have to manage the diverse sets of systems using different processes.  It might include devices, appliances, servers, desktops, and storage.

[Hannes] So far, most people in the group have focused on unattended, low end IoT devices. Technically, this does not mean that a lightweight firmware update mechanism cannot be used for updating a bios or firmware on storage devices. Doing that work will IMHO require us to get the experts for those technologies into the group. Speaking for myself, I don’t know, for example, what the requirements for a Bios update are. Hence, I believe the question you are raising is really for the group as a whole (or even wider) to find out whether we can leverage the technology also in adjacent domains.

Ciao
Hannes


IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.