[Suit] COSWID example for IoT Firmware
Hannes Tschofenig <Hannes.Tschofenig@arm.com> Fri, 11 June 2021 10:48 UTC
Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7377B3A3328 for <suit@ietfa.amsl.com>; Fri, 11 Jun 2021 03:48:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level:
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=PIkQ1ZGz; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=PIkQ1ZGz
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KYkRTZGPq4KB for <suit@ietfa.amsl.com>; Fri, 11 Jun 2021 03:48:26 -0700 (PDT)
Received: from EUR05-VI1-obe.outbound.protection.outlook.com (mail-vi1eur05on2049.outbound.protection.outlook.com [40.107.21.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA6DB3A3327 for <suit@ietf.org>; Fri, 11 Jun 2021 03:48:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kBNUc+xZ9JEux1ca3TAqmYgNtKVk3nylyDtQ7Dbh8II=; b=PIkQ1ZGzJIyODh2dwTtB0n1eFldQJgj6CEptnrBJWwF0vaAR+jbAgBE+x5O4vQnQEdfV9jgzzminsxi/RmKa3tp9Bavl505J2JmpxSzDJmQ6m9CilUJnIlI/ThMPDm9eEUBylhQQohxmFWmWpRNThk1VE1JPZ4JJi8G0mjkR4QU=
Received: from AM3PR07CA0146.eurprd07.prod.outlook.com (2603:10a6:207:8::32) by AM5PR0801MB1874.eurprd08.prod.outlook.com (2603:10a6:203:49::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4195.25; Fri, 11 Jun 2021 10:48:15 +0000
Received: from AM5EUR03FT032.eop-EUR03.prod.protection.outlook.com (2603:10a6:207:8:cafe::23) by AM3PR07CA0146.outlook.office365.com (2603:10a6:207:8::32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4242.9 via Frontend Transport; Fri, 11 Jun 2021 10:48:15 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; ietf.org; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;ietf.org; dmarc=pass action=none header.from=arm.com;
Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com;
Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT032.mail.protection.outlook.com (10.152.16.84) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4219.21 via Frontend Transport; Fri, 11 Jun 2021 10:48:14 +0000
Received: ("Tessian outbound 2977cc564e34:v93"); Fri, 11 Jun 2021 10:48:14 +0000
X-CR-MTA-TID: 64aa7808
Received: from 10df6aef449b.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 9C80B115-62B1-481F-9684-E1693FC61177.1; Fri, 11 Jun 2021 10:48:08 +0000
Received: from EUR03-VE1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 10df6aef449b.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Fri, 11 Jun 2021 10:48:08 +0000
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ce4C5YvQe9LyqKbcsfgenMQjq9D2qz3xdYUXGxwjkKD2cQvUAZZjFfHJxENqYV4ZLBtk+dbI4Xi9dadGXciQ4Qj+fTOT3zgUxoKraUZJ4Atn4w3Q3DqqopWLUNdRxoOfYn/8M2ROpmS3hTNg08xbLnk73tEaZU3pFvYVwAkfrw2i7wl5hwndgI+iynFDPvNwec25p0479UId6ROlPe1RPDz24/fyw2iUzCasLiaOH3fcm0cBEJZK5jzPMv/O9kZ7lPNzhBjiSVjPXi2VRLh9cLyzqwX9NsckV+oOHuvbltki+sohueLbdI75pp7rKR02tI0gEAekMxxfEag2a4LbWA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kBNUc+xZ9JEux1ca3TAqmYgNtKVk3nylyDtQ7Dbh8II=; b=ddMlJ+UQqTMpCtIaPEd52+gxCLkICp7gQ+B7pOkyxv+J936pMKuh9L8yjcQF2WXDJkWLiePM/H7K6JbGvrUUozB4H/HBXzWzJZLvITe4wpAOCyBOwccCuBKH7in1LsttJKy6F4jdmLGoBmRFQ/phng6Gaj/q2mQost3arNbgRe1l4Nsp6Hz1nYPQ+xfOma0uW0V+RwxLenNrAE2bmxFNEShCuWTx6I1BA3KYXFepgTwtiGMkzRMOHIL8BlX4AEMnPgk5Ay7oPhVWmgaPD8cLg5r4ua/o+L8QSYuoH2dqUnbCW0WZflmkNIZ1UFrhGD42fIPg55/qOwZI/a8WXmLBnQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kBNUc+xZ9JEux1ca3TAqmYgNtKVk3nylyDtQ7Dbh8II=; b=PIkQ1ZGzJIyODh2dwTtB0n1eFldQJgj6CEptnrBJWwF0vaAR+jbAgBE+x5O4vQnQEdfV9jgzzminsxi/RmKa3tp9Bavl505J2JmpxSzDJmQ6m9CilUJnIlI/ThMPDm9eEUBylhQQohxmFWmWpRNThk1VE1JPZ4JJi8G0mjkR4QU=
Received: from DBBPR08MB5915.eurprd08.prod.outlook.com (2603:10a6:10:20d::17) by DBBPR08MB4741.eurprd08.prod.outlook.com (2603:10a6:10:d8::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4219.23; Fri, 11 Jun 2021 10:48:06 +0000
Received: from DBBPR08MB5915.eurprd08.prod.outlook.com ([fe80::3405:8699:991d:b2e9]) by DBBPR08MB5915.eurprd08.prod.outlook.com ([fe80::3405:8699:991d:b2e9%7]) with mapi id 15.20.4195.030; Fri, 11 Jun 2021 10:48:06 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: suit <suit@ietf.org>
Thread-Topic: COSWID example for IoT Firmware
Thread-Index: Adder0FcjQpoACgRQkawFFZ1ZaxFkA==
Date: Fri, 11 Jun 2021 10:48:06 +0000
Message-ID: <DBBPR08MB5915C2C0F1CC40BA8C3F38DCFA349@DBBPR08MB5915.eurprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ts-tracking-id: D08621BF6AD5C348A9E893B85D2742CD.0
x-checkrecipientchecked: true
Authentication-Results-Original: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com;
x-originating-ip: [80.92.119.239]
x-ms-publictraffictype: Email
X-MS-Office365-Filtering-Correlation-Id: 6613bee3-1314-4c54-f01a-08d92cc66a5c
x-ms-traffictypediagnostic: DBBPR08MB4741:|AM5PR0801MB1874:
X-Microsoft-Antispam-PRVS: <AM5PR0801MB187475C1A2EAF20A87FD23C4FA349@AM5PR0801MB1874.eurprd08.prod.outlook.com>
x-checkrecipientrouted: true
nodisclaimer: true
x-ms-oob-tlc-oobclassifiers: OLM:8273;OLM:10000;
X-MS-Exchange-SenderADCheck: 1
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: 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
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DBBPR08MB5915.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(39860400002)(136003)(366004)(346002)(396003)(8936002)(71200400001)(7696005)(316002)(8676002)(6506007)(66946007)(478600001)(4744005)(86362001)(76116006)(66446008)(66556008)(66476007)(38100700002)(64756008)(26005)(83380400001)(166002)(4743002)(9686003)(33656002)(122000001)(186003)(5660300002)(966005)(6916009)(55016002)(52536014)(2906002); DIR:OUT; SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative; boundary="_000_DBBPR08MB5915C2C0F1CC40BA8C3F38DCFA349DBBPR08MB5915eurp_"
MIME-Version: 1.0
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBBPR08MB4741
Original-Authentication-Results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=arm.com;
X-EOPAttributedMessage: 0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT032.eop-EUR03.prod.protection.outlook.com
X-MS-Office365-Filtering-Correlation-Id-Prvs: 8f711c3e-08b3-4dff-ce57-08d92cc66525
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(4636009)(39850400004)(396003)(346002)(376002)(136003)(46966006)(36840700001)(83380400001)(70206006)(8936002)(5660300002)(70586007)(82310400003)(4743002)(8676002)(52536014)(26005)(316002)(47076005)(86362001)(36860700001)(6916009)(9686003)(2906002)(336012)(55016002)(33656002)(356005)(81166007)(7696005)(6506007)(186003)(82740400003)(166002)(966005)(478600001); DIR:OUT; SFP:1101;
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 11 Jun 2021 10:48:14.8688 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 6613bee3-1314-4c54-f01a-08d92cc66a5c
X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com]
X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT032.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0801MB1874
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/oAKpHHirqYrtasdF5ekSEUfn1w8>
Subject: [Suit] COSWID example for IoT Firmware
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 11 Jun 2021 10:48:31 -0000
Hi all, In various discussions we talked about using COSWID as a way to describe the Software Bill of Material (SBOM). I am wondering whether there are some examples of how a firmware image for a low end IoT device looks like*. Ciao Hannes PS: I looked at https://datatracker.ietf.org/doc/html/draft-ietf-sacm-coswid-17, which was the obvious place. Unfortunately, there are no examples in that draft. IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.
- [Suit] COSWID example for IoT Firmware Hannes Tschofenig