IETF Logo Mail Archive

Re: [Suit] Fwd: Firmware Update Paper

David Brown <david.brown@linaro.org> Wed, 11 December 2019 17:51 UTC

Return-Path: <david.brown@linaro.org>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9100C120099 for <suit@ietfa.amsl.com>; Wed, 11 Dec 2019 09:51:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level:
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=linaro.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ILsUT_nAwOTh for <suit@ietfa.amsl.com>; Wed, 11 Dec 2019 09:51:32 -0800 (PST)
Received: from mail-qk1-x72d.google.com (mail-qk1-x72d.google.com [IPv6:2607:f8b0:4864:20::72d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3DEDF120088 for <suit@ietf.org>; Wed, 11 Dec 2019 09:51:32 -0800 (PST)
Received: by mail-qk1-x72d.google.com with SMTP id l124so8447117qkf.8 for <suit@ietf.org>; Wed, 11 Dec 2019 09:51:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to; bh=nxs68j6xJIhA7NTLa1fXnrtrARQVxGYjs/ahP99EV4M=; b=d1XMei4Qn1nrM/EArELpKwooRZxhjb9WGxgYOk6ELjTKoKwbcJkWR9D8vtxMve8yf7 qp0M8tJS9z7k6u5m7eDAx8f8GKJPsgznb93zfdi///OBC8gQX1N1xs5Y59IZ22l8i1w4 UdN+o0/N98DKO5R/sdQNGIGF7zZ19730Clt8MSpt2j+YdYQEBLukt64f31P46aOhVhaJ MQ+ER+2Y1AHBV2tO1dGtOwUKlFZYbNNcQVdnkeduf7npCqzYgUSjIPs0v/byN1u3Oy2D bwNBaKlPG3B4YdFKNMTDi8mCqchnG0DLCBw9ZG3anC+b8VrovmT9WquxFRkIe0jBYwTN pHxw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to; bh=nxs68j6xJIhA7NTLa1fXnrtrARQVxGYjs/ahP99EV4M=; b=fBs7yUZMYQJzPnURcCHG6+KOZlimUcfKcgEFGED38YLFnxdrapFk7BVZxc1jg1H1Ki H6Z+kum8rG81KeUKIRVxCd/HjZuD9zNbxrP/eKt3iMm3BPNn4R0MiML4GD2ghFwXQKfB I3/j1tMdf8C4aSAcyvH+6NjlVw0foGJv8cVYyuxI1k0xYSOw4i9l50A1JFXAuhGAU8sG +PsbTLdrxuZ+56Bw6rou+kBPpzN0Xyt7QF5tyk7ROaiftDpaomxLqHb/ltGK/oEg6EM8 cu2TMjtYXSk5X7nyNtQ8HP+oxmpKrMSAQITWObAl6oW+RooognuSxlxMXaZ7xZOo44eV r1Kw==
X-Gm-Message-State: APjAAAVqdqOWOdfdCREfY703PLXloSskwk9U+tFd40wPfMp4cVykLzyw CzvWOIKjWD14G1FLa1B5Dhmbeg==
X-Google-Smtp-Source: APXvYqz1qEJBHwlKvKg6w+mK7cExo1Y+4X0qN2OykGNg7p/T4glo+eRNOGIVBiR/MTeLTU8LUb7gZw==
X-Received: by 2002:a37:ba03:: with SMTP id k3mr4055954qkf.127.1576086691049; Wed, 11 Dec 2019 09:51:31 -0800 (PST)
Received: from davidb.org (cn-co-b07400e8c3-142422-1.tingfiber.com. [64.98.48.55]) by smtp.gmail.com with ESMTPSA id f13sm1100473qtj.14.2019.12.11.09.51.29 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 11 Dec 2019 09:51:30 -0800 (PST)
Date: Wed, 11 Dec 2019 10:51:27 -0700
From: David Brown <david.brown@linaro.org>
To: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
Cc: Emmanuel Baccelli <Emmanuel.Baccelli@inria.fr>, "suit@ietf.org" <suit@ietf.org>
Message-ID: <20191211175127.GA832567@davidb.org>
References: <CANK0pbaWkn7w2swRgkOqsTubE1os=rDo2BLjrTZ5eW6ePv3WnA@mail.gmail.com> <20191129183627.GA16289@davidb.org> <DB6PR0801MB1879D9742622EA0AE08A8B72EA430@DB6PR0801MB1879.eurprd08.prod.outlook.com> <CABNHR1yEFvgEzHjBhpqTW-FX+LQTVYuSJE_9SP9OMwzjWsdORQ@mail.gmail.com> <CANK0pbaf8TTtMOSKHD0D-73+MCzSdjk7p+6hVO0WzpSxhF2fVg@mail.gmail.com> <CABNHR1z4N=uH9d5DvyYi17DCULqu3T6Ve9k-_EJr-37zUjF-uw@mail.gmail.com> <CANK0pbYGbzu8VAr7ZuzUOY1yQ75qkMKQ6PAncZCfkH2=RZWNUQ@mail.gmail.com> <CABNHR1wOXx6QRYMMFgnNs12qtc5Ofs8MdR-Oe=d4KRCzXtaiQA@mail.gmail.com> <CANK0pbagZtjzE4vsW6ez76aT2sFeNj_vMr=fKP8Xo6kvCcSF9A@mail.gmail.com> <VI1PR08MB5360CF7EFDF7C550D0D7E755FA5D0@VI1PR08MB5360.eurprd08.prod.outlook.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Disposition: inline
In-Reply-To: <VI1PR08MB5360CF7EFDF7C550D0D7E755FA5D0@VI1PR08MB5360.eurprd08.prod.outlook.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/vBrfrDfN_8vdC_PTEF9iTkUOA10>
Subject: Re: [Suit] Fwd: Firmware Update Paper
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Dec 2019 17:51:35 -0000

On Wed, Dec 04, 2019 at 12:26:39PM +0000, Hannes Tschofenig wrote:

> The signature verification was performed with the HACL library (ed25519) on an
> ARM Cortex-M0+ and took approx. 7 seconds -- so yes, pretty long indeed, in
> this case.

In MCUboot, we ended up using the fiat crypto library (ed25519).  It
does have a fairly large code footprint (about 18k), but does an
ed25519 signature verification in 28ms (Cortex M4, 120Mhz).  Most
other smaller libraries were giving times like seen above, on the
order of tens of seconds.  For reference, libsodium ends up being
about 130k of code, and was about 14ms for the verification.

David

v2.23.0 | Report a Bug | By Email