From nobody Thu Mar 1 02:42:29 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60A0212DA50 for ; Thu, 1 Mar 2018 02:42:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.919 X-Spam-Level: X-Spam-Status: No, score=-1.919 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nz0R1mv4EfGl for ; Thu, 1 Mar 2018 02:42:26 -0800 (PST) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0071.outbound.protection.outlook.com [104.47.0.71]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 08AC112E039 for ; Thu, 1 Mar 2018 02:42:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=1bjllSHSPCdlr/qiwzjGgY9+gHByoFgAbVbpSDqrM4A=; b=Jf/bwik5y3mQ6D0PQFlawMO8BAZ3rtk2UpuofvM+Tj7iGj3/CLBdXtH+PvsJ+KUrlYYMKseWRjx8v+QGO9moXSCd4Fg6Q492epT411O0GoayFf06SEU/UbDAvlDwgvZxDzks1SQ0fzcssD8XVxTdjmdZz7s2PFylAd6YvquG+Ic= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1555.eurprd08.prod.outlook.com (10.168.6.7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.548.13; Thu, 1 Mar 2018 10:42:22 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0527.021; Thu, 1 Mar 2018 10:42:22 +0000 From: Hannes Tschofenig To: Emmanuel Baccelli , "suit@ietf.org" Thread-Topic: [Suit] London IETF Hackathon: Firmware Update Coding Thread-Index: AdOwsfviL/u2jrWxTxuRlzXDudz7TQAAGWaAACXXhjA= Date: Thu, 1 Mar 2018 10:42:21 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1555; 7:Q+PSyupX7rXTDH+EobC7zUlIvdAnPjcxLvNmJ7tbtIiigbetX5JYWgIP3cmPSmfny//ErK3+XH3Y75w6q2rkffhqJmmhxgc1XCTWMRYvHgRezGWKwxwnoyhJnptRCUxVeTVWmSp4TloIv9PKCQ8wF3FD2aDLlr7S3V08sN61zs0xDTLNjube9JzSY/p4QEQHRlAti3WPq/gqobmIVIoiZ0aUPQrJf/eE6OdwpC8OswfJ0Zdp2O8rGQVZ1xAV2daj x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: d2366f07-5b3d-4f37-78a8-08d57f611d3d x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1555; x-ms-traffictypediagnostic: AM4PR0801MB1555: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(180628864354917)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(5005006)(8121501046)(3231220)(944501226)(52105095)(3002001)(93006095)(93001095)(10201501046)(6055026)(6041288)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(20161123558120)(6072148)(201708071742011); SRVR:AM4PR0801MB1555; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1555; x-forefront-prvs: 05986C03E0 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(376002)(396003)(366004)(39860400002)(39380400002)(40434004)(189003)(199004)(53754006)(606006)(55016002)(66066001)(2900100001)(5250100002)(5890100001)(2501003)(76176011)(7696005)(74316002)(7736002)(2420400007)(15650500001)(33656002)(3280700002)(53936002)(53546011)(6506007)(59450400001)(236005)(9686003)(6306002)(54896002)(5660300001)(68736007)(102836004)(26005)(2906002)(10710500007)(186003)(97736004)(7110500001)(229853002)(2950100002)(110136005)(316002)(3846002)(6116002)(790700001)(106356001)(25786009)(81156014)(8676002)(81166006)(8936002)(3660700001)(99286004)(105586002)(86362001)(6246003)(966005)(14454004)(478600001)(72206003)(6436002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1555; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 3n/XvqsJ7mXoaYWhfq2KfhdZ2aUAZz7i+Dg6L+4683fuk06EhF55KJJe0kiK9NNX6L50ZwqGtBeYTX05J0uUSYMDYg7FTQ0OhgEMefuejjLsgPBcoDEWAkgl6RIpHF8/JYGJ77YkqqlzfIdXSSzfezYvX6fDcRlGfGZmqltbKUo= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB2706F3FD90928C9D239B701FFAC60AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: d2366f07-5b3d-4f37-78a8-08d57f611d3d X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Mar 2018 10:42:21.8322 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1555 Archived-At: Subject: Re: [Suit] London IETF Hackathon: Firmware Update Coding X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Mar 2018 10:42:28 -0000 --_000_AM4PR0801MB2706F3FD90928C9D239B701FFAC60AM4PR0801MB2706_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QnJlbmRhbiBzdWdnZXN0ZWQgdG8gdXNlIGVpdGhlciB0aGUgSzY0RiBvciB0aGUgRVZL4oCRT0RJ TuKAkVcyIGZvciB0aGUgTG9uZG9uIElFVEYgSGFja2F0aG9uLiBIZXJlIGlzIHNvbWUgbW9yZSBp bmZvOg0KaHR0cHM6Ly9vcy5tYmVkLmNvbS9wbGF0Zm9ybXMvdWJsb3gtRVZLLU9ESU4tVzIvDQpo dHRwczovL29zLm1iZWQuY29tL3BsYXRmb3Jtcy9GUkRNLUs2NEYvDQoNCkNpYW8NCkhhbm5lcw0K DQpGcm9tOiBTdWl0IFttYWlsdG86c3VpdC1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2Yg RW1tYW51ZWwgQmFjY2VsbGkNClNlbnQ6IDI4IEZlYnJ1YXJ5IDIwMTggMTc6MzcNClRvOiBzdWl0 QGlldGYub3JnDQpTdWJqZWN0OiBSZTogW1N1aXRdIExvbmRvbiBJRVRGIEhhY2thdGhvbjogRmly bXdhcmUgVXBkYXRlIENvZGluZw0KDQpIaSBIYW5uZXMsDQoNCndoYXQgYm9hcmRzIGFyZSB5b3Ug dGhpbmtpbmcgYWJvdXQsIG1vcmUgcHJlY2lzZWx5Pw0KDQpCZXN0DQoNCkVtbWFudWVsDQoNCk9u IFdlZCwgRmViIDI4LCAyMDE4IGF0IDU6MzQgUE0sIEhhbm5lcyBUc2Nob2ZlbmlnIDxIYW5uZXMu VHNjaG9mZW5pZ0Bhcm0uY29tPG1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPj4gd3Jv dGU6DQpIaSBhbGwsDQoNCmF0IHRoZSBjb25mZXJlbmNlIGNhbGwgb24gTW9uZGF5IERhdmUgVGhh bGVyIGFuZCBEYXZlIFdhbHRlcm1pcmUgc3VnZ2VzdGVkIHRvIGRvIHNvbWUgZmlybXdhcmUgdXBk YXRlIHdvcmsgYXQgdGhlIExvbmRvbiBJRVRGIEhhY2thdGhvbiwgd2hpY2ggd2lsbCB0YWtlIHBs YWNlIG9uICBTYXR1cmRheSBNYXJjaCAxNyBhbmQgMTguDQoNCkkgdm9sdW50ZWVyZWQgdG8gaGVs cCB3aXRoIHRoZSBvcmdhbml6YXRpb24uDQoNCkkgaGFkIGJlZW4gdGhpbmtpbmcgYWJvdXQgYnJp bmdpbmcgYSBmZXcgZGV2ZWxvcGVyIGJvYXJkcyBydW5uaW5nIEFybS1iYXNlZCBtaWNyb2NvbnRy b2xsZXJzIHdpdGggbWUgc28gdGhhdCB3ZSBoYXZlIHNvbWUgcmVhbCBzdHVmZiB0byB3b3JrIHdp dGguDQoNCk5lZWRsZXNzIHRvIHNheSB0aGF0IGl0IHdvdWxkIGJlIGdvb2QgZm9yIG1lIHRvIGtu b3cgd2hvIGlzIGludGVyZXN0ZWQgaW4gc3VjaCBhIGhhY2thdGhvbi4gUGxlYXNlIGRyb3AgbWUg YSBwcml2YXRlIG1lc3NhZ2UsIGlmIHlvdSB3b3VsZCBsaWtlIHRvIHBhcnRpY2lwYXRlLiBUaGlz IHdvdWxkIGFsc28gaGVscCBtZSB0byB1bmRlcnN0YW5kIHdobyBpcyBpbnRlcmVzdGVkIGluIHdo YXQuDQoNCkNpYW8NCkhhbm5lcw0KDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2Yg dGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBh bHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQs IHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3Nl IHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3Nl LCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5 b3UuDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpT dWl0IG1haWxpbmcgbGlzdA0KU3VpdEBpZXRmLm9yZzxtYWlsdG86U3VpdEBpZXRmLm9yZz4NCmh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc3VpdA0KDQpJTVBPUlRBTlQgTk9U SUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBj b25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRo ZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVs eSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1 c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBp biBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo= --_000_AM4PR0801MB2706F3FD90928C9D239B701FFAC60AM4PR0801MB2706_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQpA Zm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkxhdG87DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQg MyAyIDM7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3Jt YWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7 DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIiwic2Vy aWYiO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQs IHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNv bG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnNwYW4uRW1haWxTdHls ZTE3DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVmYXVsdA0KCXtt c28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMt c2VyaWYiOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCkBwYWdlIFdvcmRTZWN0aW9u MQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQg NzIuMHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9z dHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVk aXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28g OV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJl ZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9o ZWFkPg0KPGJvZHkgbGFuZz0iRU4tR0IiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRp diBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5CcmVuZGFuIHN1Z2dlc3RlZCB0byB1c2Ug ZWl0aGVyIHRoZSBLNjRGIG9yIHRoZSBFVkvigJFPRElO4oCRVzIgZm9yIHRoZSBMb25kb24gSUVU RiBIYWNrYXRob24uIEhlcmUgaXMgc29tZSBtb3JlIGluZm86PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtMYXRvJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzMzM0U0OCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxhIGhyZWY9Imh0dHBzOi8v b3MubWJlZC5jb20vcGxhdGZvcm1zL3VibG94LUVWSy1PRElOLVcyLyI+aHR0cHM6Ly9vcy5tYmVk LmNvbS9wbGF0Zm9ybXMvdWJsb3gtRVZLLU9ESU4tVzIvPC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj48YSBocmVmPSJodHRwczovL29zLm1iZWQuY29tL3BsYXRmb3Jtcy9GUkRNLUs2 NEYvIj5odHRwczovL29zLm1iZWQuY29tL3BsYXRmb3Jtcy9GUkRNLUs2NEYvPC9hPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+Q2lhbzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5IYW5uZXM8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5G cm9tOjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4g U3VpdCBbbWFpbHRvOnN1aXQtYm91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFsZiBPZiA8L2I+ RW1tYW51ZWwgQmFjY2VsbGk8YnI+DQo8Yj5TZW50OjwvYj4gMjggRmVicnVhcnkgMjAxOCAxNzoz Nzxicj4NCjxiPlRvOjwvYj4gc3VpdEBpZXRmLm9yZzxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTog W1N1aXRdIExvbmRvbiBJRVRGIEhhY2thdGhvbjogRmlybXdhcmUgVXBkYXRlIENvZGluZzxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpIEhhbm5lcyw8bzpwPjwvbzpwPjwv cD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPndoYXQgYm9hcmRzIGFyZSB5b3UgdGhp bmtpbmcgYWJvdXQsIG1vcmUgcHJlY2lzZWx5PzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CZXN0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkVtbWFudWVsPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIFdlZCwgRmViIDI4LCAyMDE4IGF0 IDU6MzQgUE0sIEhhbm5lcyBUc2Nob2ZlbmlnICZsdDs8YSBocmVmPSJtYWlsdG86SGFubmVzLlRz Y2hvZmVuaWdAYXJtLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5j b208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj5IaSBhbGwsDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPmF0IHRo ZSBjb25mZXJlbmNlIGNhbGwgb24gTW9uZGF5IERhdmUgVGhhbGVyIGFuZCBEYXZlIFdhbHRlcm1p cmUgc3VnZ2VzdGVkIHRvIGRvIHNvbWUgZmlybXdhcmUgdXBkYXRlIHdvcmsgYXQgdGhlIExvbmRv biBJRVRGIEhhY2thdGhvbiwgd2hpY2ggd2lsbCB0YWtlIHBsYWNlIG9uICZuYnNwO1NhdHVyZGF5 IE1hcmNoDQogMTcgYW5kIDE4LiA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkkgdm9sdW50 ZWVyZWQgdG8gaGVscCB3aXRoIHRoZSBvcmdhbml6YXRpb24uDQo8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPkkgaGFkIGJlZW4gdGhpbmtpbmcgYWJvdXQgYnJpbmdpbmcgYSBmZXcgZGV2ZWxv cGVyIGJvYXJkcyBydW5uaW5nIEFybS1iYXNlZCBtaWNyb2NvbnRyb2xsZXJzIHdpdGggbWUgc28g dGhhdCB3ZSBoYXZlIHNvbWUgcmVhbCBzdHVmZiB0byB3b3JrIHdpdGguDQo8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPk5lZWRsZXNzIHRvIHNheSB0aGF0IGl0IHdvdWxkIGJlIGdvb2QgZm9y IG1lIHRvIGtub3cgd2hvIGlzIGludGVyZXN0ZWQgaW4gc3VjaCBhIGhhY2thdGhvbi4gUGxlYXNl IGRyb3AgbWUgYSBwcml2YXRlIG1lc3NhZ2UsIGlmIHlvdSB3b3VsZCBsaWtlIHRvIHBhcnRpY2lw YXRlLiBUaGlzIHdvdWxkIGFsc28gaGVscA0KIG1lIHRvIHVuZGVyc3RhbmQgd2hvIGlzIGludGVy ZXN0ZWQgaW4gd2hhdC4gPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5DaWFvPGJyPg0KSGFu bmVzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JTVBPUlRBTlQgTk9USUNFOiBU aGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRl bnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRl bmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQg ZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLA0KIHVzZSBp dCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFu eSBtZWRpdW0uIFRoYW5rIHlvdS4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj4NCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KU3VpdCBtYWlsaW5nIGxp c3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86U3VpdEBpZXRmLm9yZyI+U3VpdEBpZXRmLm9yZzwvYT48 YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N1aXQi IHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3N1 aXQ8L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBj b250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlh bCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVk IHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBu b3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3Ig YW55IHB1cnBvc2UsDQogb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1l ZGl1bS4gVGhhbmsgeW91Lg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_AM4PR0801MB2706F3FD90928C9D239B701FFAC60AM4PR0801MB2706_-- From nobody Thu Mar 1 02:47:18 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C68712DA50 for ; Thu, 1 Mar 2018 02:47:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.01 X-Spam-Level: X-Spam-Status: No, score=-2.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nordicsemi.no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EsY4q23ZJMCQ for ; Thu, 1 Mar 2018 02:47:15 -0800 (PST) Received: from ironport02.nordicsemi.no (mx02.nordicsemi.no [194.19.86.151]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E46A12E037 for ; Thu, 1 Mar 2018 02:46:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nordicsemi.no; l=3180; s=default; t=1519901211; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=0dxW2qgPAkzhOOBO+IobZhKikmofwykZ0IXq8wP61ZE=; b=kZRErP/pcbDcA/SoafhF/z1a6a0k8IJos08L6loGAOIbVyKtVKbeLJSQ KmGn1KQE46JAo3bJDFzkSMEyH9cM+V/xzY1RW33nz4M+tFUjAtXQqF+eE qXRjuiyH2vFnQM2T7yMsM9t4YRDkNPBJSllt155mEiasaXFHWUEIKNdDk g=; X-IronPort-AV: E=Sophos;i="5.47,408,1515452400"; d="scan'208";a="3927622" From: "Puzdrowski, Andrzej" To: "Brendan.Moran@arm.com" , Hannes Tschofenig , "suit@ietf.org" Thread-Topic: Manifest and architecture drafts updated Thread-Index: AdOZEccDjnkaEThLQV+sw99GEdi0xQXZlIcwACuImsAAB7nR8A== Date: Thu, 1 Mar 2018 10:46:48 +0000 Message-ID: <3b4a24a926584958bf1cec860d9aecf7@nordicsemi.no> References: <116e2b54ce094fc1922422b239ae3da6@infineon.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.9.200.83] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Suit] Manifest and architecture drafts updated X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Mar 2018 10:47:17 -0000 Hi Brendan, Hannes, All Bellow are comments from me to the architecture draft https://tools.ietf.org/html/draft-moran-suit-architecture-01 Page6, section 3.5 Hight reliability I would mention possibility of having single bank device on which have 2nd = stage bootloader with build in full featured DFU functionality in such a ma= nner that it would be possible to return to the update process after power = down. Page6, section 3.6 minimal bootloader I would add here possibility of having a recovery mechanism supported as we= ll in minimal bootloader - I mean while full featured DFU mechanism is supp= orted by the IoT application, the minimal bootloader might support for inst= ance constrained serial P2P recovery DFU (it might be extended to even con= strained P2P BLE recovery DFU or USB, for instance because for some multipr= ocessor IoT devices which operates on WiFi and full featured OS it is still= very basic protocol). Such a recovery mechanism must provide security at last at the same level = as full featured DFU functionalities in IoT application. Does it make sense? BR Andrzej Puzdrowski =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Hannes Tschofenig Sent: Monday, January 29, 2018 4:03 PM To: suit@ietf.org Subject: [Suit] Manifest and architecture drafts updated Hi all, we just submitted updates to the manifest and the architecture documents. H= ere are the two drafts: https://tools.ietf.org/html/draft-moran-suit-manifest-01 https://tools.ietf.org/html/draft-moran-suit-architecture-01 The architecture document got enhanced to now include a threat analysis, se= curity requirements, user stories, etc. This additional text has been motiv= ated by mailing list discussions late last year. The text explains the pres= ence of attributes in the manifest and the security mechanisms needed to pr= otect them. Here is the diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-moran-suit-architecture-01 The manifest document has only seen editorial updates, see https://www.ietf= .org/rfcdiff?url2=3Ddraft-moran-suit-manifest-01 Thanks for the feedback so far. Ciao Hannes & Brendan IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. _______________________________________________ Suit mailing list Suit@ietf.org https://www.ietf.org/mailman/listinfo/suit From nobody Thu Mar 1 04:49:42 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E8291274D2 for ; Thu, 1 Mar 2018 04:49:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.92 X-Spam-Level: X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n5OEvP35QJAN for ; Thu, 1 Mar 2018 04:49:36 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0077.outbound.protection.outlook.com [104.47.1.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4BCBF1204DA for ; Thu, 1 Mar 2018 04:49:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=yYwMurU9LdjWJqGLd2sHGQFewAMzBQBmiDTtsOyOV84=; b=jmSsSSkk6x13zMGUZxsZd9+Va03i1ZHztz9XdCV6zAWF2hl3MpuHN9vpoD1TOlQjVvMSjCi0Q0+cQdINnPVOwu1wyB4oX4fvUWu1FoOazbFV/9VsGX6KFV0LDZjBrWWcuu+iPq5ewbamBJSgYUmhG3OXWgiHTQSqkbWP3gbKDXE= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1601.eurprd08.prod.outlook.com (10.168.6.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.548.13; Thu, 1 Mar 2018 12:49:33 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0527.021; Thu, 1 Mar 2018 12:49:33 +0000 From: Hannes Tschofenig To: "Puzdrowski, Andrzej" , Brendan Moran , "suit@ietf.org" Thread-Topic: Manifest and architecture drafts updated Thread-Index: AdOZEccDjnkaEThLQV+sw99GEdi0xQXZlIcwACuImsAAB7nR8AAFYc1w Date: Thu, 1 Mar 2018 12:49:33 +0000 Message-ID: References: <116e2b54ce094fc1922422b239ae3da6@infineon.com> <3b4a24a926584958bf1cec860d9aecf7@nordicsemi.no> In-Reply-To: <3b4a24a926584958bf1cec860d9aecf7@nordicsemi.no> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1601; 7:UHCt11jF7t/P70QUoR6rTSt20Ti3mFZ+YfZX0Bvs8rEOraFs/gAPPXQWOXBBmBpiMYcnxW9/2COqfRuwWff5ngZadF140mEABAhArWthkcxV4pWUnZZqwlgbrLf8TZ0GkUFfahbVmeIhrfKhztd3SWUiRMLsFDIDIJCb8iSudBQzvP8Mh9dDrLODb/7os7E3kUSwyK3wcyEv3GuScBNsi04iVPx6jd/Ht1gXOMpe7O8VIi2I5tYVbR5OI81yivlw x-ms-exchange-antispam-srfa-diagnostics: SSOS;SSOR; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 2ef7cc51-92dc-46b0-bc63-08d57f72e1c8 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1601; x-ms-traffictypediagnostic: AM4PR0801MB1601: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(5005006)(8121501046)(10201501046)(3002001)(93006095)(93001095)(3231220)(944501227)(52105095)(6055026)(6041288)(20161123564045)(20161123560045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(6072148)(201708071742011); SRVR:AM4PR0801MB1601; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1601; x-forefront-prvs: 05986C03E0 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39380400002)(376002)(39860400002)(396003)(346002)(366004)(189003)(51914003)(53754006)(13464003)(40434004)(199004)(106356001)(66066001)(5890100001)(26005)(102836004)(7736002)(74316002)(229853002)(2950100002)(5250100002)(33656002)(316002)(305945005)(3280700002)(7696005)(105586002)(478600001)(5660300001)(6506007)(53546011)(2501003)(99286004)(3846002)(110136005)(6116002)(966005)(72206003)(76176011)(59450400001)(2906002)(14454004)(15650500001)(97736004)(86362001)(3660700001)(55016002)(6436002)(9686003)(93886005)(68736007)(8936002)(2900100001)(81166006)(25786009)(6246003)(8676002)(53936002)(6306002)(81156014)(186003); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1601; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 5Eo+p+CqoOvrf5rds7iwpmnw1t11kNcrZ5hlrA7tayKg4olHopmCYvFefkS4UqaOoo80n7fdrvHLDEZipX7gtlAmPYXHcilZVOQHoA4/mE0maGBM1IzKvGg9u93R0kd3euh6Mzr0mqMxIlfXXfiSe6Wgw8q71lqp9xV2xl8GGSg= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2ef7cc51-92dc-46b0-bc63-08d57f72e1c8 X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Mar 2018 12:49:33.2884 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1601 Archived-At: Subject: Re: [Suit] Manifest and architecture drafts updated X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Mar 2018 12:49:39 -0000 Hi Andrzej, Thanks for the review comments; my remarks are below: -----Original Message----- From: Puzdrowski, Andrzej [mailto:Andrzej.Puzdrowski@nordicsemi.no] Sent: 01 March 2018 11:47 To: Brendan Moran; Hannes Tschofenig; suit@ietf.org Subject: RE: Manifest and architecture drafts updated Hi Brendan, Hannes, All Bellow are comments from me to the architecture draft https://tools.ietf.org/html/draft-moran-suit-architecture-01 Page6, section 3.5 Hight reliability I would mention possibility of having single bank device on which have 2nd = stage bootloader with build in full featured DFU functionality in such a ma= nner that it would be possible to return to the update process after power = down. [Hannes] Good point. I have updated the text to reflect your comment: " A power failure at any time must not cause a failure of the device. A failu= re to validate any part of an update must not cause a failure of the device= . One way to achieve this functionality is to provide a minimum of two stor= age locations for firmware and one bootable location for firmware. An alter= native approach is to use a 2nd stage bootloader with build-in full feature= d firmware update functionality such that it is possible to return to the u= pdate process after power down. Note: This is an implementation requirement rather than a requirement on th= e manifest format. " Is this better? Page6, section 3.6 minimal bootloader I would add here possibility of having a recovery mechanism supported as we= ll in minimal bootloader - I mean while full featured DFU mechanism is supp= orted by the IoT application, the minimal bootloader might support for inst= ance constrained serial P2P recovery DFU (it might be extended to even con= strained P2P BLE recovery DFU or USB, for instance because for some multipr= ocessor IoT devices which operates on WiFi and full featured OS it is still= very basic protocol). Such a recovery mechanism must provide security at last at the same level = as full featured DFU functionalities in IoT application. [Hannes] I have changed the text accordingly: " ## Operates with a small bootloader The bootloader must be minimal, containing only flash support, cryptographi= c primitives and optionally a recovery mechanism. The recovery mechanism is= used in case the update process failed and may include support for firmwar= e updates over serial, USB or even a limited version of Bluetooth Smart. Su= ch a recovery mechanism must provide security at least at the same level as= the full featured firmware update functionalities. The bootloader needs to verify the received manifest and to install the boo= table firmware image. The bootloader should not require updating since a fa= iled update poses a risk in reliability. If more functionality is required = in the bootloader, it must use a two-stage bootloader, with the first stage= comprising the functionality defined above. All information necessary for a device to make a decision about the install= ation of a firmware update must fit into the available RAM of a constrained= IoT device. This prevents flash write exhaustion. Note: This is an implementation requirement. " Does this look better now? Does it make sense? [Hannes] Yep; makes sense to me. Ciao Hannes BR Andrzej Puzdrowski =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Hannes Tschofenig Sent: Monday, January 29, 2018 4:03 PM To: suit@ietf.org Subject: [Suit] Manifest and architecture drafts updated Hi all, we just submitted updates to the manifest and the architecture documents. H= ere are the two drafts: https://tools.ietf.org/html/draft-moran-suit-manifest-01 https://tools.ietf.org/html/draft-moran-suit-architecture-01 The architecture document got enhanced to now include a threat analysis, se= curity requirements, user stories, etc. This additional text has been motiv= ated by mailing list discussions late last year. The text explains the pres= ence of attributes in the manifest and the security mechanisms needed to pr= otect them. Here is the diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-moran-suit-architecture-01 The manifest document has only seen editorial updates, see https://www.ietf= .org/rfcdiff?url2=3Ddraft-moran-suit-manifest-01 Thanks for the feedback so far. Ciao Hannes & Brendan IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. _______________________________________________ Suit mailing list Suit@ietf.org https://www.ietf.org/mailman/listinfo/suit IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Thu Mar 1 07:37:54 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E620C12D7ED for ; Thu, 1 Mar 2018 07:37:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FIOey8W57ee5 for ; Thu, 1 Mar 2018 07:37:50 -0800 (PST) Received: from gcc01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0138.outbound.protection.outlook.com [23.103.200.138]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6782C12E8C2 for ; Thu, 1 Mar 2018 07:37:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=tVcVQSZ5nerJI1A2uUmI9/UHCJ+aS9Y9wWkwIQhNvGs=; b=k31zEC0I6vs+e7HvzrM7lXM+Y1V1R4+EmYNjyptt8pUsMYEimi2MSmFFS4F7DDbBNhU3ln1/dpVrW74fyjyrQ+L+gALOUPE/mJN+dFUuCFtvokuko0rYwPkS6uUw6tyJnSO7bNKd1pC4idqvvuKR/zppASJJAXJ5+i+GlkdTjNI= Received: from MW2PR0901MB2313.namprd09.prod.outlook.com (52.132.147.27) by MW2PR0901MB2315.namprd09.prod.outlook.com (52.132.147.29) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.548.13; Thu, 1 Mar 2018 15:37:49 +0000 Received: from MW2PR0901MB2313.namprd09.prod.outlook.com ([fe80::70c1:9b22:8b43:4053]) by MW2PR0901MB2313.namprd09.prod.outlook.com ([fe80::70c1:9b22:8b43:4053%13]) with mapi id 15.20.0548.014; Thu, 1 Mar 2018 15:37:49 +0000 From: "Waltermire, David A. (Fed)" To: Hannes Tschofenig , "suit@ietf.org" Thread-Topic: [Suit] London IETF Hackathon: Firmware Update Coding Thread-Index: AdOwsfviL/u2jrWxTxuRlzXDudz7TQAwTIdw Date: Thu, 1 Mar 2018 15:37:49 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov; x-originating-ip: [129.6.224.58] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; MW2PR0901MB2315; 7:RkUpLMhMhYjrp+O0BntISt5YOXhi0Sav/I73+gDEC/czUNhoVUSNQfJcIHsf2tYVqT/FOWlJfq6Rqc77qsCmdCfoKXgnxiT6xP5mkhComhs37bSr3uqqxSy5By7EQhfoVzTy0YwRYKVfeJZ5fiNm4xWv9sBHSVG5ITT8MGS8QliC9d3THgmu24xZetmOssfKU34ZJ6xN5XuiMWCMUGq3Pieg88/nElrwmc8lRjHUOz2yEDe+3aaVIx4ttCIWs62D x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: c0cd6529-01bb-4963-1662-08d57f8a635d x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:MW2PR0901MB2315; x-ms-traffictypediagnostic: MW2PR0901MB2315: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040501)(2401047)(5005006)(8121501046)(3002001)(3231220)(944501227)(52105095)(10201501046)(93006095)(93001095)(6055026)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123560045)(20161123562045)(20161123558120)(6072148)(201708071742011); SRVR:MW2PR0901MB2315; BCL:0; PCL:0; RULEID:; SRVR:MW2PR0901MB2315; x-forefront-prvs: 05986C03E0 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(39860400002)(39380400002)(346002)(396003)(376002)(40434004)(189003)(199004)(53754006)(7696005)(99286004)(25786009)(316002)(229853002)(19609705001)(110136005)(33656002)(2950100002)(86362001)(6246003)(66066001)(2420400007)(15650500001)(14454004)(102836004)(68736007)(55016002)(9686003)(478600001)(53936002)(6306002)(54896002)(26005)(7736002)(74316002)(186003)(106356001)(6506007)(53546011)(6436002)(5250100002)(59450400001)(5890100001)(2501003)(105586002)(3660700001)(8676002)(81166006)(81156014)(2900100001)(2906002)(8936002)(6116002)(76176011)(3280700002)(790700001)(3846002)(10710500007)(97736004)(7110500001)(5660300001); DIR:OUT; SFP:1102; SCL:1; SRVR:MW2PR0901MB2315; H:MW2PR0901MB2313.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-microsoft-antispam-message-info: CYJUTFet3lnztx8+mCVySZcgfuSbuU20KV0UUHZpR8FIaE1Ncnf1HT0BHQK5/pXLWWZ/ZUkHqYTlG0BLVJXCXulsULTxM60BzmMNMIcPcPBKfkyKCtmZlmSPGD2t/a8FoXEnlYl2fgkv7rCJERLRBg611itmrwz3FlXwbcZtoCo= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_MW2PR0901MB2313D7C930ADB2CAD48F2329F0C60MW2PR0901MB2313_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: c0cd6529-01bb-4963-1662-08d57f8a635d X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Mar 2018 15:37:49.1427 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW2PR0901MB2315 Archived-At: Subject: Re: [Suit] London IETF Hackathon: Firmware Update Coding X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Mar 2018 15:37:53 -0000 --_000_MW2PR0901MB2313D7C930ADB2CAD48F2329F0C60MW2PR0901MB2313_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hannes, Thanks for helping with this. Regards, Dave From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Hannes Tschofenig Sent: Wednesday, February 28, 2018 11:35 AM To: suit@ietf.org Subject: [Suit] London IETF Hackathon: Firmware Update Coding Hi all, at the conference call on Monday Dave Thaler and Dave Waltermire suggested = to do some firmware update work at the London IETF Hackathon, which will ta= ke place on Saturday March 17 and 18. I volunteered to help with the organization. I had been thinking about bringing a few developer boards running Arm-based= microcontrollers with me so that we have some real stuff to work with. Needless to say that it would be good for me to know who is interested in s= uch a hackathon. Please drop me a private message, if you would like to par= ticipate. This would also help me to understand who is interested in what. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_MW2PR0901MB2313D7C930ADB2CAD48F2329F0C60MW2PR0901MB2313_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hannes,

 

Thanks for helping with this.

 

Regards,

Dave

 

From: Suit [mailto:suit-bounces@ietf.org] = On Behalf Of Hannes Tschofenig
Sent: Wednesday, February 28, 2018 11:35 AM
To: suit@ietf.org
Subject: [Suit] London IETF Hackathon: Firmware Update Coding

 

Hi all,

 

at the conference call on Monda= y Dave Thaler and Dave Waltermire suggested to do some firmware update work= at the London IETF Hackathon, which will take place on  Saturday Marc= h 17 and 18.

 

I volunteered to help with the = organization.

 

I had been thinking about bring= ing a few developer boards running Arm-based microcontrollers with me so th= at we have some real stuff to work with.

 

Needless to say that it would b= e good for me to know who is interested in such a hackathon. Please drop me= a private message, if you would like to participate. This would also help = me to understand who is interested in what.

 

Ciao
Hannes

 

IMPORTANT NOTICE: The contents = of this email and any attachments are confidential and may also be privileg= ed. If you are not the intended recipient, please notify the sender immedia= tely and do not disclose the contents to any other person, use it for any purpose, or store or copy the informat= ion in any medium. Thank you.

--_000_MW2PR0901MB2313D7C930ADB2CAD48F2329F0C60MW2PR0901MB2313_-- From nobody Fri Mar 2 02:17:18 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD96B127137 for ; Fri, 2 Mar 2018 02:17:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=infineon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ry9PQhwdcE6M for ; Fri, 2 Mar 2018 02:17:13 -0800 (PST) Received: from smtp11.infineon.com (smtp11.infineon.com [IPv6:2a00:18f0:1e00:4::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA367124B18 for ; Fri, 2 Mar 2018 02:17:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=infineon.com; i=@infineon.com; q=dns/txt; s=IFXMAIL; t=1519985833; x=1551521833; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=2uv+tgdyH+gzCxHobuMu6CaJ961LWvg/wx3RRKLJAR4=; b=VAHXdLvU8d6/SSCw4z/E/QdUDvzcxRNAJ1lAycp5AtVHaJJF0QPQS88/ hSlOorkZukwqbFmAgIqL+z1mmPl0QqWtG+OI3RMs7/7mMmn3NkUe/3mGP G00yJogQ0QZDikQkqMssPHPWnu0Zi8O9PGvXmCVujDM9rL3cgpD8K7F0e U=; X-SBRS: None Received: from unknown (HELO mucxv001.muc.infineon.com) ([172.23.11.16]) by smtp11.infineon.com with ESMTP/TLS/AES256-GCM-SHA384; 02 Mar 2018 11:17:11 +0100 Received: from MUCSE707.infineon.com (MUCSE707.infineon.com [172.23.7.81]) by mucxv001.muc.infineon.com (Postfix) with ESMTPS; Fri, 2 Mar 2018 11:17:11 +0100 (CET) Received: from MUCSE705.infineon.com (172.23.7.79) by MUCSE707.infineon.com (172.23.7.81) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.1415.2; Fri, 2 Mar 2018 11:17:10 +0100 Received: from MUCSE702.infineon.com (172.23.7.91) by MUCSE705.infineon.com (172.23.7.79) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.1415.2; Fri, 2 Mar 2018 11:17:10 +0100 Received: from MUCSE702.infineon.com ([172.23.106.22]) by MUCSE702.infineon.com ([172.23.106.22]) with mapi id 15.01.1415.003; Fri, 2 Mar 2018 11:17:10 +0100 From: To: , , Thread-Topic: Manifest and architecture drafts updated Thread-Index: AdOZEccDjnkaEThLQV+sw99GEdi0xQXZlIcwACuImsAANwBvYA== Date: Fri, 2 Mar 2018 10:17:10 +0000 Message-ID: <19b7bb4623ba44b5a4e3b8fe598e1858@infineon.com> References: <116e2b54ce094fc1922422b239ae3da6@infineon.com> In-Reply-To: Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.23.8.247] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Suit] Manifest and architecture drafts updated X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Mar 2018 10:17:17 -0000 Hi Hannes, Thanks for the quick response, providing clarification and suggestions to u= pdate text.=20 Please find my comments/ answers marked with [mg].=20 Regarding mandatory to implement set of algorithms and content encryption k= ey distribution/protection methods I have some additional comments to what = you propose.=20 Since this e-mail is already quite long and potentially these two topics re= quire more discussion, I felt it easier to address these the two specific t= opic in an different email with a subject dedicated to the topic.=20 Thanks, Markus -----Original Message----- From: Hannes Tschofenig [mailto:Hannes.Tschofenig@arm.com]=20 Sent: Thursday, March 01, 2018 8:38 AM To: Gueller Markus (IFAG CCS ESS TCE CE); Brendan Moran; suit@ietf.org Subject: RE: Manifest and architecture drafts updated Hi Markus, Thanks for the detailed review. -----Original Message----- From: Markus.Gueller@infineon.com [mailto:Markus.Gueller@infineon.com] Sent: 28 February 2018 11:56 To: Hannes Tschofenig; Brendan Moran; suit@ietf.org Subject: RE: Manifest and architecture drafts updated Hannes, Brendan, All >>we just submitted updates to the manifest and the architecture documents. >>Here are the two drafts: https://tools.ietf.org/html/draft-moran-suit-architecture-01 Thanks for the update. Adding section 11 is really valuable when it comes t= o understanding where the fields of the manifest are derived. Please find my comments and questions below after a first review of the Arc= hitecture Document. I hope this is the right form to address this. Any comments, feedback, clar= ification, corrections are appreciated. *Page 6, Section 3.3 Uses state-of-the-art security mechanisms: State-of the-art security can mean a lot of things and is really very high = level. Would it make sense to specify this a bit more. E.g.: -There has been discussion on Resistance against Quantum Cryptography on th= e mailing list. Is it worth mentioning? -Does it make sense to specify the minimum Security Strength of Algorithms = required for the IETF SUIT? E.g. The Security Strength (Bits of Security) of Cryptographic Algorithms u= sed to provide firmware image authentication and confidentiality protection= must be 128 Bits of Security or greater .... (Security Strength Definitions can be found in NIST SP 800-57 Part1, Sectio= n 5.6.1. Note I am not suggesting only to allow algorithms listed in SP 800= -57) [hannes] Good points. What about adding this paragraph to Section 3.3: " The use of post-quantum secure signature mechanisms, such as hash-based sig= natures, should be explored. A mandatory-to-implement set of algorithms has= to be defined offering a key length of 112-bit symmetric key or security o= r more, as outlined in Section 20 of RFC 7925. This corresponds to a 233 bi= t ECC key or a 2048 bit RSA key. " [mg] I will provide comments in a separate e-mail specific to mandatory-to-= implement set of algorithms. I am open for suggestions on better wording of the post quantum secure algo= rithms support. I would add specific mandatory-to-implement algorithms in the manifest form= at itself. I would say something like MUST implement ECC with NIST P-256r1,= AES-128-CCM, and SHA256. As an SHOULD implement I would use Ed25519, CHACH= A20-POLY1305 and SHA256 (which seems to be close to what TLS 1.3 is recomme= nding). Does this sound reasonable to you? [mg] I will provide comments in a separate e-mail specific to mandatory-to-= implement set of algorithms.. * Page 6, Section 3.4 Rollback attacks must be prevented -I am not sure how the last paragraphs (manifest parsing) relates to rollba= ck protection? I would have rather expected some text as described in section 11.2.1 [hannes] I have re-arranged the text. Here is the new text for Section 3.4: [mg] Thanks. " ## Rollback attacks must be prevented A device presented with an old, but valid manifest and firmware must not be= tricked into installing such firmware since a vulnerability in the old fir= mware image may allow an attacker gain control of the device. " *Page 6, Section 3.5 High Reliability Reading on page 12, Section 8 its states the following is _out of scope_: 'installing firmware updates in a robust fashion so that the update does no= t break the device functionality of the environment this device operates in= ' -This seems to be in conflict what is stated in Section 3.5 as Requirement? -In addition shall the IoT Firmware Update Architecture really limit the up= date to a Dual Image Approach ? Of course it is the most robust approach, but due to NVM Constraints of Dev= ices a Single Image Update should not be excluded. [hannes] In some sense it is desirable to provide functionality that does n= ot break the device but on the other hand there is nothing in the manifest = and consequently nothing in the specification that will really enable it si= nce this is a system implementation design aspect. I understand that some p= eople do not want to use a dual image approach and prefer to take the risk = of going for a single image update. Would you prefer to have this paragraph re-written or even dropped? [mg] My main focus was on clarification. Also looking at the recent discuss= ions I think there is no need for action. *Page 6, Minimal bootloader -What does 'validate the received _firmware_' mean? I would assume it means to validate the manifest including verification of = manifest signature, validation of manifest claims and Check of Hash over Fi= rmware Image and optionally decryption of the received firmware image...? In general it is unclear what is the meaning of '_firmware_' in this sectio= n (manifest and firmware image OR firmware image only) , since the term 'fi= rmware' by itself in not defined/mentioned in Section 2 and some parts of t= he architecture explicitly use 'firmware image' and other sections talk abo= ut 'firmware' (e.g. Section 6 Example Flow, where I would interpret that fi= rmware means firmware image) [hannes] I used firmware and firmware image interchangeable. I re-wrote the= sentence: " The bootloader must be minimal, containing only the flash and cryptographic= primitives. It needs to verify the received manifest and to install the bo= otable firmware image. The bootloader should not require updating, since a = failed update poses a risk in reliability. If more functionality is require= d in the bootloader, it must use a two-stage bootloader, with the first sta= ge comprising the functionality defined above. " Is this better? [mg] Yes. Thanks for adding clarification. *Page 9, Section 4 Architecture It states: " For confidentiality protection of firmware images the author needs to be in possession of the certificate/public key of a device." There are also Symmetric Key Options (Recipient Algorithms) for Content Enc= ryption Key (CEK) Distribution, which is actually already stated in the man= ifest draft . -Therefore the above sentence should be updated to reflect, clarify also us= age of symmetric keys as an additional option for confidentiality protectio= n!? [Hannes] I believe this is correct since the use of a key transport mechani= sm would require the use of public key encryption of the content encryption= key. The CEK would then be used to encrypt the firmware image itself. This= would still require the author to know the public keys of all the device. The pure use of symmetric keys has only been envisioned but not described s= o far. [mg] I will provide comments in a separate e-mail specific to content encry= ption key distribution. *Page 19, Section 11.3.5 & Page 24, Section 11.6.11 With the update of the Threat Model for the first time symmetric signatures= come into the picture as a requirement. In 11.6.11 states: " .. If Message Authentication Codes (MAC) are used for= authenticity, then devices MUST have unique pre-hared keys." In the previous Architecture Version 00 it stated " Future versions may als= o describe a symmetric key approach for very constrained devices" Some comments for discussion: While the benefit of symmetric device individual signatures is to support v= ery constrained devices with non-public key cryptography support, it comes = with some drawbacks: 1) cost of complexity for symmetric device individual key management ; 2) Device Individual Manifests are non broadcast friendly requiring some fo= rm of online environment versus e.g. utilizing an store and forward archite= cture; 3) Impact to some already defined requirements: E.g. how to comply to MSFR6= (Handling Authorship right and a Qualification right with symmetric device= individual signatures seems to be very hard in practice in my opinion) If there is a requirement to support symmetric signatures (which is my inte= rpretation from 11.3.5 and 11.6.11) then: 1) To be consistent it should also be stated in Section 4 Architecture, whe= re currently only public key cryptography is stated (..We use public key cr= yptography to accomplish this..) ? 2) The drawbacks and potential conflicts to part of the architecture should= be documented 3) Potentially it should be stated that Public Key Cryptography is the pref= erred choice... ? -The other alternative would be to focus on asymmetric signatures only in t= he first version... [Hannes] I agree with your assessment. Currently the document really focuse= d on public key crypto and that's what we have implemented so far. We have = repeatedly been told that a symmetric key version is necessary as well to d= eal with the low end IoT devices with all the pros & cons it has. Right now= the symmetric key version has not been described throughout the document a= nd hence I prefer to remove these sentences from the current version of the= document since, as you stated, the story in the document isn't consistent.= We could use the next IETF meeting to discuss the symmetric key mechanism = and to make a decision about how to best incorporate it. Hence, I agree wit= h you that we should focus on the asymmetric crypto version for the current= version. * Section 11. Threat Description, General Comment Although Confidentiality Protection is optional I currently don't see this = topic addressed in section 11 (and hence no requirements for key managemen= t fields for payload protection in section 11.6 Manifest Fields ). Therefore I see two possible topics where it might make sense to add: 1) Add a Threat in Section 11.2, Reverse Engineering Of Firmware Image for = Vulnerability Analysis: An Attacker wants to mount an attack on an IoT Device. To prepare the atta= ck he retrieves the provided Firmware Image and performs reverse engineerin= g of the Firmware Image to analyze it for specific vulnerabilities. 2) Add a Use Case in Section 11.4, IP Protection: As an OEM or Developer for IoT devices, I want to protect the IP contained= in the Firmware Image. -Would the above or similar text make sense to add to be consistent how the= Manifest Fields are derived in section 11.6? [Hannes] This is a good idea. I added the following text: A.2.11. Threat MFT11: Reverse Engineering Of Firmware Image for Vulnerability Analysis Classification: All Types An attacker wants to mount an attack on an IoT device. To prepare the attack he or she retrieves the provided firmware image and performs reverse engineering of the firmware image to analyze it for specific vulnerabilities. A.3.7. Security Requirement MFSR7: Firmware encryption Firmware images must be encrypted to prevent third parties, including attackers, from reading the content of the firmware image and to reverse engineer the code. Mitigates: MFT11 A.4.6. Use Case MFUC6: IP Protection As an OEM or developer for IoT devices, I want to protect the IP contained in the firmware image, such as the utilized algorithms. The need for protecting IP may have also been imposed on my due to the use of some third party code libraries. A.6.15. Manifest Field: Key Table Encrypting firmware images requires symmetric content encryption keys to be provided in the manifest, which themselves have to be encrypted using the public keys of devices. Implements: Security Requirement MFSR7. [mg] Thanks for adding.=20 I will provide comments in a separate e-mail, specific to the text proposed= in A.6.15 content encryption key distribution. Thanks again for the detailed review, Markus. Ciao Hannes Thanks, Markus This e-mail and any attachments are confidential. They are intended solely = for the attention and use of the named addressee(s). If you are not the nam= ed addressee(s) you must not use, disclose, retain or reproduce all or any = part of the information contained in this e-mail or any attachments. Any un= authorized use or disclosure may be unlawful. If you have received this e-m= ail by mistake, please inform the sender immediately and delete it and all = copies from your system and destroy any hard copies of it. From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Hannes Tschofenig Sent: Monday, January 29, 2018 4:03 PM To: suit@ietf.org Subject: [Suit] Manifest and architecture drafts updated Hi all, we just submitted updates to the manifest and the architecture documents. H= ere are the two drafts: https://tools.ietf.org/html/draft-moran-suit-manifest-01 https://tools.ietf.org/html/draft-moran-suit-architecture-01 The architecture document got enhanced to now include a threat analysis, se= curity requirements, user stories, etc. This additional text has been motiv= ated by mailing list discussions late last year. The text explains the pres= ence of attributes in the manifest and the security mechanisms needed to pr= otect them. Here is the diff: https://www.ietf.org/rfcdiff?url2=3Ddraft-moran-suit-architecture-01 The manifest document has only seen editorial updates, see https://www.ietf= .org/rfcdiff?url2=3Ddraft-moran-suit-manifest-01 Thanks for the feedback so far. Ciao Hannes & Brendan IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Fri Mar 2 02:47:35 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 467E8124B18 for ; Fri, 2 Mar 2018 02:47:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.299 X-Spam-Level: X-Spam-Status: No, score=-4.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=infineon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6oJZB_BF-YLU for ; Fri, 2 Mar 2018 02:47:32 -0800 (PST) Received: from smtp11.infineon.com (smtp11.infineon.com [IPv6:2a00:18f0:1e00:4::5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 06DF0120725 for ; Fri, 2 Mar 2018 02:47:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=infineon.com; i=@infineon.com; q=dns/txt; s=IFXMAIL; t=1519987652; x=1551523652; h=from:to:subject:date:message-id:mime-version; bh=exLm7yDKjGZQBo67CdgZDZgdhDOvjXWxtICbt3Po5Vw=; b=e3zBvRDDKS/uWtY2chtYo53DPZDueIsa8EkeX4QioUqNmwge/o8iLwrP bMKZvl+mA+DTHnk4dQv86ZEYgYTPioXRcgvTOGR0Hs9gTCmPIrhooLr4x crE8MW8UJa3HJ7eJ62S736eoiJr2trFmCmmMSo5sJs1nLNmNYiV3V4BV3 g=; X-SBRS: None Received: from unknown (HELO mucxv003.muc.infineon.com) ([172.23.11.20]) by smtp11.infineon.com with ESMTP/TLS/AES256-GCM-SHA384; 02 Mar 2018 11:47:30 +0100 Received: from MUCSE706.infineon.com (MUCSE706.infineon.com [172.23.7.80]) by mucxv003.muc.infineon.com (Postfix) with ESMTPS; Fri, 2 Mar 2018 11:47:30 +0100 (CET) Received: from MUCSE705.infineon.com (172.23.7.79) by MUCSE706.infineon.com (172.23.7.80) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.1415.2; Fri, 2 Mar 2018 11:47:29 +0100 Received: from MUCSE702.infineon.com (172.23.7.91) by MUCSE705.infineon.com (172.23.7.79) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.1415.2; Fri, 2 Mar 2018 11:47:29 +0100 Received: from MUCSE702.infineon.com ([172.23.106.22]) by MUCSE702.infineon.com ([172.23.106.22]) with mapi id 15.01.1415.003; Fri, 2 Mar 2018 11:47:29 +0100 From: To: , , Thread-Topic: Mandatory To Implement Set of Algorithms Thread-Index: AdOyCJGZ7GC+IhdeStGsyqT+x+txLw== Date: Fri, 2 Mar 2018 10:47:29 +0000 Message-ID: Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.23.8.247] Content-Type: multipart/alternative; boundary="_000_eb74dad82391410fb4d2099274587443infineoncom_" MIME-Version: 1.0 Archived-At: Subject: [Suit] Mandatory To Implement Set of Algorithms X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Mar 2018 10:47:34 -0000 --_000_eb74dad82391410fb4d2099274587443infineoncom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hannes, I added my initial comments/thinking regarding your suggestion, question on= Mandatory Set To Implement Set of Algorithms marked with [mg]. This is a new topic for me, and may require a bit more thinking (on my side= ) Thanks, Markus [hannes] Good points. What about adding this paragraph to Section 3.3: " The use of post-quantum secure signature mechanisms, such as hash-based sig= natures, should be explored. A mandatory-to-implement set of algorithms has= to be defined offering a key length of 112-bit symmetric key or security o= r more, as outlined in Section 20 of RFC 7925. This corresponds to a 233 bi= t ECC key or a 2048 bit RSA key. " [mg] My motivation was to suggest more details in this section by specifyin= g a minimum security level, and referring to 112-bit symmetric key and sect= ion 20 of RFC 7925 sounds good. However I am not sure about the 'mandatory-to-implement' part, since this i= s in my opinion is a different and completely new topic and has more implic= ations. Also see my next comment Therefore I would prefer to adapt your suggested text and remove the 'manda= tory-to-implement' for the architecture under the heading 'Uses state-of-th= e-art security mechanisms': " The use of post-quantum secure signature mechanisms, such as hash-based s= ignatures, should be explored. A minimum key length of 112-bit symmetric ke= y or security OR more, as outlined in Section 20 of RFC 7925 shall be used.= This corresponds to a 233 bit ECC key or a 2048 bit RSA key." Would this be ok? I am open for suggestions on better wording of the post quantum secure algo= rithms support. I would add specific mandatory-to-implement algorithms in the manifest form= at itself. I would say something like MUST implement ECC with NIST P-256r1,= AES-128-CCM, and SHA256. As an SHOULD implement I would use Ed25519, CHACH= A20-POLY1305 and SHA256 (which seems to be close to what TLS 1.3 is recomme= nding). Does this sound reasonable to you? [mg] Regarding a _mandatory_ Algorithm Set in the manifest I have one ques= tion/potential concern: What if an Device vendor is required (for whatever reason) to implement a '= higher' Algorithm Set (e.g. ECC NIST-P521, AES-256-CCM, SHA-512) to protect= the update solution for his devices. Based on your MUST statement I interpret that he still be required to imple= ment and accept updates with a lower security, making his SUIT IoT Solution= more unsecure in the context of Bits of Security/ Key Length. I am not sure if my understanding is correct, if yes then I am reluctant th= at IETF specifies the one _mandatory_ to implement Algorithm Set. In general the definition of Algorithm Sets (e.g. or something like SUIT Ci= phersuits) might be helpful and a good idea to have a basis for interoperab= ility between 'Author Systems' and IoT Devices. --_000_eb74dad82391410fb4d2099274587443infineoncom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hannes,

 

I added my initial comments/thinking regarding yo= ur suggestion, question on Mandatory Set To Implement Set of Algorithms mar= ked with [mg].

This is a new topic for me, and may require a bit= more thinking (on my side)

 

Thanks,

Markus

 

[hannes] Good points. What about adding this para= graph to Section 3.3:

 

"

The use of post-quantum secure signature mechanis= ms, such as hash-based signatures, should be explored. A mandatory-to-imple= ment set of algorithms has to be defined offering a key length of 112-bit s= ymmetric key or security or more, as outlined in Section 20 of RFC 7925. This corresponds to a 233 bit ECC k= ey or a 2048 bit RSA key.

"

[mg] My motiva= tion was to suggest more details in this section by specifying a minimum se= curity level, and referring to 112-bit symmetric key and section 20 of RFC = 7925 sounds good. 

However I am not sure about the ‘mandatory-= to-implement’ part, since this is in my opinion is a different and co= mpletely new topic and has more implications. Also see my next comment

 

Therefore I would prefer to adapt your suggested = text and remove the ‘mandatory-to-implement’ for the architectu= re under the heading ‘Uses state-of-the-art security mechanisms’= ;:

" The use of post-quantum secure signature m= echanisms, such as hash-based signatures, should be explored. A minimum key= length of 112-bit symmetric key or security OR more, as outlined in Sectio= n 20 of RFC 7925 shall be used. This corresponds to a 233 bit ECC key or a 2048 bit RSA key."

Would this be ok?

 

I am open for suggestions on better wording of th= e post quantum secure algorithms support.

 

I would add specific mandatory-to-implement algor= ithms in the manifest format itself. I would say something like MUST implem= ent ECC with NIST P-256r1, AES-128-CCM, and SHA256. As an SHOULD implement = I would use Ed25519, CHACHA20-POLY1305 and SHA256 (which seems to be close to what TLS 1.3 is recommending). Does= this sound reasonable to you?

 

[mg] Regarding= a _mandatory_  Algorithm Set in the manifest I have one question/pote= ntial concern:

What if an Device vendor is required (for whateve= r reason) to implement a ‘higher’ Algorithm Set (e.g. ECC NIST-= P521, AES-256-CCM, SHA-512) to protect the update solution for his devices.

Based on your MUST statement I interpret that he = still be required to implement and accept updates with a lower security, ma= king his SUIT IoT Solution more unsecure in the context of Bits of Security= / Key Length.

I am not sure if my understanding is correct, if = yes then I am reluctant that IETF specifies the one _mandatory_ to i= mplement Algorithm Set.  

 

In general the definition of Algorithm Sets (e.g.= or something like SUIT Ciphersuits) might be helpful and a good idea to ha= ve a basis for interoperability between ‘Author Systems’ and Io= T Devices.

--_000_eb74dad82391410fb4d2099274587443infineoncom_-- From nobody Fri Mar 2 02:51:25 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 11321120725 for ; Fri, 2 Mar 2018 02:51:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.299 X-Spam-Level: X-Spam-Status: No, score=-4.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01, T_SPF_PERMERROR=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=infineon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P-RbxUxyDev2 for ; Fri, 2 Mar 2018 02:51:22 -0800 (PST) Received: from smtp2.infineon.com (smtp2.infineon.com [IPv6:2a00:18f0:1e00:4::4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB3D1124B18 for ; Fri, 2 Mar 2018 02:51:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=infineon.com; i=@infineon.com; q=dns/txt; s=IFXMAIL; t=1519987882; x=1551523882; h=from:to:subject:date:message-id:mime-version; bh=mkumDEnAfEx7J7Y6ljA8ZqkoUVWJpSlRPoUz6bdKzkc=; b=HvlOtSyy+PT0voyouHy9C2vP+xXcO69AhVmPoYEQIgO6dqO7XxPaGeWP X0nG6OOUxEfPzTWwYu5kS4ylgUR8qR2LgCqcYBMCaCoisG4KCBRqA0d8N 6BMbqJw+HSM6iKlYF1UKPY/Wcz0q4RV3WE8CNVfbbtMIoyVqlx5ySTywq A=; X-SBRS: None Received: from unknown (HELO mucxv002.muc.infineon.com) ([172.23.11.17]) by smtp2.infineon.com with ESMTP/TLS/AES256-GCM-SHA384; 02 Mar 2018 11:51:20 +0100 Received: from MUCSE717.infineon.com (MUCSE717.infineon.com [172.23.7.74]) by mucxv002.muc.infineon.com (Postfix) with ESMTPS; Fri, 2 Mar 2018 11:51:20 +0100 (CET) Received: from MUCSE702.infineon.com (172.23.7.91) by MUCSE717.infineon.com (172.23.7.74) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.1415.2; Fri, 2 Mar 2018 11:51:19 +0100 Received: from MUCSE702.infineon.com (172.23.7.91) by MUCSE702.infineon.com (172.23.7.91) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.1415.2; Fri, 2 Mar 2018 11:51:19 +0100 Received: from MUCSE702.infineon.com ([172.23.106.22]) by MUCSE702.infineon.com ([172.23.106.22]) with mapi id 15.01.1415.003; Fri, 2 Mar 2018 11:51:19 +0100 From: To: , , Thread-Topic: CEK Distribution Method Thread-Index: AdOyCm7Bc920ww+7Q4unKVT0TnRUMQ== Date: Fri, 2 Mar 2018 10:51:19 +0000 Message-ID: <6cd67759bf1d4b26a99197802b82f891@infineon.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.23.8.247] Content-Type: multipart/alternative; boundary="_000_6cd67759bf1d4b26a99197802b82f891infineoncom_" MIME-Version: 1.0 Archived-At: Subject: [Suit] CEK Distribution Method X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Mar 2018 10:51:24 -0000 --_000_6cd67759bf1d4b26a99197802b82f891infineoncom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hannes, I added comments regarding your suggestion, question to CEK Distribution Me= thod marked with [mg]. Thanks, Markus Page 9, Section 4 Architecture It states: " For confidentiality protection of firmware images the author needs to be in possession of the certificate/public key of a device." There are also Symmetric Key Options (Recipient Algorithms) for Content Enc= ryption Key (CEK) Distribution, which is actually already stated in the man= ifest draft . -Therefore the above sentence should be updated to reflect, clarify also us= age of symmetric keys as an additional option for confidentiality protectio= n!? [Hannes] I believe this is correct since the use of a key transport mechani= sm would require the use of public key encryption of the content encryption= key. The CEK would then be used to encrypt the firmware image itself. This= would still require the author to know the public keys of all the device. The pure use of symmetric keys has only been envisioned but not described s= o far. [mg] Regarding your point that it has not been described so far I had a dif= ferent understanding when I browsed through the manifest. That was actually my original motivation for that comment to have consisten= cy between what is stated in the architecture and in the manifest. The current manifest version, Page 8, Secion 3.2 states: " Encryption is handled by the COSE_Encrypt structure. Most encryption modes are already supported via the COSE_Encrypt structure, only per- device pre-shared keys (or per-device ECDH derivation of pre-shared keys) needs to be described." 'Most encryption modes are already supported via the COSE_Encrypt structure= ' implied to me that one can use any Mode defined in COSE_Encrypt including s= ymmetric keys to 'protect' the CEK. Also the text 'only per- device pre-shared keys' implied usage of symmetric= keys to me. This has been described in the initial FUD manifest version, which had expl= icit text describing pre-shared keys : Encryption using a symmetric key (mode=3D"preSharedKey"). The assumption is that the symmetric key is pre-provisioned (in an out-of-band fashion) on the IoT device and also available to the developer. In addition to have consistency with the manifest, I don't see why SUIT sho= uld limit the options provided by COSE (e.g. stated in section 5.1.1) or C= MS to Public Key only (Key Transport using RSA or Key Agreement using ECC) = for CEK Distribution. Therefore I would still propose the text in section 4 to something like thi= s: "For confidentiality protection of firmware images the author needs to be in possession of the certificate/public key or a pre-shared key= of a device." [Hannes] This is a good idea. I added the following text: ... A.6.15. Manifest Field: Key Table Encrypting firmware images requires symmetric content encryption keys to be provided in the manifest, which themselves have to be encrypted using the public keys of devices. Implements: Security Requirement MFSR7 [mg] What you describe is a good option, but not the only one. As stated ab= ove I would prefer not to limit it only to public keys and keep it more gen= eric. In addition the Heading 'Key Table' is also one option to do that, but not = the only one. Here is a proposal for more generic text, considering what you suggested as= an example: A.6.15. Manifest Field: Content Key Distribution Method Encrypting firmware images requires symmetric content encryption keys. Since there are several methods to protect or distribute the symmetric cont= ent encryption keys, the manifest contains a field for the Content Key Dist= ribution Method. One examples for such a Content Key Distribution Method is the usage of Key= Tables, pointing to content encryption keys, which themselves are encrypte= d using the public keys of devices. Implements: Security Requirement MFSR7. Would this be acceptable? --_000_6cd67759bf1d4b26a99197802b82f891infineoncom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hannes,

 

I added comments regarding your suggestion, quest= ion to CEK Distribution Method marked with [mg].

 

Thanks,

Markus

 

Page 9, Section 4 Architecture

 

It states: "

For confidentiality protection of firmware images th= e author needs

      to be in possession o= f the certificate/public key of a device."

 

There are also Symmetric Key Options (Recipient Algo= rithms) for Content Encryption Key (CEK) Distribution, which is actually al= ready stated in the manifest draft .

-Therefore the above sentence should be updated to r= eflect, clarify also usage of symmetric keys as an additional option for co= nfidentiality protection!?

 

[Hannes] I believe this is correct since the use of = a key transport mechanism would require the use of public key encryption of= the content encryption key. The CEK would then be used to encrypt the firm= ware image itself. This would still require the author to know the public keys of all the device.

 

The pure use of symmetric keys has only been envisio= ned but not described so far.

 

[mg] Regarding your point that it has not been descr= ibed so far I had a different understanding when I browsed through the mani= fest.

That was actually my original motivation for that co= mment to have consistency between what is stated in the architecture and in= the manifest.

The current manifest version, Page 8, Secion 3.2 sta= tes:

" Encryption is handled by the COSE_Encrypt str= ucture.  Most encryption

   modes are already supported via the COS= E_Encrypt structure, only per-

   device pre-shared keys (or per-device E= CDH derivation of pre-shared

   keys) needs to be described."=

 

'Most encryption modes are already supported via the= COSE_Encrypt structure'

implied to me that one can use any Mode defined in C= OSE_Encrypt including symmetric keys to 'protect' the CEK.

Also the text 'only per- device pre-shared keys' imp= lied usage of symmetric keys to me.

 

This has been described in the initial FUD manifest = version, which had explicit text describing pre-shared keys :

Encryption using a symmetric key (mode=3D"preSh= aredKey").  The

      assumption is that th= e symmetric key is pre-provisioned (in an

      out-of-band fashion) = on the IoT device and also available to the

      developer.=

 

In addition to have consistency with the manifest, I= don’t see why SUIT should limit the options provided by COSE  (= e.g. stated in section 5.1.1) or CMS to Public Key only (Key Transport usin= g RSA or Key Agreement using ECC) for CEK Distribution.

Therefore I would still propose the text in section = 4 to something like this:

 

“For confidentiality protection of firmware im= ages the author needs

      to be in possession o= f the certificate/public key or a pre-shared key of a device."

 

 

 

 

 

[Hannes] This is a good idea. I added the following = text:

…

A.6.15.  Manifest Field: Key Table

 

   Encrypting firmware images requires = symmetric content encryption keys

   to be provided in the manifest, whic= h themselves have to be encrypted

   using the public keys of devices.

 

   Implements: Security Requirement MFSR7<= o:p>

 

[mg] What you describe is a good option, but not the= only one. As stated above I would prefer not to limit it only to public ke= ys and keep it more generic.

In addition the Heading ‘Key Table’ is a= lso one option to do that, but not the only one.

Here is a proposal for more generic text, considerin= g what you suggested as an example:

 

A.6.15.  Manifest Field: Content Key Distributi= on Method

Encrypting firmware images requires symmetric conten= t encryption keys.

Since there are several methods to protect or distri= bute the symmetric content encryption keys, the manifest contains a field f= or the Content Key Distribution Method.

One examples for such a Content Key Distribution Met= hod is the usage of Key Tables, pointing to content encryption keys, which = themselves are encrypted using the public keys of devices.

 

Implements: Security Requirement MFSR7.

 

Would this be acceptable?

--_000_6cd67759bf1d4b26a99197802b82f891infineoncom_-- From nobody Fri Mar 2 08:02:46 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 218A6126BFD for ; Fri, 2 Mar 2018 08:02:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.399 X-Spam-Level: X-Spam-Status: No, score=-1.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.25, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aKgn7Khk4L3L for ; Fri, 2 Mar 2018 08:02:41 -0800 (PST) Received: from mail-ua0-x234.google.com (mail-ua0-x234.google.com [IPv6:2607:f8b0:400c:c08::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2FD40126BF3 for ; Fri, 2 Mar 2018 08:02:41 -0800 (PST) Received: by mail-ua0-x234.google.com with SMTP id d1so5413850ual.13 for ; Fri, 02 Mar 2018 08:02:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc; bh=eNUy2L1WzKVtTgYD1lgJqQYPCtAWOQ9dsOvJ2fPjYm4=; b=gAhS4iZWMhEgMVGylMPqc7KZIrs+Gv1/1WMFBw2In4HeOC2kvSLwvErTZzNLTKNJ4a dqClx2i8fgdR2qwsU901bFz+CPjG1Xk79IYtgOXVRFHrjLd5WjG3luk5A5mCVaU7fUkp Ld5AN9o8VLBsCIsrJBjq8uAhQCOGmPOsWp4l0RdfWLelOCRxWZl1cEv566mDHJ2lvVKI SUDuFFZMhd+dwEnwn3l6DPZKhwspn2QKTuVOlodp7sK937Qurv9S0KojUjLZkCWjD9iI R2Zmxp8rJy0Q5VEQ7RC195+pXj4L8t4Oi1ZvH6AL8ZhIuQ2YpRArqMQ8SfnxWzXnBEQn APwA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:sender:in-reply-to:references:from :date:message-id:subject:to:cc; bh=eNUy2L1WzKVtTgYD1lgJqQYPCtAWOQ9dsOvJ2fPjYm4=; b=AQy4fIL82ywfJ27d/aJbpAaQpI0gtbHSif2dUKVLsjB1iXWUIN/q20Zitp1w0MqMPg 4mI1rz2ohiFqcgaPlOMNy5XcTSON16QnEg3d1BLliWXWhdksk4FYs4fv/imir7K0d7ud PJ2t1zMMuvA6ES3qpXE/ANrwNbjtZ62bAWrJDJ0YHR9uSbmsu2KYgLXdJvkNpU5yGBeo VG4k15AbpuZHhOg46cxpWRN6JL6UbUbbRt4hb6Q86hEFtosD9DGDKaGly+b6h2kgihaO VnYEu7OArR79zSFUSN73j8Q019xSWZ8iZt6+DfqKSbpTFcGEf7DS/r7xVr3EDCPxjrL+ 0Csg== X-Gm-Message-State: APf1xPBNIPU9nHTvT3DIKkr0FMKpPEQDbSucFN4CDQLKT8GpIvYYHG6a wB81mEI8C1QgND48zUWRwHYxBHQn0QuPooYF24o= X-Google-Smtp-Source: AG47ELtufR9qgwJKDQ5a4+tHbS9g5zjNnKkortIPfMNFLxnMgTx37QoMORndSCdR9KJtJ23xjUuTsXLdODGJ73b4pOQ= X-Received: by 10.176.76.31 with SMTP id l31mr4013857uaf.199.1520006560287; Fri, 02 Mar 2018 08:02:40 -0800 (PST) MIME-Version: 1.0 Sender: emmanuel.baccelli@gmail.com Received: by 10.176.3.146 with HTTP; Fri, 2 Mar 2018 08:02:19 -0800 (PST) In-Reply-To: References: From: Emmanuel Baccelli Date: Fri, 2 Mar 2018 17:02:19 +0100 X-Google-Sender-Auth: aah6vWfHXxVbk962qZ5-_TDjUiI Message-ID: To: Hannes Tschofenig , "Waltermire, David A. (Fed)" Cc: "suit@ietf.org" Content-Type: multipart/alternative; boundary="f403043616e81513810566701b47" Archived-At: Subject: Re: [Suit] London IETF Hackathon: Firmware Update Coding X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Mar 2018 16:02:45 -0000 --f403043616e81513810566701b47 Content-Type: text/plain; charset="UTF-8" Hi Hannes, thanks for the info. On our end, we will probably not be physically present at the Hackathon in IETF, but we could participate remotely. FYI, in terms of hardware we plan to first target the SAMR21. Compared to the boards you mentioned, this is a somewhat "smaller" board, featuring a low-power radio: https://github.com/RIOT-OS/RIOT/wiki/Board:-Samr21-xpro Cheers, Emmanuel On Thu, Mar 1, 2018 at 4:37 PM, Waltermire, David A. (Fed) < david.waltermire@nist.gov> wrote: > Hannes, > > > > Thanks for helping with this. > > > > Regards, > > Dave > > > > *From:* Suit [mailto:suit-bounces@ietf.org] *On Behalf Of *Hannes > Tschofenig > *Sent:* Wednesday, February 28, 2018 11:35 AM > *To:* suit@ietf.org > *Subject:* [Suit] London IETF Hackathon: Firmware Update Coding > > > > Hi all, > > > > at the conference call on Monday Dave Thaler and Dave Waltermire suggested > to do some firmware update work at the London IETF Hackathon, which will > take place on Saturday March 17 and 18. > > > > I volunteered to help with the organization. > > > > I had been thinking about bringing a few developer boards running > Arm-based microcontrollers with me so that we have some real stuff to work > with. > > > > Needless to say that it would be good for me to know who is interested in > such a hackathon. Please drop me a private message, if you would like to > participate. This would also help me to understand who is interested in > what. > > > > Ciao > Hannes > > > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy the > information in any medium. Thank you. > > _______________________________________________ > Suit mailing list > Suit@ietf.org > https://www.ietf.org/mailman/listinfo/suit > > --f403043616e81513810566701b47 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Hannes,

thanks for the info.=C2=A0

On our end, we will probably not be physically pres= ent at the Hackathon in IETF, but we could participate remotely.
= FYI, in terms of hardware we plan to first target the SAMR21.=C2=A0
Compared to the boards you mentioned, this is a somewhat "smaller&q= uot; board, featuring a low-power radio:

Cheers,
Emmanuel

On Thu, Mar 1, 2018 at 4:37 PM, Waltermire, David A. (Fed)= <david.waltermire@nist.gov> wrote:

Hannes,

=C2=A0

Thanks for helping with this.

=C2=A0

Regards,

Dave

=C2=A0

From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Hannes Tschofenig
Sent: Wednesday, February 28, 2018 11:35 AM
To: suit@ietf.org=
Subject: [Suit] London IETF Hackathon: Firmware Update Coding=

=C2=A0

Hi all,

=C2=A0

at the conference call on Monda= y Dave Thaler and Dave Waltermire suggested to do some firmware update work= at the London IETF Hackathon, which will take place on =C2=A0Saturday Marc= h 17 and 18.

=C2=A0

I volunteered to help with the = organization.

=C2=A0

I had been thinking about bring= ing a few developer boards running Arm-based microcontrollers with me so th= at we have some real stuff to work with.

=C2=A0

Needless to say that it would b= e good for me to know who is interested in such a hackathon. Please drop me= a private message, if you would like to participate. This would also help = me to understand who is interested in what.

=C2=A0

Ciao
Hannes

=C2=A0

IMPORTANT NOTICE: The contents = of this email and any attachments are confidential and may also be privileg= ed. If you are not the intended recipient, please notify the sender immedia= tely and do not disclose the contents to any other person, use it for any purpose, or store or copy the informat= ion in any medium. Thank you.


_______________________________________________
Suit mailing list
Suit@ietf.org
https://www.ietf.org/mailman/listinfo/suit


--f403043616e81513810566701b47-- From nobody Fri Mar 2 13:23:17 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09F36124239 for ; Fri, 2 Mar 2018 13:23:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.911 X-Spam-Level: X-Spam-Status: No, score=-2.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IAnw8oVtYZ0O for ; Fri, 2 Mar 2018 13:23:13 -0800 (PST) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0049.outbound.protection.outlook.com [104.47.0.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E9C2112025C for ; Fri, 2 Mar 2018 13:23:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=LwQFvY2ZDzcSGGPK/UWXtue1iNbPZm9ngyn3YBRm9Nw=; b=kOGIHUDPS2ZEcW7ggy+5HOt9KjOLodbB4dJWhiJP7RhRHIs8U0Qx9VvkzmAr/kfoIOEljTi3efdMk/q/jNYFnZqMVRpRfaGxaMT2QVxhTxR2JnarjroSfpDXNErpUabnxRBqnRwX6IBS75hKWwSAD/cHunZsv2mXKUYeITdc+tY= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB2723.eurprd08.prod.outlook.com (10.167.90.153) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.548.13; Fri, 2 Mar 2018 21:23:09 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0548.014; Fri, 2 Mar 2018 21:23:09 +0000 From: Hannes Tschofenig To: "suit@ietf.org" Thread-Topic: draft-moran-suit-architecture-02 Thread-Index: AdOya4HTKQXXm+yJQ+GFI0Cl2QaZMg== Date: Fri, 2 Mar 2018 21:23:09 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB2723; 7:GDFmeBtnmf1iSbsumok37BcwihINBZdJewSl+vf3GHjiVGiStOy4t5oCQLPQGLyzQ+HOfgxLS94i7kpuXaWghFd+fy8wXFcKvQ1/Z5zwVn6gZpZ52w+GvVtksiiZObMZyykctPsFltwFxD8pjZzBjQCblAiHWDaTz+PEWyQtniMmKnT7h7SYDm/85as0kxQFh0tbpSbwutIX+UFmPbUxxRPSJDSkVwQV/5paO/q79d6e84s5RT+PVvlr6xHCpj3A x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 6a4caad1-b334-41b8-980e-08d58083cc29 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(4534165)(4627221)(201703031133081)(201702281549075)(48565401081)(5600026)(4604075)(3008032)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB2723; x-ms-traffictypediagnostic: AM4PR0801MB2723: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(3231220)(944501243)(52105095)(10201501046)(6055026)(6041288)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123558120)(20161123562045)(20161123560045)(6072148)(201708071742011); SRVR:AM4PR0801MB2723; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB2723; x-forefront-prvs: 05991796DF x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(39380400002)(346002)(39860400002)(366004)(376002)(53754006)(199004)(189003)(40434004)(8936002)(55016002)(102836004)(7736002)(14454004)(6436002)(26005)(8676002)(5660300001)(2351001)(9686003)(6306002)(81156014)(81166006)(1730700003)(53936002)(5640700003)(478600001)(105586002)(966005)(186003)(74316002)(86362001)(97736004)(305945005)(72206003)(6506007)(106356001)(59450400001)(3660700001)(5250100002)(316002)(3846002)(33656002)(99286004)(68736007)(3280700002)(2501003)(2906002)(7696005)(25786009)(6916009)(66066001)(5890100001)(2900100001)(6116002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB2723; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: PGmbGcbLqJQccS4Z5pyfVFOXx/ZyG4po1PZJMiv5shNmhBVY0dao8K3HTtXjBpfVPzpkcxc5rrLZ7M1vI3NQJ4x5zKfJmRkZD4UpKqSYutOLALUSASiBs3/VxkUTNHxLi7gSf8bI2wKYRtPXGgdTVGtgjDrZIBdr6/rZKGqLVY4= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 6a4caad1-b334-41b8-980e-08d58083cc29 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Mar 2018 21:23:09.5892 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB2723 Archived-At: Subject: [Suit] draft-moran-suit-architecture-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Mar 2018 21:23:16 -0000 Hi all, I submitted a new version of the architecture document based on the feedbac= k from the virtual interim meeting and the mailing list discussions: https://tools.ietf.org/html/draft-moran-suit-architecture-02 Many of the changes resulted from feedback provided by Marti Bolivar, Andrz= ej Puzdrowski, and Markus Gueller. There are various changes: * added two figures to the architecture describing the delivery methods * updated and clarified text in the requirements section * added a new threat about "Reverse Engineering Of Firmware Image for Vulne= rability Analysis" * added a new security requirement about "Firmware encryption" * added use case about "IP Protection" * added the manifest field "Content Key Distribution Method" Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Fri Mar 2 23:05:24 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CDA212D893 for ; Fri, 2 Mar 2018 23:05:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.91 X-Spam-Level: X-Spam-Status: No, score=-2.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hsQ--5FiMTpl for ; Fri, 2 Mar 2018 23:05:20 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0051.outbound.protection.outlook.com [104.47.1.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 45602120454 for ; Fri, 2 Mar 2018 23:05:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=tBNfF/fwOFtym26AEgrHauqdCcOJLulTHLpbtQZ0zL0=; b=gDMHg+bwfwD055E5M9ZxE63U7/JIH/j2UI7uMQKWX9aWD3Y/VqE/BsS9m2F/BKWPEW5WRfBN3IRxAD7A7jSqpZo22XI9ADyiTmtgtByO83CmQ2YPinW+utxMzKGhb0+udjDWxAQfcukrmWcCQ865ZvYTknmXUxfzzze7Rt06AOE= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1521.eurprd08.prod.outlook.com (10.168.5.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.548.13; Sat, 3 Mar 2018 07:05:17 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0548.014; Sat, 3 Mar 2018 07:05:17 +0000 From: Hannes Tschofenig To: "Markus.Gueller@infineon.com" , Brendan Moran , "suit@ietf.org" Thread-Topic: Mandatory To Implement Set of Algorithms Thread-Index: AdOyCJGZ7GC+IhdeStGsyqT+x+txLwAstwyA Date: Sat, 3 Mar 2018 07:05:17 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1521; 7:J0Im52jBcYgDXMTnTCzNJwawKF2xLgl4TCLrFR5PEe1GzTl5QOWMdM49CyMPGzluL1BGV3YTOpn+fIr2Lhv8Fxcfdswap3j8WvEUsthfSGE8e49w3t6GcsnWAIEauG86XSQ7WZ1fNF7l9UKIVCc+zksh4/wvdeFYfTX1TVK8mCc87SFQCxLJJDbdrrqNYMKxftN5TufQiwU148psOC6VWgh8ZgRFoH/AjahcQsPFCacDSA6PKAlT9Z4Xfq+Nzkms x-ms-exchange-antispam-srfa-diagnostics: SSOS;SSOR; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: b5f84eea-516c-4382-cfba-08d580d51eb8 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1521; x-ms-traffictypediagnostic: AM4PR0801MB1521: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(192374486261705)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(3231220)(944501244)(52105095)(93006095)(93001095)(3002001)(10201501046)(6055026)(6041288)(20161123560045)(20161123564045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(6072148)(201708071742011); SRVR:AM4PR0801MB1521; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1521; x-forefront-prvs: 0600F93FE1 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(376002)(346002)(39860400002)(396003)(39380400002)(40434004)(189003)(199004)(54896002)(33656002)(68736007)(6306002)(72206003)(14454004)(97736004)(9686003)(478600001)(9326002)(3660700001)(106356001)(105586002)(74316002)(25786009)(5660300001)(7736002)(3280700002)(26005)(186003)(55016002)(316002)(102836004)(59450400001)(6506007)(8676002)(8936002)(81156014)(81166006)(229853002)(99286004)(6436002)(790700001)(7696005)(6116002)(3846002)(86362001)(5890100001)(5250100002)(2501003)(2906002)(53936002)(110136005)(2900100001)(66066001)(2950100002)(76176011)(6246003); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1521; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: dnQzbzWZI9tnkGuO6ZfEWa8MmzUTwC1FlQ2CQL3/Gs/aWsUNauEHT2Nd6XspnCYHHDI18zA6PDj1leW/QLCN46UvfwzshOZwE1ecqSedCSTpzvYS1yhpLrv29PT7DCWiwAouHxfAYkew6u1qy+yDML7elpy3bDFOuby5pji/Kao= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB27065CE72754ADDF4916D825FAC40AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: b5f84eea-516c-4382-cfba-08d580d51eb8 X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Mar 2018 07:05:17.4142 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1521 Archived-At: Subject: Re: [Suit] Mandatory To Implement Set of Algorithms X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Mar 2018 07:05:23 -0000 --_000_AM4PR0801MB27065CE72754ADDF4916D825FAC40AM4PR0801MB2706_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Markus, Comments below. ~snip~ I would add specific mandatory-to-implement algorithms in the manifest form= at itself. I would say something like MUST implement ECC with NIST P-256r1,= AES-128-CCM, and SHA256. As an SHOULD implement I would use Ed25519, CHACH= A20-POLY1305 and SHA256 (which seems to be close to what TLS 1.3 is recomme= nding). Does this sound reasonable to you? [mg] Regarding a _mandatory_ Algorithm Set in the manifest I have one ques= tion/potential concern: What if an Device vendor is required (for whatever reason) to implement a '= higher' Algorithm Set (e.g. ECC NIST-P521, AES-256-CCM, SHA-512) to protect= the update solution for his devices. Based on your MUST statement I interpret that he still be required to imple= ment and accept updates with a lower security, making his SUIT IoT Solution= more unsecure in the context of Bits of Security/ Key Length. I am not sure if my understanding is correct, if yes then I am reluctant th= at IETF specifies the one _mandatory_ to implement Algorithm Set. Maybe this is a thread we should also add to the document where a device is= tricked into using an old, potentially insecure algorithm. There is an ext= reme case we have seen with JSON signatures where one of the allowed signat= ure mechanisms was "none" and implementations didn't check whether this was= actually allowed. I would assume that a device has a policy that indicates what algorithms it= finds acceptable and what not. Of course, there is a challenge with manda= tory-to-implement algorithms in a practical sense for constrained devices. = There are a few ways to deal with this, such as * No mandatory-to-implement algorithms * Use of mandatory-to-implement algorithms unless there is an applica= tion/usage profile that says something else. In your example the different = key size may be a requirement from a specific sector. * Having different sets of MTI profiles. In general the definition of Algorithm Sets (e.g. or something like SUIT Ci= phersuits) might be helpful and a good idea to have a basis for interoperab= ility between 'Author Systems' and IoT Devices. That was also my thinking. I was also thinking about the case where there a= re multiple signers. Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM4PR0801MB27065CE72754ADDF4916D825FAC40AM4PR0801MB2706_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Markus, =

 

Comments below. <= /o:p>

 

~sni= p~

 

I would add specific mandato= ry-to-implement algorithms in the manifest format itself. I would say somet= hing like MUST implement ECC with NIST P-256r1, AES-128-CCM, and SHA256. As= an SHOULD implement I would use Ed25519, CHACHA20-POLY1305 and SHA256 (which seems to be close to what TLS 1.3 is r= ecommending). Does this sound reasonable to you?

&= nbsp;

[mg] <= /span>Regarding a _mandatory_  Algorithm Set in t= he manifest I have one question/potential concern:

What if an Device vendor is = required (for whatever reason) to implement a ‘higher’ Algorith= m Set (e.g. ECC NIST-P521, AES-256-CCM, SHA-512) to protect the update solu= tion for his devices.

Based on your MUST statement= I interpret that he still be required to implement and accept updates with= a lower security, making his SUIT IoT Solution more unsecure in the contex= t of Bits of Security/ Key Length.

I am not sure if my understa= nding is correct, if yes then I am reluctant that IETF specifies the one _<= i>mandatory_ to implement Algorithm Set.  

Mayb= e this is a thread we should also add to the document where a device is tri= cked into using an old, potentially insecure algorithm. There is an extreme= case we have seen with JSON signatures where one of the allowed signature mechanisms was “none” and i= mplementations didn’t check whether this was actually allowed.

 

I wo= uld assume that a device has a policy that indicates what algorithms it fin= ds acceptable and what not. Of course, there is a challenge with  mand= atory-to-implement algorithms in a practical sense for constrained devices. There are a few ways to deal with this, suc= h as

·       No mandatory-to-implement algorithms

·       Use of mandatory-to-implement algorithms unless there is an application/us= age profile that says something else. In your example the different key siz= e may be a requirement from a specific sector.

·       Having different sets of MTI profiles.  

 

In general the definition of= Algorithm Sets (e.g. or something like SUIT Ciphersuits) might be helpful = and a good idea to have a basis for interoperability between ‘Author = Systems’ and IoT Devices.

That= was also my thinking. I was also thinking about the case where there are m= ultiple signers.

 

Ciao=

Hann= es

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM4PR0801MB27065CE72754ADDF4916D825FAC40AM4PR0801MB2706_-- From nobody Fri Mar 2 23:05:28 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD996120454 for ; Fri, 2 Mar 2018 23:05:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.909 X-Spam-Level: X-Spam-Status: No, score=-2.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DxTg5B0k66sS for ; Fri, 2 Mar 2018 23:05:21 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0051.outbound.protection.outlook.com [104.47.1.51]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 074E1127863 for ; Fri, 2 Mar 2018 23:05:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=w3SeYo20h8lsHLeg1EtyVOmMlssKf9Erys8WpKLVbZg=; b=G5WXihmyp0fFM5uQ34HHkgzhHYKDMyhDwmE0toyUMSug7LWpVLcP9J724rqbx3oEQ+Y78QDWnka8OoisEjDQuZ4bc9jk07EDA21u5Z1x52zs/ret9pdbeH5BTWlmLjF9wHopmu0lYafucbMDOYx4dS5xk+jwM/aH6l0vgYg3Ogw= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1521.eurprd08.prod.outlook.com (10.168.5.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.548.13; Sat, 3 Mar 2018 07:05:19 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0548.014; Sat, 3 Mar 2018 07:05:19 +0000 From: Hannes Tschofenig To: "Markus.Gueller@infineon.com" , Brendan Moran , "suit@ietf.org" Thread-Topic: CEK Distribution Method Thread-Index: AdOyCm7Bc920ww+7Q4unKVT0TnRUMQAsmgmg Date: Sat, 3 Mar 2018 07:05:18 +0000 Message-ID: References: <6cd67759bf1d4b26a99197802b82f891@infineon.com> In-Reply-To: <6cd67759bf1d4b26a99197802b82f891@infineon.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1521; 7:GWVXs3OZFQEpseqaqFEx5O2iG2cJs/2/Vldz833sL5gincvO+M/IGunu+NHYgT/u/tAGUBq32RPBd0M+xCbaAaA5AmraEicDfP/+q7JscmRC71S2Usutux81eh+3irGMQpJVkoOlJDHNIQwzuT7+OMXSwnOM+GNoGZU34RW7FHh6DNJ/8DnwbK+E0lKZShmdXel1Y1Z6Pt/2RAZr/01mQDDkCRG04QAdkSNLdLN95cb45OYxbM0I9EVlqQEi4rmE x-ms-exchange-antispam-srfa-diagnostics: SSOS;SSOR; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: adb52f94-82bd-4682-db16-08d580d51fa4 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1521; x-ms-traffictypediagnostic: AM4PR0801MB1521: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(192374486261705)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(3231220)(944501244)(52105095)(93006095)(93001095)(3002001)(10201501046)(6055026)(6041288)(20161123560045)(20161123564045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(6072148)(201708071742011); SRVR:AM4PR0801MB1521; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1521; x-forefront-prvs: 0600F93FE1 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(376002)(346002)(39860400002)(396003)(39380400002)(40434004)(51914003)(189003)(199004)(54896002)(33656002)(68736007)(6306002)(72206003)(14454004)(97736004)(9686003)(478600001)(9326002)(3660700001)(106356001)(105586002)(74316002)(3480700004)(25786009)(5660300001)(7116003)(7736002)(3280700002)(26005)(186003)(55016002)(316002)(102836004)(53546011)(59450400001)(6506007)(8676002)(8936002)(81156014)(81166006)(229853002)(99286004)(6436002)(790700001)(7696005)(6116002)(3846002)(86362001)(5890100001)(5250100002)(2501003)(2906002)(53936002)(110136005)(2900100001)(66066001)(2950100002)(561944003)(76176011)(6246003); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1521; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: r0a875KBmThXq9TPryY9GinKFGGdZ87sszXadYCuFU4EH9EfbafiUttHrKpdoM/MdiUoA1ATfZ+C/cgx4FSkVqna+fIkK0hiPcFzX3ZO3/IduF3vA1odItCqSR2J+tK0BUShJloFcQ39cGINTZ5iP6oonWkTBK4NYsWUvPfAGxA= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB2706D8254F9F2313F33A48BFFAC40AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: adb52f94-82bd-4682-db16-08d580d51fa4 X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Mar 2018 07:05:18.9298 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1521 Archived-At: Subject: Re: [Suit] CEK Distribution Method X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Mar 2018 07:05:23 -0000 --_000_AM4PR0801MB2706D8254F9F2313F33A48BFFAC40AM4PR0801MB2706_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Markus, I guess we will have to look into the symmetric key mechanism in the near f= uture and I have taken your wording changes into account when submitting th= e -02 version. Thanks for the text proposals. Ciao Hannes From: Markus.Gueller@infineon.com [mailto:Markus.Gueller@infineon.com] Sent: 02 March 2018 11:51 To: Hannes Tschofenig; Brendan Moran; suit@ietf.org Subject: CEK Distribution Method Hannes, I added comments regarding your suggestion, question to CEK Distribution Me= thod marked with [mg]. Thanks, Markus Page 9, Section 4 Architecture It states: " For confidentiality protection of firmware images the author needs to be in possession of the certificate/public key of a device." There are also Symmetric Key Options (Recipient Algorithms) for Content Enc= ryption Key (CEK) Distribution, which is actually already stated in the man= ifest draft . -Therefore the above sentence should be updated to reflect, clarify also us= age of symmetric keys as an additional option for confidentiality protectio= n!? [Hannes] I believe this is correct since the use of a key transport mechani= sm would require the use of public key encryption of the content encryption= key. The CEK would then be used to encrypt the firmware image itself. This= would still require the author to know the public keys of all the device. The pure use of symmetric keys has only been envisioned but not described s= o far. [mg] Regarding your point that it has not been described so far I had a dif= ferent understanding when I browsed through the manifest. That was actually my original motivation for that comment to have consisten= cy between what is stated in the architecture and in the manifest. The current manifest version, Page 8, Secion 3.2 states: " Encryption is handled by the COSE_Encrypt structure. Most encryption modes are already supported via the COSE_Encrypt structure, only per- device pre-shared keys (or per-device ECDH derivation of pre-shared keys) needs to be described." 'Most encryption modes are already supported via the COSE_Encrypt structure= ' implied to me that one can use any Mode defined in COSE_Encrypt including s= ymmetric keys to 'protect' the CEK. Also the text 'only per- device pre-shared keys' implied usage of symmetric= keys to me. This has been described in the initial FUD manifest version, which had expl= icit text describing pre-shared keys : Encryption using a symmetric key (mode=3D"preSharedKey"). The assumption is that the symmetric key is pre-provisioned (in an out-of-band fashion) on the IoT device and also available to the developer. In addition to have consistency with the manifest, I don't see why SUIT sho= uld limit the options provided by COSE (e.g. stated in section 5.1.1) or C= MS to Public Key only (Key Transport using RSA or Key Agreement using ECC) = for CEK Distribution. Therefore I would still propose the text in section 4 to something like thi= s: "For confidentiality protection of firmware images the author needs to be in possession of the certificate/public key or a pre-shared key= of a device." [Hannes] This is a good idea. I added the following text: ... A.6.15. Manifest Field: Key Table Encrypting firmware images requires symmetric content encryption keys to be provided in the manifest, which themselves have to be encrypted using the public keys of devices. Implements: Security Requirement MFSR7 [mg] What you describe is a good option, but not the only one. As stated ab= ove I would prefer not to limit it only to public keys and keep it more gen= eric. In addition the Heading 'Key Table' is also one option to do that, but not = the only one. Here is a proposal for more generic text, considering what you suggested as= an example: A.6.15. Manifest Field: Content Key Distribution Method Encrypting firmware images requires symmetric content encryption keys. Since there are several methods to protect or distribute the symmetric cont= ent encryption keys, the manifest contains a field for the Content Key Dist= ribution Method. One examples for such a Content Key Distribution Method is the usage of Key= Tables, pointing to content encryption keys, which themselves are encrypte= d using the public keys of devices. Implements: Security Requirement MFSR7. Would this be acceptable? IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM4PR0801MB2706D8254F9F2313F33A48BFFAC40AM4PR0801MB2706_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Markus, =

 

I guess we will have to look into the symmetric key mechanism in the = near future and I have taken your wording changes into account when submitt= ing the -02 version. Thanks for the text proposals.

 

Ciao=

Hannes

 

From: Markus.Gueller@infineon.com [mailto:Markus.Gueller@in= fineon.com]
Sent: 02 March 2018 11:51
To: Hannes Tschofenig; Brendan Moran; suit@ietf.org
Subject: CEK Distribution Method

 

Hannes,

 

I added comments regarding y= our suggestion, question to CEK Distribution Method marked with [mg].

 

Thanks,

Markus

 

Page 9, Section 4 Architecture<= o:p>

 

It states: "

For confidentiality protection = of firmware images the author needs

      = to be in possession of the certificate/public key of a device."

 

There are also Symmetric Key Op= tions (Recipient Algorithms) for Content Encryption Key (CEK) Distribution,= which is actually already stated in the manifest draft .=

-Therefore the above sentence s= hould be updated to reflect, clarify also usage of symmetric keys as an add= itional option for confidentiality protection!?

 

[Hannes] I believe this is corr= ect since the use of a key transport mechanism would require the use of pub= lic key encryption of the content encryption key. The CEK would then be use= d to encrypt the firmware image itself. This would still require the author to know the public keys of all the dev= ice.

 

The pure use of symmetric keys = has only been envisioned but not described so far.

 

[mg] Regarding your point that = it has not been described so far I had a different understanding when I bro= wsed through the manifest.

That was actually my original m= otivation for that comment to have consistency between what is stated in th= e architecture and in the manifest.

The current manifest version, P= age 8, Secion 3.2 states:

" Encryption is handled by= the COSE_Encrypt structure.  Most encryption

   modes are already = supported via the COSE_Encrypt structure, only per-

   device pre-shared = keys (or per-device ECDH derivation of pre-shared

   keys) needs to be = described."

 

'Most encryption modes are alre= ady supported via the COSE_Encrypt structure'

implied to me that one can use = any Mode defined in COSE_Encrypt including symmetric keys to 'protect' the = CEK.

Also the text 'only per- device= pre-shared keys' implied usage of symmetric keys to me.<= /p>

 

This has been described in the = initial FUD manifest version, which had explicit text describing pre-shared= keys :

Encryption using a symmetric ke= y (mode=3D"preSharedKey").  The

      = assumption is that the symmetric key is pre-provisioned (in an

      = out-of-band fashion) on the IoT device and also available to the=

      = developer.

 

In addition to have consistency= with the manifest, I don’t see why SUIT should limit the options pro= vided by COSE  (e.g. stated in section 5.1.1) or CMS to Public Key onl= y (Key Transport using RSA or Key Agreement using ECC) for CEK Distribution.

Therefore I would still propose= the text in section 4 to something like this:

 

“For confidentiality prot= ection of firmware images the author needs

      = to be in possession of the certificate/public key or a pre-shared key of a = device."

 

 

 

 

 

[Hannes] This is a good idea. I= added the following text:

…

A.6.15.  Manifest Field= : Key Table

 

   Encrypting firm= ware images requires symmetric content encryption keys

   to be provided = in the manifest, which themselves have to be encrypted

   using the publi= c keys of devices.

 

   Implements: Securi= ty Requirement MFSR7

 

[mg] What you describe is a goo= d option, but not the only one. As stated above I would prefer not to limit= it only to public keys and keep it more generic.

In addition the Heading ‘= Key Table’ is also one option to do that, but not the only one.<= /o:p>

Here is a proposal for more gen= eric text, considering what you suggested as an example:<= /p>

 

A.6.15.  Manifest Field: C= ontent Key Distribution Method

Encrypting firmware images requ= ires symmetric content encryption keys.

Since there are several methods= to protect or distribute the symmetric content encryption keys, the manife= st contains a field for the Content Key Distribution Method.

One examples for such a Content= Key Distribution Method is the usage of Key Tables, pointing to content en= cryption keys, which themselves are encrypted using the public keys of devi= ces.

 

Implements: Security Requiremen= t MFSR7.

 

Would this be acceptable?<= /o:p>

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM4PR0801MB2706D8254F9F2313F33A48BFFAC40AM4PR0801MB2706_-- From nobody Sun Mar 4 02:23:45 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4EFB6120713 for ; Sun, 4 Mar 2018 02:23:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.91 X-Spam-Level: X-Spam-Status: No, score=-2.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nrgN5eM-Bk92 for ; Sun, 4 Mar 2018 02:23:41 -0800 (PST) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30046.outbound.protection.outlook.com [40.107.3.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E6566120454 for ; Sun, 4 Mar 2018 02:23:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Muwdxx01HCoWY1aH4TwAICMGM6BJN13h33ttcZ5BB0A=; b=ZlQK4489yB1FoPMJZmmJg46teLRgbwjMyvoK0C67yqXW+uMzFjAmaH8Uz/g1YKZ2ssaA3d7/he928GmNNeyvRw9aSFCiNtqRMuRg/e3+fCh1ydr//0Xyt03Tq2MWEquWwhtmbzGmlMQTBgbzJpVN9CErmIWDJX1mMKHsHMsHNw0= Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com (10.167.90.148) by AM4PR0801MB1586.eurprd08.prod.outlook.com (10.168.6.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.548.13; Sun, 4 Mar 2018 10:23:38 +0000 Received: from AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c]) by AM4PR0801MB2706.eurprd08.prod.outlook.com ([fe80::7954:44ac:aab4:bc2c%14]) with mapi id 15.20.0548.014; Sun, 4 Mar 2018 10:23:38 +0000 From: Hannes Tschofenig To: "suit@ietf.org" Thread-Topic: Hackathon Project Registered Thread-Index: AdOzopyqI6uJDWJ4SoejfAKtSD83HA== Date: Sun, 4 Mar 2018 10:23:37 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM4PR0801MB1586; 7:Wd6SR/KXkre5d4UJCBZVx476CBUZklJy0RJr3c2IkndMy/1orQuQrzsywGG+uxxeiftkFDPnCYTMcu3IiWjCPntsXwlRn0EMMgbTvm5FaOFjr6BAC4Cx/ptOUEGkuWKm3KgjzLoQmVRjHYXi/2pZ2kWrnqn+7GgW8EKJTsMGI/uPyc/B6VpxKuSRZJOgnWje9OiVWA0OHwJTJDHtg0NX0R8vwqBlzBT6A2/FD4SCGgyY07digfh9jNq7nk6hRz5z x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 1f6dcb6c-6ad1-4cb4-c29d-08d581b9fe7b x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:AM4PR0801MB1586; x-ms-traffictypediagnostic: AM4PR0801MB1586: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(5005006)(8121501046)(10201501046)(3002001)(3231220)(944501244)(52105095)(93006095)(93001095)(6055026)(6041288)(20161123564045)(20161123562045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(6072148)(201708071742011); SRVR:AM4PR0801MB1586; BCL:0; PCL:0; RULEID:; SRVR:AM4PR0801MB1586; x-forefront-prvs: 060166847D x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(346002)(39830400003)(39380400002)(396003)(366004)(40434004)(189003)(199004)(53754006)(6506007)(26005)(186003)(99286004)(478600001)(106356001)(86362001)(606006)(59450400001)(316002)(2900100001)(25786009)(966005)(3660700001)(14454004)(102836004)(72206003)(81156014)(8676002)(8936002)(81166006)(7696005)(1730700003)(105586002)(3480700004)(2351001)(66066001)(53936002)(2906002)(7736002)(3846002)(3280700002)(5660300001)(5630700001)(74316002)(7116003)(790700001)(2501003)(5890100001)(55016002)(236005)(6436002)(6306002)(6916009)(5640700003)(5250100002)(97736004)(68736007)(33656002)(54896002)(9686003)(6116002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM4PR0801MB1586; H:AM4PR0801MB2706.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: txDa/TDZBaHQcjfFLOU9Uo3UXQfrVQ3n7vSuoQc2cLcCvmJYOc/5N0fA0ErqU8hhMI7apcGeg2tAuJrcKfCEwafWAUm5Q77qdrvvA+4JsDfE6HPDT7LnHNoNWbtPkUBHWX9/byDAANy1FNozaN3EiDzuyeghfL0UJi0gSV47/2OdmGgIG3gUMwor3VpGdwRlRJfZrOMoaLyLbfhdZihJuBQPoqD7p2xuUGXPci180a/aCweKJYG3wzhhmTQjDqrukv4eNHQEW68B9BbLDynu95aYLv7qXBcyh9idWbQmwzVe4AYak8T0G/Dxu/vZkXO4FodQpkToFYgMsd7EAGsvcQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_AM4PR0801MB2706F01C5A09929538BB02D0FADB0AM4PR0801MB2706_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1f6dcb6c-6ad1-4cb4-c29d-08d581b9fe7b X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Mar 2018 10:23:38.0155 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0801MB1586 Archived-At: Subject: [Suit] Hackathon Project Registered X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Mar 2018 10:23:43 -0000 --_000_AM4PR0801MB2706F01C5A09929538BB02D0FADB0AM4PR0801MB2706_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, I have registered the project at the Hackathon Wiki, see https://trac.ietf.= org/trac/ietf/meeting/wiki/101hackathon For those who are new to the IETF Hackathon work please do not forget to re= gister at https://ietf.org/how/runningcode/hackathons/101-hackathon/ Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_AM4PR0801MB2706F01C5A09929538BB02D0FADB0AM4PR0801MB2706_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

I have registered the project at the Hackathon Wiki,= see https://trac.ietf.org/trac/ietf/meeting/wiki/101hackathon

For those who are new to the IETF Hackathon work ple= ase do not forget to register at http= s://ietf.org/how/runningcode/hackathons/101-hackathon/

 

Ciao

Hannes

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_AM4PR0801MB2706F01C5A09929538BB02D0FADB0AM4PR0801MB2706_-- From nobody Mon Mar 5 00:26:25 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C867A127023 for ; Mon, 5 Mar 2018 00:26:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.01 X-Spam-Level: X-Spam-Status: No, score=-2.01 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nordicsemi.no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DrjLh41YgoEq for ; Mon, 5 Mar 2018 00:26:20 -0800 (PST) Received: from ironport01.nordicsemi.no (mx01.nordicsemi.no [194.19.86.146]) (using TLSv1.2 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D7146126579 for ; Mon, 5 Mar 2018 00:26:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nordicsemi.no; l=2115; s=default; t=1520238380; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=xUC4P8ODyzE6xjHEgxK9GsC4a2ZXs0A0qN5qPB2xMZM=; b=RWyLEb10H4IMyGcZUZUkQUjpRz7i3ANFcAdBbGdkHiyPmpBTL8KQM1nm 3Vk0vZRhtyNBGyRCZtTwiNRNlB/wl2VLCaYeuGjXZUwU4xPSQOTsZ82J6 YORHqo1LD18G9SbOcgrkrpRJBhP+XbvYOMHgUM+ZdnozglaaEfN94MHaa c=; X-IronPort-AV: E=Sophos;i="5.47,426,1515452400"; d="scan'208";a="9862571" From: "Puzdrowski, Andrzej" To: Hannes Tschofenig , "suit@ietf.org" Thread-Topic: draft-moran-suit-architecture-02 Thread-Index: AdOya4HTKQXXm+yJQ+GFI0Cl2QaZMgB7noUg Date: Mon, 5 Mar 2018 08:26:16 +0000 Message-ID: <7f1b1ae849c44c4eabedef7a5c0135a3@nordicsemi.no> References: In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.9.200.83] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Suit] draft-moran-suit-architecture-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 08:26:23 -0000 Hi I renew my previous comment as it was not answered. (I found out that I had referred to incorrect section number.) Page 6, section 3.6 Operates with a small bootloader I would escalate the group of recovery protocols The recovery mechanism is used in case the update process failed and may in= clude support for firmware updates over serial, USB or even a limited versi= on of Bluetooth Smart. The recovery mechanism is used in case the update process failed and may in= clude support for firmware updates over serial, USB or even a limited versi= on of wireless connectivity standard like a limited Bluetooth Smart. BR Andrzej -----Original Message----- From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Hannes Tschofenig Sent: Friday, March 02, 2018 10:23 PM To: suit@ietf.org Subject: [Suit] draft-moran-suit-architecture-02 Hi all, I submitted a new version of the architecture document based on the feedbac= k from the virtual interim meeting and the mailing list discussions: https://tools.ietf.org/html/draft-moran-suit-architecture-02 Many of the changes resulted from feedback provided by Marti Bolivar, Andrz= ej Puzdrowski, and Markus Gueller. There are various changes: * added two figures to the architecture describing the delivery methods * updated and clarified text in the requirements section * added a new threat about "Reverse Engineering Of Firmware Image for Vulne= rability Analysis" * added a new security requirement about "Firmware encryption" * added use case about "IP Protection" * added the manifest field "Content Key Distribution Method" Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. _______________________________________________ Suit mailing list Suit@ietf.org https://www.ietf.org/mailman/listinfo/suit From nobody Mon Mar 5 00:53:11 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9366D1272E1 for ; Mon, 5 Mar 2018 00:53:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5vjsFh7bAa8Z for ; Mon, 5 Mar 2018 00:53:03 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0629.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe1f::629]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E203A126579 for ; Mon, 5 Mar 2018 00:53:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=M3YobUsN33Suwn07dbK5s4CTckEWJiPVgXHjG1IPFX0=; b=oHRRE5yCy4cjB2LvWH8ml4vbqB+k0ww/jdiyW9a9oTc1GUf8RCWDg14bP/zb0yxh/sNYGJ71s2nFKt3+AW045Zh5haI2R5wh9KxjWmFMNdQ/JzNAMLQCZFpp9NVWo0OhdqCmsc4+T4g3lKQgrT17CskgKUsW0LMcJnIESXlW8ok= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1598.eurprd08.prod.outlook.com (10.167.211.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.548.13; Mon, 5 Mar 2018 08:53:00 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d%17]) with mapi id 15.20.0548.016; Mon, 5 Mar 2018 08:52:59 +0000 From: Hannes Tschofenig To: "Puzdrowski, Andrzej" , "suit@ietf.org" Thread-Topic: draft-moran-suit-architecture-02 Thread-Index: AdOya4HTKQXXm+yJQ+GFI0Cl2QaZMgB7noUgAAFQwrA= Date: Mon, 5 Mar 2018 08:52:59 +0000 Message-ID: References: <7f1b1ae849c44c4eabedef7a5c0135a3@nordicsemi.no> In-Reply-To: <7f1b1ae849c44c4eabedef7a5c0135a3@nordicsemi.no> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1598; 7:gkUMvFVMzwIYMoDNa6ez5jRsyfu9/s4Sjp1mjrOQM9lCD74JXNKctCtTrNCWe2xTSNyxksm0R7nu7w4P08PRr85PYL3eixJ2qwQpL8zft1bHUOYyV8c36t1295WCtfpoegSkXdasFyzxq3Jq4K+Lvb66tqsZmpep1b3xXGenTxSh1cE2AuYebsrBJ+MwkrBiEOTwgqe0R4skwTxsYeOv03NePioa4PjzlnXW8AvW2jEZabejm3qCtglaRSGoOktw x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 299ad9d4-440c-4d46-5e8d-08d582767f85 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:VI1PR0801MB1598; x-ms-traffictypediagnostic: VI1PR0801MB1598: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3231220)(944501244)(52105095)(3002001)(6055026)(6041288)(20161123564045)(20161123562045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(6072148)(201708071742011); SRVR:VI1PR0801MB1598; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1598; x-forefront-prvs: 06022AA85F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(346002)(396003)(39860400002)(39380400002)(376002)(13464003)(40434004)(53754006)(199004)(189003)(186003)(2900100001)(105586002)(25786009)(6506007)(74316002)(59450400001)(106356001)(53546011)(72206003)(68736007)(6116002)(9686003)(6246003)(2906002)(3846002)(966005)(53936002)(2950100002)(305945005)(8936002)(229853002)(6306002)(81156014)(7696005)(26005)(81166006)(110136005)(478600001)(76176011)(55016002)(8676002)(33656002)(97736004)(86362001)(5660300001)(66066001)(5250100002)(316002)(3280700002)(2501003)(5890100001)(102836004)(6436002)(3660700001)(14454004)(7736002)(99286004); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1598; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: uvPhDeHz2XRkS5gsdmm2tvxuKDioU/rF8c4O8tZzZHStAvTmB8Lan+wOxA4drgeUIj/y7DN/V6FsJoM7+X+gQ/GwFylvh0SRLETOhRRa+xcygvUIgTFM1+ytoSKlT/57s4+2S88o7OYNBk52mlS8DhV/Aoty7xG/jeWjyNgWBhecZHSCk6KaCa3AFSPUxr1pMoNthp1hdiQnQWtdHqCx7x1GAsYVk+pLMWRjD277HVbkfcT1oqH9QP+38m9gfdK6NR/MEiagPJvPFgMYab0IcqrJZShoqHxUISwtBdsRi4c35dopB8YEVOuVYfih4NtoQUpUocgvWq2ZWjzRfhebZA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 299ad9d4-440c-4d46-5e8d-08d582767f85 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Mar 2018 08:52:59.8898 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1598 Archived-At: Subject: Re: [Suit] draft-moran-suit-architecture-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 08:53:11 -0000 Hi Andrzej, Your wording change makes sense to me. I will update the text accordingly. Ciao Hannes -----Original Message----- From: Puzdrowski, Andrzej [mailto:Andrzej.Puzdrowski@nordicsemi.no] Sent: 05 March 2018 09:26 To: Hannes Tschofenig; suit@ietf.org Subject: RE: draft-moran-suit-architecture-02 Hi I renew my previous comment as it was not answered. (I found out that I had referred to incorrect section number.) Page 6, section 3.6 Operates with a small bootloader I would escalate the g= roup of recovery protocols The recovery mechanism is used in case the update process failed and may in= clude support for firmware updates over serial, USB or even a limited versi= on of Bluetooth Smart. The recovery mechanism is used in case the update process failed and may in= clude support for firmware updates over serial, USB or even a limited versi= on of wireless connectivity standard like a limited Bluetooth Smart. BR Andrzej -----Original Message----- From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Hannes Tschofenig Sent: Friday, March 02, 2018 10:23 PM To: suit@ietf.org Subject: [Suit] draft-moran-suit-architecture-02 Hi all, I submitted a new version of the architecture document based on the feedbac= k from the virtual interim meeting and the mailing list discussions: https://tools.ietf.org/html/draft-moran-suit-architecture-02 Many of the changes resulted from feedback provided by Marti Bolivar, Andrz= ej Puzdrowski, and Markus Gueller. There are various changes: * added two figures to the architecture describing the delivery methods * updated and clarified text in the requirements section * added a new threat about "Reverse Engineering Of Firmware Image for Vulne= rability Analysis" * added a new security requirement about "Firmware encryption" * added use case about "IP Protection" * added the manifest field "Content Key Distribution Method" Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. _______________________________________________ Suit mailing list Suit@ietf.org https://www.ietf.org/mailman/listinfo/suit IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Mon Mar 5 10:58:25 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7A0712D7E8 for ; Mon, 5 Mar 2018 10:58:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=opensourcefoundries-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PY3P-z-CqCqj for ; Mon, 5 Mar 2018 10:58:22 -0800 (PST) Received: from mail-wr0-x22f.google.com (mail-wr0-x22f.google.com [IPv6:2a00:1450:400c:c0c::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3FD3912D86B for ; Mon, 5 Mar 2018 10:58:22 -0800 (PST) Received: by mail-wr0-x22f.google.com with SMTP id u49so18391194wrc.10 for ; Mon, 05 Mar 2018 10:58:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=opensourcefoundries-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=VLFSch4GNKw0AWLFYSWHwvN43smJUISH4voywNpiDwk=; b=B/4vWQPeTr1zTwGKuekaE3EB/Mz6O6rSqBWlIykNbB9Y36Jr/ew2OggFejk7D5z0uk gsU0i4MQKSSrtYZovOOqgHfuPpOJC6aE63QsPMGrA5nHkMPwH66hdeB4S8Gecr649+Xr zdi8eno+wffl5ziglt7TQkM/sgmyi8KM9aI4qj5m7WwRPapLaMeI85TEJrNkXMcP5YwV vqexvD3aErr+zujXVA1SHcPLV7LDkmQfRxtpl1sLAFGPxyT918iMoMrNP2hBekgFdq0O 7bF71VCfd78AulkU1tf4ckux2fb1A95Z9rY5VGix6eVWSyvYBnHMuC6+8MCj9lBvuxj8 6xgw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=VLFSch4GNKw0AWLFYSWHwvN43smJUISH4voywNpiDwk=; b=RxIoIA7kNEPh89QBfzbbW1cG8+7Sh+Bx8/5Vf7iURKW6V6YabuQaTLzzO2wuGcrTol zMZaWALstI5bOw2bWrg45fV1f0cuSR1ZW98U4Z9LmbosC2ydLDRPi+UBgmq2JCjAXWgl INpdsqrSZcZRa+h4N1quwsnOKVhWeUvKDxKoS6PWdrlhAJ0np85gNvgomNGjpqf0OJzV EULXiQ6IqMeFyJIVI7jDWsKbWjBpVRn8md3GvK2ww4fG2iymjbGuFp/8oKpTGFnjzJ25 KAh50CGKREyxOZzEkPsjebHYSWCE8wfU5zSkHALgnW5FDMVbQVFVMeNXfJm1RynmYKyv T7xg== X-Gm-Message-State: APf1xPAvKzIIsSAJ4aCHHDTiBE+XGMHFmKPhwDYTw+rW7CvsTMfYdAqH BNqd9a/B6vcz4Ea8dSn9vMT2vwqmNnz9cGmyZHSVTQ== X-Google-Smtp-Source: AG47ELsbgRooo1cwKGjBRmwf2t9lYWFhiZygfi5EeSfDPxZ+nUaFPzCxgGNhc5pHWB44pYMluQBPV5VgK01s/KwdE8E= X-Received: by 10.223.131.37 with SMTP id 34mr13858260wrd.169.1520276300549; Mon, 05 Mar 2018 10:58:20 -0800 (PST) MIME-Version: 1.0 Received: by 10.223.181.129 with HTTP; Mon, 5 Mar 2018 10:58:20 -0800 (PST) In-Reply-To: References: From: Marti Bolivar Date: Mon, 5 Mar 2018 13:58:20 -0500 Message-ID: To: Hannes Tschofenig Cc: "suit@ietf.org" Content-Type: multipart/alternative; boundary="94eb2c0d21bedae3f40566aee877" Archived-At: Subject: Re: [Suit] draft-moran-suit-architecture-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 18:58:25 -0000 --94eb2c0d21bedae3f40566aee877 Content-Type: text/plain; charset="UTF-8" Hi Hannes, Thank you for the update. I also renew these previous comments which you agreed should correspond to updated text, with updated page and section numbers: Page 8: in "it conveys it", the first "it" refers to a person (the Author), and should use a personal pronoun (so perhaps "they convey it"; "they" is used elsewhere in the document as a gender-neutral alternative to "he" or "she"). Pages 21-22: MFSR4 (Signed Payload Descriptor) is described as mitigating threat MFT5 (The target device installs the payload to the wrong location), among other threats, presumably since in A.3.4, the location to store the payload MUST be included in the signed information (and A.6.7 specifies that Storage Location is a Manifest Field). If that reasoning is correct, then MFSR4 should also mitigate against MFT4 (The target device misinterprets the type of payload), since in A.3.4, it's specified that the payload format MUST be included in the signed information, and in A.6.6, the Payload Format is listed as a Manifest Field. However, MFSR4 is not specified to mitigate MFT4. In fact, none of the security requirements are listed as a mitigation for MFT4. This seems likely to be a simple oversight, which can be fixed by adding MFT4 to the list of threats MFSR4 mitigates against. Thanks, Marti On Fri, Mar 2, 2018 at 4:23 PM, Hannes Tschofenig wrote: > Hi all, > > I submitted a new version of the architecture document based on the > feedback from the virtual interim meeting and the mailing list discussions: > https://tools.ietf.org/html/draft-moran-suit-architecture-02 > > Many of the changes resulted from feedback provided by Marti Bolivar, > Andrzej Puzdrowski, and Markus Gueller. > > There are various changes: > * added two figures to the architecture describing the delivery methods > * updated and clarified text in the requirements section > * added a new threat about "Reverse Engineering Of Firmware Image for > Vulnerability Analysis" > * added a new security requirement about "Firmware encryption" > * added use case about "IP Protection" > * added the manifest field "Content Key Distribution Method" > > Ciao > Hannes > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy the > information in any medium. Thank you. > > _______________________________________________ > Suit mailing list > Suit@ietf.org > https://www.ietf.org/mailman/listinfo/suit > --94eb2c0d21bedae3f40566aee877 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Hannes,

Thank you for the update.

I also renew these previous comments which you agreed = should correspond to updated text, with updated page and section numbers:

Page 8: in "it conveys i= t", the first "it" refers to a person (the Author), and shou= ld use a personal pronoun (so perhaps "they convey it"; "the= y" is used elsewhere in the document as a gender-neutral alternative t= o "he" or "she").

Pages 21-22:

MFSR4 (Signed Payload Descriptor) is described as mitigating t= hreat MFT5 (The target device installs the payload to the wrong location), = among other threats, presumably since in A.3.4, the location to store the p= ayload MUST be included in the signed information (and A.6.7 specifies that= Storage Location is a Manifest Field).

If that reasoning is correct, then MFSR4 should als= o mitigate against MFT4 (The target device misinterprets the type of payloa= d), since in A.3.4, it's specified that the payload format MUST be incl= uded in the signed information, and in A.6.6, the Payload Format is listed = as a Manifest Field.

However, MFSR4 is not specified to mitigate MFT4. In fact, none of the= security requirements are listed as a mitigation for MFT4. This seems like= ly to be a simple oversight, which can be fixed by adding MFT4 to the list = of=C2=A0
threats MFSR4 mitigates against.
<= div class=3D"gmail_extra" style=3D"color:rgb(34,34,34);font-family:arial,sa= ns-serif;font-size:12.8px;font-style:normal;font-variant-ligatures:normal;f= ont-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:st= art;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px= ;background-color:rgb(255,255,255);text-decoration-style:initial;text-decor= ation-color:initial">
Thanks,
Marti


=
On Fri, Mar 2, 2018 at 4:23 PM, Hannes Tschofeni= g <Hannes.Tschofenig@arm.com> wrote:
Hi all,

I submitted a new version of the architecture document based on the feedbac= k from the virtual interim meeting and the mailing list discussions:
https://tools.ietf.org/html/draft-m= oran-suit-architecture-02

Many of the changes resulted from feedback provided by Marti Bolivar, Andrz= ej Puzdrowski, and Markus Gueller.

There are various changes:
* added two figures to the architecture describing the delivery methods
* updated and clarified text in the requirements=C2=A0 section
* added a new threat about "Reverse Engineering Of Firmware Image for = Vulnerability Analysis"
* added a new security requirement about "Firmware encryption" * added use case about "IP Protection"
* added the manifest field "Content Key Distribution Method"

Ciao
Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you.

_______________________________________________
Suit mailing list
Suit@ietf.org
https://www.ietf.org/mailman/listinfo/suit

--94eb2c0d21bedae3f40566aee877-- From nobody Mon Mar 5 12:38:33 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78B8A127863 for ; Mon, 5 Mar 2018 12:38:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.92 X-Spam-Level: X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x6Gz5s-uwHjU for ; Mon, 5 Mar 2018 12:38:30 -0800 (PST) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30060.outbound.protection.outlook.com [40.107.3.60]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 018EE124B18 for ; Mon, 5 Mar 2018 12:38:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=7xBjKfdW3VRn1x0J4jBuZKnQaQfMJTEgg1WdpBJcFFk=; b=TCyl5TcetJPaWUfjfWRAVq1I8BSSZTTd6jVi/yrW5o3VN8bnQpl44gUo+0iFggkDGLO56njSqTVWfdU1VLjbrDn06FpEpYGNlBhL/dD/80jAdYRGZuEKw5+glW5AhZv6aareE9/74vAdkhtv2h2kyn92BrUO3Ezijg6L8Rkk+JQ= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1550.eurprd08.prod.outlook.com (10.167.210.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.548.13; Mon, 5 Mar 2018 20:38:27 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d%17]) with mapi id 15.20.0548.016; Mon, 5 Mar 2018 20:38:27 +0000 From: Hannes Tschofenig To: "Puzdrowski, Andrzej" , "suit@ietf.org" Thread-Topic: draft-moran-suit-architecture-02 Thread-Index: AdOya4HTKQXXm+yJQ+GFI0Cl2QaZMgB7noUgABn2LhA= Date: Mon, 5 Mar 2018 20:38:27 +0000 Message-ID: References: <7f1b1ae849c44c4eabedef7a5c0135a3@nordicsemi.no> In-Reply-To: <7f1b1ae849c44c4eabedef7a5c0135a3@nordicsemi.no> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1550; 7:Q02HZPPtcZXIwMx/uaArWy0+y1svHt81vtAr15pYmqYxB9SjrcbWPZMKjYH0n4XKYcKoa39YYU/zXZFjDesY8Omf7QM1uqJUz1xJu1lKU4+Lm2az7Ll0NMRTNzl74E2vHyZG0FHV7u+KRc9IsyF776PSbXDAEWJeoy1nR3gFz2xGkJRukW60V1adin91zzw3mhT/hs2FHVvx5QT1ge0Qi8kRJ1lg6S3KCBBrlwcfOZ9ssAxx6nfC/WDBo3RMruKW x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: cabf15e1-7b36-4213-cbea-08d582d90c99 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:VI1PR0801MB1550; x-ms-traffictypediagnostic: VI1PR0801MB1550: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3231220)(944501244)(52105095)(3002001)(6055026)(6041288)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123564045)(6072148)(201708071742011); SRVR:VI1PR0801MB1550; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1550; x-forefront-prvs: 06022AA85F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(39380400002)(346002)(39860400002)(366004)(396003)(53754006)(189003)(40434004)(13464003)(199004)(8676002)(86362001)(72206003)(74316002)(6116002)(186003)(5660300001)(26005)(3280700002)(3846002)(316002)(25786009)(59450400001)(5250100002)(2906002)(102836004)(53546011)(2950100002)(6506007)(33656002)(68736007)(81166006)(3660700001)(966005)(5890100001)(229853002)(2501003)(14454004)(110136005)(81156014)(9686003)(105586002)(6306002)(8936002)(7736002)(478600001)(99286004)(2900100001)(55016002)(7696005)(76176011)(106356001)(6246003)(305945005)(66066001)(53936002)(6436002)(97736004); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1550; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: RwNtYwU3K3NDiWwUL4sFsGIkPy53x6hmtEskhg8f2wQzEKBSaV/rUFdNhxb4LuyNaWYVRwXsoeKG5bklgqyBa80TGHrcQiDYm3ZZ1B0Pww17AgPGpGMjc97hGYDuKtlNzQ1CUxfB6rNQuEowwhLpfALHva22cHCcDNEh2sevSxnw7BJzDENJ37bqKNl6pEDlg8Ce9+hIhZS8/M4qpVuBGyt2Rv+La7E6q7huJelZ2FTZ4TkcUyL3HYzxXHXA1m2G1xTxNcCE4HrgOxKm+AQIheK/TzZUvDGM6LKjBRkzYC5eFULTt0z/ThTzNoLL6Nd3M1XI6kA/Ep3bdDbRXeTSQA== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: cabf15e1-7b36-4213-cbea-08d582d90c99 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Mar 2018 20:38:27.2619 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1550 Archived-At: Subject: Re: [Suit] draft-moran-suit-architecture-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 20:38:32 -0000 I addressed this comment in version -03, Andrzej! -----Original Message----- From: Puzdrowski, Andrzej [mailto:Andrzej.Puzdrowski@nordicsemi.no] Sent: 05 March 2018 09:26 To: Hannes Tschofenig; suit@ietf.org Subject: RE: draft-moran-suit-architecture-02 Hi I renew my previous comment as it was not answered. (I found out that I had referred to incorrect section number.) Page 6, section 3.6 Operates with a small bootloader I would escalate the g= roup of recovery protocols The recovery mechanism is used in case the update process failed and may in= clude support for firmware updates over serial, USB or even a limited versi= on of Bluetooth Smart. The recovery mechanism is used in case the update process failed and may in= clude support for firmware updates over serial, USB or even a limited versi= on of wireless connectivity standard like a limited Bluetooth Smart. BR Andrzej -----Original Message----- From: Suit [mailto:suit-bounces@ietf.org] On Behalf Of Hannes Tschofenig Sent: Friday, March 02, 2018 10:23 PM To: suit@ietf.org Subject: [Suit] draft-moran-suit-architecture-02 Hi all, I submitted a new version of the architecture document based on the feedbac= k from the virtual interim meeting and the mailing list discussions: https://tools.ietf.org/html/draft-moran-suit-architecture-02 Many of the changes resulted from feedback provided by Marti Bolivar, Andrz= ej Puzdrowski, and Markus Gueller. There are various changes: * added two figures to the architecture describing the delivery methods * updated and clarified text in the requirements section * added a new threat about "Reverse Engineering Of Firmware Image for Vulne= rability Analysis" * added a new security requirement about "Firmware encryption" * added use case about "IP Protection" * added the manifest field "Content Key Distribution Method" Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. _______________________________________________ Suit mailing list Suit@ietf.org https://www.ietf.org/mailman/listinfo/suit IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Mon Mar 5 12:39:16 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B295126D85 for ; Mon, 5 Mar 2018 12:39:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.909 X-Spam-Level: X-Spam-Status: No, score=-2.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YggH50YOojH6 for ; Mon, 5 Mar 2018 12:39:12 -0800 (PST) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30069.outbound.protection.outlook.com [40.107.3.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 233FE124B18 for ; Mon, 5 Mar 2018 12:39:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=oMticO3SNlUJ6gAUTO84ITskyglLUIVaYSXQ3tCgJIw=; b=cWa/BsrsIgcFcXKX0lIoUIqmVVPkWbOIk3iD1J8wCStD48htYMrlbYVgw3kvFyXLVi7Ul9q2IK//02M868pbv+q38OdAap69vWPhZnwSannIdPphw7iT+RimsaTaxAvWOFlgyL7UHBuTUw46bvhdAtwW1tlOyeZ8t+1vLMnPBeM= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1550.eurprd08.prod.outlook.com (10.167.210.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.548.13; Mon, 5 Mar 2018 20:39:09 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d%17]) with mapi id 15.20.0548.016; Mon, 5 Mar 2018 20:39:09 +0000 From: Hannes Tschofenig To: Marti Bolivar CC: "suit@ietf.org" Thread-Topic: [Suit] draft-moran-suit-architecture-02 Thread-Index: AdOya4HTKQXXm+yJQ+GFI0Cl2QaZMgCSGugAAAN9BsA= Date: Mon, 5 Mar 2018 20:39:08 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1550; 7:9L+prUPfrrkkf4Npw6DTp8W66Dc2yBKfxaGIVaZx8DI9igca4aJS1UMrFE4j+Hn6J69As93Pfz4L1MmWv4pD7PzoqrwV029O3aMnXQlZuUNfVHuXTjNK3BteTKL1sgcPSsaHFxxKGNkMOAh2UjGf3dzUNTfx+giFZk7WXKEn5op7VzxsgpSYWk/3lZ3KbHl9Ss2kXdq7QkpPCz4xGaH8FUzjj/kd/NpruzmwfpG8tyHCvXNc8XcmeylqU1JAGB4D x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 80e61ea5-e90b-4b4e-cf43-08d582d9257e x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:VI1PR0801MB1550; x-ms-traffictypediagnostic: VI1PR0801MB1550: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(180628864354917)(192374486261705)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3231220)(944501244)(52105095)(3002001)(6055026)(6041288)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123564045)(6072148)(201708071742011); SRVR:VI1PR0801MB1550; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1550; x-forefront-prvs: 06022AA85F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(39380400002)(346002)(39860400002)(366004)(396003)(53754006)(189003)(40434004)(199004)(8676002)(86362001)(72206003)(74316002)(6116002)(186003)(5660300001)(26005)(3280700002)(3846002)(316002)(25786009)(59450400001)(5250100002)(2906002)(9326002)(790700001)(102836004)(606006)(53546011)(2950100002)(6916009)(6506007)(33656002)(68736007)(81166006)(3660700001)(966005)(5890100001)(229853002)(14454004)(81156014)(9686003)(236005)(105586002)(54896002)(6306002)(8936002)(7736002)(478600001)(99286004)(2900100001)(55016002)(7696005)(76176011)(106356001)(4326008)(6246003)(66066001)(53936002)(6436002)(97736004)(345774005); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1550; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: eGnQhtKYCV9ypH+xtaGgsKpblTA6qa+OUe+JnJiQJgkO99EnbtX3nj/A1WEA8lscBjf7VM7lgkII6hSdqX6XtFChysXJ9axrJiXdaCM5ze9NHnpoNXdrFF3QjKPCYMnrUNcaSiY68R6US8fAjh+3jC0e3nbTR/Mz9pBYB3egqQ22UHyPfL0dD1GcSFEXuxeFNN5UKgOWrwNG8o8Yf7SmiKaLI/wcysWjo2PNO/VWz/BOGKmvlt+7rsRlEg6njqYxAPSuogQgfVZUkjCZpk4VxN6RJtjDYKEBhwtCtRWuc6115a1dpQk5fWz2J6tjUyrm2lqZol8bugQ5x3WRFLoRrQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB2112B90A425857353561F3E4FADA0VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 80e61ea5-e90b-4b4e-cf43-08d582d9257e X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Mar 2018 20:39:08.9656 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1550 Archived-At: Subject: Re: [Suit] draft-moran-suit-architecture-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 20:39:15 -0000 --_000_VI1PR0801MB2112B90A425857353561F3E4FADA0VI1PR0801MB2112_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTWFydGksDQoNCkkgdGhvdWdodCBJIGhhZCBhZGRyZXNzZWQgdGhlc2UgaXNzdWVzIGluIHZl cnNpb24gLTAyIGFscmVhZHkuIEkgbWlnaHQgaGF2ZSBtZXNzZWQgc29tZXRoaW5nIHVwLiBJbiBh bnkgY2FzZSwgdGhleSBzaG91bGQgbm93IGJlIHRoZXJlIGluIHZlcnNpb24gLTAzLg0KDQpDaWFv DQpIYW5uZXMNCg0KRnJvbTogTWFydGkgQm9saXZhciBbbWFpbHRvOm1hcnRpQG9wZW5zb3VyY2Vm b3VuZHJpZXMuY29tXQ0KU2VudDogMDUgTWFyY2ggMjAxOCAxOTo1OA0KVG86IEhhbm5lcyBUc2No b2ZlbmlnDQpDYzogc3VpdEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtTdWl0XSBkcmFmdC1tb3Jh bi1zdWl0LWFyY2hpdGVjdHVyZS0wMg0KDQpIaSBIYW5uZXMsDQoNClRoYW5rIHlvdSBmb3IgdGhl IHVwZGF0ZS4NCg0KSSBhbHNvIHJlbmV3IHRoZXNlIHByZXZpb3VzIGNvbW1lbnRzIHdoaWNoIHlv dSBhZ3JlZWQgc2hvdWxkIGNvcnJlc3BvbmQgdG8gdXBkYXRlZCB0ZXh0LCB3aXRoIHVwZGF0ZWQg cGFnZSBhbmQgc2VjdGlvbiBudW1iZXJzOg0KDQpQYWdlIDg6IGluICJpdCBjb252ZXlzIGl0Iiwg dGhlIGZpcnN0ICJpdCIgcmVmZXJzIHRvIGEgcGVyc29uICh0aGUgQXV0aG9yKSwgYW5kIHNob3Vs ZCB1c2UgYSBwZXJzb25hbCBwcm9ub3VuIChzbyBwZXJoYXBzICJ0aGV5IGNvbnZleSBpdCI7ICJ0 aGV5IiBpcyB1c2VkIGVsc2V3aGVyZSBpbiB0aGUgZG9jdW1lbnQgYXMgYSBnZW5kZXItbmV1dHJh bCBhbHRlcm5hdGl2ZSB0byAiaGUiIG9yICJzaGUiKS4NCg0KUGFnZXMgMjEtMjI6DQoNCk1GU1I0 IChTaWduZWQgUGF5bG9hZCBEZXNjcmlwdG9yKSBpcyBkZXNjcmliZWQgYXMgbWl0aWdhdGluZyB0 aHJlYXQgTUZUNSAoVGhlIHRhcmdldCBkZXZpY2UgaW5zdGFsbHMgdGhlIHBheWxvYWQgdG8gdGhl IHdyb25nIGxvY2F0aW9uKSwgYW1vbmcgb3RoZXIgdGhyZWF0cywgcHJlc3VtYWJseSBzaW5jZSBp biBBLjMuNCwgdGhlIGxvY2F0aW9uIHRvIHN0b3JlIHRoZSBwYXlsb2FkIE1VU1QgYmUgaW5jbHVk ZWQgaW4gdGhlIHNpZ25lZCBpbmZvcm1hdGlvbiAoYW5kIEEuNi43IHNwZWNpZmllcyB0aGF0IFN0 b3JhZ2UgTG9jYXRpb24gaXMgYSBNYW5pZmVzdCBGaWVsZCkuDQoNCklmIHRoYXQgcmVhc29uaW5n IGlzIGNvcnJlY3QsIHRoZW4gTUZTUjQgc2hvdWxkIGFsc28gbWl0aWdhdGUgYWdhaW5zdCBNRlQ0 IChUaGUgdGFyZ2V0IGRldmljZSBtaXNpbnRlcnByZXRzIHRoZSB0eXBlIG9mIHBheWxvYWQpLCBz aW5jZSBpbiBBLjMuNCwgaXQncyBzcGVjaWZpZWQgdGhhdCB0aGUgcGF5bG9hZCBmb3JtYXQgTVVT VCBiZSBpbmNsdWRlZCBpbiB0aGUgc2lnbmVkIGluZm9ybWF0aW9uLCBhbmQgaW4gQS42LjYsIHRo ZSBQYXlsb2FkIEZvcm1hdCBpcyBsaXN0ZWQgYXMgYSBNYW5pZmVzdCBGaWVsZC4NCg0KSG93ZXZl ciwgTUZTUjQgaXMgbm90IHNwZWNpZmllZCB0byBtaXRpZ2F0ZSBNRlQ0LiBJbiBmYWN0LCBub25l IG9mIHRoZSBzZWN1cml0eSByZXF1aXJlbWVudHMgYXJlIGxpc3RlZCBhcyBhIG1pdGlnYXRpb24g Zm9yIE1GVDQuIFRoaXMgc2VlbXMgbGlrZWx5IHRvIGJlIGEgc2ltcGxlIG92ZXJzaWdodCwgd2hp Y2ggY2FuIGJlIGZpeGVkIGJ5IGFkZGluZyBNRlQ0IHRvIHRoZSBsaXN0IG9mDQp0aHJlYXRzIE1G U1I0IG1pdGlnYXRlcyBhZ2FpbnN0Lg0KDQpUaGFua3MsDQpNYXJ0aQ0KDQoNCk9uIEZyaSwgTWFy IDIsIDIwMTggYXQgNDoyMyBQTSwgSGFubmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2Zlbmln QGFybS5jb208bWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+PiB3cm90ZToNCkhpIGFs bCwNCg0KSSBzdWJtaXR0ZWQgYSBuZXcgdmVyc2lvbiBvZiB0aGUgYXJjaGl0ZWN0dXJlIGRvY3Vt ZW50IGJhc2VkIG9uIHRoZSBmZWVkYmFjayBmcm9tIHRoZSB2aXJ0dWFsIGludGVyaW0gbWVldGlu ZyBhbmQgdGhlIG1haWxpbmcgbGlzdCBkaXNjdXNzaW9uczoNCmh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvaHRtbC9kcmFmdC1tb3Jhbi1zdWl0LWFyY2hpdGVjdHVyZS0wMg0KDQpNYW55IG9mIHRoZSBj aGFuZ2VzIHJlc3VsdGVkIGZyb20gZmVlZGJhY2sgcHJvdmlkZWQgYnkgTWFydGkgQm9saXZhciwg QW5kcnplaiBQdXpkcm93c2tpLCBhbmQgTWFya3VzIEd1ZWxsZXIuDQoNClRoZXJlIGFyZSB2YXJp b3VzIGNoYW5nZXM6DQoqIGFkZGVkIHR3byBmaWd1cmVzIHRvIHRoZSBhcmNoaXRlY3R1cmUgZGVz Y3JpYmluZyB0aGUgZGVsaXZlcnkgbWV0aG9kcw0KKiB1cGRhdGVkIGFuZCBjbGFyaWZpZWQgdGV4 dCBpbiB0aGUgcmVxdWlyZW1lbnRzICBzZWN0aW9uDQoqIGFkZGVkIGEgbmV3IHRocmVhdCBhYm91 dCAiUmV2ZXJzZSBFbmdpbmVlcmluZyBPZiBGaXJtd2FyZSBJbWFnZSBmb3IgVnVsbmVyYWJpbGl0 eSBBbmFseXNpcyINCiogYWRkZWQgYSBuZXcgc2VjdXJpdHkgcmVxdWlyZW1lbnQgYWJvdXQgIkZp cm13YXJlIGVuY3J5cHRpb24iDQoqIGFkZGVkIHVzZSBjYXNlIGFib3V0ICJJUCBQcm90ZWN0aW9u Ig0KKiBhZGRlZCB0aGUgbWFuaWZlc3QgZmllbGQgIkNvbnRlbnQgS2V5IERpc3RyaWJ1dGlvbiBN ZXRob2QiDQoNCkNpYW8NCkhhbm5lcw0KDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMg b2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1h eSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGll bnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Ns b3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJw b3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFu ayB5b3UuDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQpTdWl0IG1haWxpbmcgbGlzdA0KU3VpdEBpZXRmLm9yZzxtYWlsdG86U3VpdEBpZXRmLm9yZz4N Cmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc3VpdA0KDQpJTVBPUlRBTlQg Tk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFy ZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90 IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlh dGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29u LCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlv biBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo= --_000_VI1PR0801MB2112B90A425857353561F3E4FADA0VI1PR0801MB2112_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQov KiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1z b05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNp emU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0KYTps aW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6 Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29I eXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxl Ow0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTcNCgl7bXNv LXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10 eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJ bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVM7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6 NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgNzIuMHB0IDcyLjBwdCA3Mi4wcHQ7fQ0K ZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1b aWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1h eD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0K PG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9 IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9k eSBsYW5nPSJFTi1HQiIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJX b3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkhpIE1hcnRpLA0KPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JIHRob3VnaHQgSSBo YWQgYWRkcmVzc2VkIHRoZXNlIGlzc3VlcyBpbiB2ZXJzaW9uIC0wMiBhbHJlYWR5LiBJIG1pZ2h0 IGhhdmUgbWVzc2VkIHNvbWV0aGluZyB1cC4gSW4gYW55IGNhc2UsIHRoZXkgc2hvdWxkIG5vdyBi ZSB0aGVyZSBpbiB2ZXJzaW9uIC0wMy4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Q2lhbzxicj4NCkhhbm5lczxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxhIG5hbWU9Il9NYWlsRW5k Q29tcG9zZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvYT48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3Bh biBsYW5nPSJFTi1VUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBNYXJ0aSBCb2xpdmFyIFttYWls dG86bWFydGlAb3BlbnNvdXJjZWZvdW5kcmllcy5jb21dDQo8YnI+DQo8Yj5TZW50OjwvYj4gMDUg TWFyY2ggMjAxOCAxOTo1ODxicj4NCjxiPlRvOjwvYj4gSGFubmVzIFRzY2hvZmVuaWc8YnI+DQo8 Yj5DYzo8L2I+IHN1aXRAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtTdWl0XSBk cmFmdC1tb3Jhbi1zdWl0LWFyY2hpdGVjdHVyZS0wMjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPkhpIEhhbm5lcyw8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPlRoYW5rIHlvdSBmb3IgdGhlIHVwZGF0ZS48bzpwPjwvbzpwPjwvcD4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgYWxzbyByZW5ldyB0aGVzZSBwcmV2aW91cyBj b21tZW50cyB3aGljaCB5b3UgYWdyZWVkIHNob3VsZCBjb3JyZXNwb25kIHRvIHVwZGF0ZWQgdGV4 dCwgd2l0aCB1cGRhdGVkIHBhZ2UgYW5kIHNlY3Rpb24gbnVtYmVyczo8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNr Z3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuNXB0O2ZvbnQtZmFtaWx5OiZx dW90O0FyaWFsJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzIyMjIyMiI+UGFn ZSA4OiBpbiAmcXVvdDtpdCBjb252ZXlzIGl0JnF1b3Q7LCB0aGUgZmlyc3QgJnF1b3Q7aXQmcXVv dDsgcmVmZXJzIHRvIGEgcGVyc29uICh0aGUgQXV0aG9yKSwgYW5kIHNob3VsZCB1c2UgYSBwZXJz b25hbCBwcm9ub3VuIChzbyBwZXJoYXBzICZxdW90O3RoZXkgY29udmV5DQogaXQmcXVvdDs7ICZx dW90O3RoZXkmcXVvdDsgaXMgdXNlZCBlbHNld2hlcmUgaW4gdGhlIGRvY3VtZW50IGFzIGEgZ2Vu ZGVyLW5ldXRyYWwgYWx0ZXJuYXRpdmUgdG8gJnF1b3Q7aGUmcXVvdDsgb3IgJnF1b3Q7c2hlJnF1 b3Q7KS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjkuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzIyMjIyMiI+UGFnZXMgMjEtMjI6PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJh Y2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS41cHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMjIyMjIyIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5 LjVwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMyMjIyMjIiPk1GU1I0IChTaWduZWQgUGF5bG9hZCBEZXNjcmlwdG9yKSBpcyBkZXNj cmliZWQgYXMgbWl0aWdhdGluZyB0aHJlYXQgTUZUNSAoVGhlIHRhcmdldCBkZXZpY2UgaW5zdGFs bHMgdGhlIHBheWxvYWQgdG8gdGhlIHdyb25nIGxvY2F0aW9uKSwNCiBhbW9uZyBvdGhlciB0aHJl YXRzLCBwcmVzdW1hYmx5IHNpbmNlIGluIEEuMy40LCB0aGUgbG9jYXRpb24gdG8gc3RvcmUgdGhl IHBheWxvYWQgTVVTVCBiZSBpbmNsdWRlZCBpbiB0aGUgc2lnbmVkIGluZm9ybWF0aW9uIChhbmQg QS42Ljcgc3BlY2lmaWVzIHRoYXQgU3RvcmFnZSBMb2NhdGlvbiBpcyBhIE1hbmlmZXN0IEZpZWxk KS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjVw dDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2Nv bG9yOiMyMjIyMjIiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjkuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzIyMjIyMiI+SWYgdGhhdCByZWFzb25pbmcgaXMgY29ycmVj dCwgdGhlbiBNRlNSNCBzaG91bGQgYWxzbyBtaXRpZ2F0ZSBhZ2FpbnN0IE1GVDQgKFRoZSB0YXJn ZXQgZGV2aWNlIG1pc2ludGVycHJldHMgdGhlIHR5cGUgb2YgcGF5bG9hZCksIHNpbmNlDQogaW4g QS4zLjQsIGl0J3Mgc3BlY2lmaWVkIHRoYXQgdGhlIHBheWxvYWQgZm9ybWF0IE1VU1QgYmUgaW5j bHVkZWQgaW4gdGhlIHNpZ25lZCBpbmZvcm1hdGlvbiwgYW5kIGluIEEuNi42LCB0aGUgUGF5bG9h ZCBGb3JtYXQgaXMgbGlzdGVkIGFzIGEgTWFuaWZlc3QgRmllbGQuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91 bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMjIyMjIyIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0iYmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjVwdDtm b250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMyMjIyMjIiPkhvd2V2ZXIsIE1GU1I0IGlzIG5vdCBzcGVjaWZpZWQgdG8gbWl0aWdhdGUgTUZU NC4gSW4gZmFjdCwgbm9uZSBvZiB0aGUgc2VjdXJpdHkgcmVxdWlyZW1lbnRzIGFyZSBsaXN0ZWQg YXMgYSBtaXRpZ2F0aW9uIGZvciBNRlQ0LiBUaGlzDQogc2VlbXMgbGlrZWx5IHRvIGJlIGEgc2lt cGxlIG92ZXJzaWdodCwgd2hpY2ggY2FuIGJlIGZpeGVkIGJ5IGFkZGluZyBNRlQ0IHRvIHRoZSBs aXN0IG9mJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku NXB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzIyMjIyMiI+dGhyZWF0cyBNRlNSNCBtaXRpZ2F0ZXMgYWdhaW5zdC48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjVwdDtmb250LWZhbWls eTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMyMjIyMjIi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS41cHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMjIyMjIyIj5UaGFua3MsPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMjIyMjIyIj5NYXJ0aTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gRnJpLCBNYXIgMiwg MjAxOCBhdCA0OjIzIFBNLCBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkhh bm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20iIHRhcmdldD0iX2JsYW5rIj5IYW5uZXMuVHNjaG9mZW5p Z0Bhcm0uY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5IaSBhbGwsPGJyPg0KPGJyPg0KSSBzdWJtaXR0ZWQgYSBuZXcgdmVyc2lvbiBvZiB0aGUg YXJjaGl0ZWN0dXJlIGRvY3VtZW50IGJhc2VkIG9uIHRoZSBmZWVkYmFjayBmcm9tIHRoZSB2aXJ0 dWFsIGludGVyaW0gbWVldGluZyBhbmQgdGhlIG1haWxpbmcgbGlzdCBkaXNjdXNzaW9uczo8YnI+ DQo8YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtbW9yYW4tc3VpdC1h cmNoaXRlY3R1cmUtMDIiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0 bWwvZHJhZnQtbW9yYW4tc3VpdC1hcmNoaXRlY3R1cmUtMDI8L2E+PGJyPg0KPGJyPg0KTWFueSBv ZiB0aGUgY2hhbmdlcyByZXN1bHRlZCBmcm9tIGZlZWRiYWNrIHByb3ZpZGVkIGJ5IE1hcnRpIEJv bGl2YXIsIEFuZHJ6ZWogUHV6ZHJvd3NraSwgYW5kIE1hcmt1cyBHdWVsbGVyLjxicj4NCjxicj4N ClRoZXJlIGFyZSB2YXJpb3VzIGNoYW5nZXM6PGJyPg0KKiBhZGRlZCB0d28gZmlndXJlcyB0byB0 aGUgYXJjaGl0ZWN0dXJlIGRlc2NyaWJpbmcgdGhlIGRlbGl2ZXJ5IG1ldGhvZHM8YnI+DQoqIHVw ZGF0ZWQgYW5kIGNsYXJpZmllZCB0ZXh0IGluIHRoZSByZXF1aXJlbWVudHMmbmJzcDsgc2VjdGlv bjxicj4NCiogYWRkZWQgYSBuZXcgdGhyZWF0IGFib3V0ICZxdW90O1JldmVyc2UgRW5naW5lZXJp bmcgT2YgRmlybXdhcmUgSW1hZ2UgZm9yIFZ1bG5lcmFiaWxpdHkgQW5hbHlzaXMmcXVvdDs8YnI+ DQoqIGFkZGVkIGEgbmV3IHNlY3VyaXR5IHJlcXVpcmVtZW50IGFib3V0ICZxdW90O0Zpcm13YXJl IGVuY3J5cHRpb24mcXVvdDs8YnI+DQoqIGFkZGVkIHVzZSBjYXNlIGFib3V0ICZxdW90O0lQIFBy b3RlY3Rpb24mcXVvdDs8YnI+DQoqIGFkZGVkIHRoZSBtYW5pZmVzdCBmaWVsZCAmcXVvdDtDb250 ZW50IEtleSBEaXN0cmlidXRpb24gTWV0aG9kJnF1b3Q7PGJyPg0KPGJyPg0KQ2lhbzxicj4NCkhh bm5lczxicj4NCjxicj4NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVt YWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUg cHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNl IG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNv bnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsDQogb3Ig c3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Ljxi cj4NCjxicj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f PGJyPg0KU3VpdCBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86U3VpdEBpZXRmLm9y ZyI+U3VpdEBpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL3N1aXQiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL3N1aXQ8L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCklN UE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNo bWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91 IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVy IGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhl ciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsDQogb3Igc3RvcmUgb3IgY29weSB0aGUg aW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_VI1PR0801MB2112B90A425857353561F3E4FADA0VI1PR0801MB2112_-- From nobody Mon Mar 5 12:41:24 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 99808127058 for ; Mon, 5 Mar 2018 12:41:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IV1QSeLDL2tc for ; Mon, 5 Mar 2018 12:41:21 -0800 (PST) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20076.outbound.protection.outlook.com [40.107.2.76]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 42B6E124B18 for ; Mon, 5 Mar 2018 12:41:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=vn0uIPY4XA5fxyDQuUoBNs0Mu0Zn0POphJHQkSblqJU=; b=V66TiS5T6PrnNJbIDYRhs8AchTmK3n8o4dR5i8kT84IP515FGa/JjL4YZgh8BXFHTTRUYXasrxisym8jy8R5Pl0Pi1ciJpg0KfN0FYblrJ0OLF4YBAeZR3CdeAqrFxeY9xnafSzog8KsOwCIcsE66NUYy/pZ2sNmwCGk185rQQk= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1550.eurprd08.prod.outlook.com (10.167.210.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.548.13; Mon, 5 Mar 2018 20:41:18 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d%17]) with mapi id 15.20.0548.016; Mon, 5 Mar 2018 20:41:18 +0000 From: Hannes Tschofenig To: "suit@ietf.org" Thread-Topic: draft-moran-suit-architecture-03 Thread-Index: AdO0wgyYBPGIqY8fTwGNiijNUIxrmg== Date: Mon, 5 Mar 2018 20:41:18 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1550; 6:/Qv02loYOFpBHPx1hBjBxL+/uJsOc30bkaQYioqf/tu/6AwtISUuiPAwq8VbOL79+ewYGl+LuGAd3cdsb32e0u6PVeK8CxHVSd4sNO7lrk9/B3qrvGMNgTlcIqSh7LBHzmTFOAiBQLNyzts00NlD4ghnaLqk2UxKLw6anE09EwUuWYPtmUgYo+XZ0uh0zh+WDGCZNgN8tBP2EK3y0zTLKdJ+P7ihveDMS9n0LFJToCfrc6eGxkwzvYfUbdjyqPHO91GdRNkb2RWbpMZHACq86ywYS9kuhiAf1fm4hGN2L8aMfNFjH/Q1gEPEPGI9oFarUZBny4JI+Da9QvPJ3N9e3wIU5Tq0kXSFu+a6v5rdL2N/h9P8NdXEtZDoxPDiL9Tc; 5:+M6jbfnCEL7u7QVBOjEcX/MT1wr/zS4u54PdUge0VUODDYKV9UBKVteZM5jEtEpkdFbJE9vYup7wLOkCn1NfvaqoS9GWK0JSZz8/SeUzhbiRKdsfV9ZlwKcFs8ZtT7N/9w0Ihl+y7rrA6uCpzJKIjatWbM+S6fmKAIa5NL8Ix+Q=; 24:DEOjT7FLDVpXgXcG9hJap8E/ksfcsoTBkA3/5g1zvejDvXaDEY1xMQi4egX9KBoxkSba+yDNa9JPpZ4kTDzaZttIyqxIzGfpw0PE/dKCQu8=; 7:zCxuOyuX7UBzJ8GsNbh+tbzoXPe+/mOkVYFk/cYxMv6tphoEWu/R4V53S9vPMe8yudS3ECAA6QOxajwsSAKc7pRGh9b0+9f7sMXDnYPcKGezkYNB3IB2QkAEY4C8ozwW7rTXcj5ga8wX/EhuwY11ttuTyfofWcZxPZWnRX/0kehMZiIXEyPvO94MVtEF24BlW4RKdf6Rz5rRXiYp/P3nrH4OUIkCiFk2k1j+YLblVKqU4ZC1pV94jmFtWMuNKuSA x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 93e9c86d-b0f9-4ce6-fb59-08d582d97275 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603307)(7153060)(7193020); SRVR:VI1PR0801MB1550; x-ms-traffictypediagnostic: VI1PR0801MB1550: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040501)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3231220)(944501244)(52105095)(3002001)(6055026)(6041288)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123564045)(6072148)(201708071742011); SRVR:VI1PR0801MB1550; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1550; x-forefront-prvs: 06022AA85F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(39380400002)(346002)(39860400002)(366004)(396003)(53754006)(189003)(40434004)(199004)(8676002)(86362001)(72206003)(1730700003)(74316002)(6116002)(186003)(5660300001)(26005)(3280700002)(3846002)(316002)(25786009)(59450400001)(5250100002)(2906002)(790700001)(102836004)(606006)(6916009)(6506007)(33656002)(68736007)(81166006)(3660700001)(966005)(5890100001)(2501003)(14454004)(81156014)(5630700001)(9686003)(236005)(105586002)(54896002)(6306002)(8936002)(7736002)(478600001)(99286004)(5640700003)(2351001)(2900100001)(55016002)(7696005)(106356001)(66066001)(53936002)(6436002)(97736004); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1550; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: F4Bn+z5oUo3lSH5QUXEhTeQpIr7r6+DTkSDCiMTH5JlRAhffdQfen5X7xoIiZDox869nKyhjlo72zrhA+FMmt0KQvftothaERghh+w8CeU+mC7RHHm57DN1YtVk1oFahkG1vE8Gn8Av03UaaehBQPFA/RDbmig6F/QR9IRFK1D/8rGtAKD6jXR20YLHzDo42Rt28bwaQIPrNaeUvre4daE5bYvWrU7nyg6EgU+SrRiikg22HyJ2K4K3BOFkMOKWB8ohwz+LtOXuRDR2oG1xjQ2fhLi6aJCZU9e7E7K3abnolFRzQO7vE7ZsWc3KGL+GEyV5XPwP5zkGODYHSM3D30g== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB2112B85F9AB802E12B2816D8FADA0VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 93e9c86d-b0f9-4ce6-fb59-08d582d97275 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Mar 2018 20:41:18.1391 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1550 Archived-At: Subject: [Suit] draft-moran-suit-architecture-03 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Mar 2018 20:41:24 -0000 --_000_VI1PR0801MB2112B85F9AB802E12B2816D8FADA0VI1PR0801MB2112_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, We just submitted version -03, see https://tools.ietf.org/html/draft-moran-suit-architecture-03 It includes the comments from Marti and Andrzej from today. We also added t= he forward references requested for Appendix A. Ciao Hannes & Brendan IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_VI1PR0801MB2112B85F9AB802E12B2816D8FADA0VI1PR0801MB2112_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

We just submitted version -03, see

https://tools.ietf.org/html/draft-moran-suit-architect= ure-03

 

It includes the comments from Marti and Andrzej from today. We also added the forward references r= equested for Appendix A.

 

Ciao
Hannes & Brendan

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_VI1PR0801MB2112B85F9AB802E12B2816D8FADA0VI1PR0801MB2112_-- From nobody Tue Mar 6 08:43:50 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC34C127076 for ; Tue, 6 Mar 2018 08:43:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=opensourcefoundries-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sXYInrq_bzu2 for ; Tue, 6 Mar 2018 08:43:47 -0800 (PST) Received: from mail-wr0-x233.google.com (mail-wr0-x233.google.com [IPv6:2a00:1450:400c:c0c::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 983D012762F for ; Tue, 6 Mar 2018 08:43:46 -0800 (PST) Received: by mail-wr0-x233.google.com with SMTP id o76so21620647wrb.7 for ; Tue, 06 Mar 2018 08:43:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=opensourcefoundries-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=a2t0Z+RDSAQ6RHZdB0D8N/kDAov3PvIy63311hgOn1Q=; b=kndoiusmmWO8Pn1fhGfBpPTBA+CF5cdV8gY371ofMCZv7AB6KsJG8FNiCV2OpkJLBB SIZH0AoAt1x1PsQD4MzRGhS46xYgMDm9ieumiMHMTHPLurwPHY79U/2g0hfqkNZVH3tZ OocrU65MkMSTd44d33A3ZwFvGPjj0y5DzzReuT59BwZtv5Pl3h7fAMtyB0gJX1knOyZE qauzOYS/92qFOQQB8kgM2DmDoMPJC9tmEDr+kzwwSLHHHHTJJ/pL2HsXLUNhz6cr7AWh tfOFrcoJFeIZlD6oCFUO+lN/4G2X8QR8/blafoGN9z006uqPjgdPGu/1ko+MMSmVBW3J 681A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=a2t0Z+RDSAQ6RHZdB0D8N/kDAov3PvIy63311hgOn1Q=; b=fTdbt9UM8rWrE1bEJctJ/mj/DuXHkqkvh0NfrjkO+pyKT9ONXnlcmPD8dn/VdzvmCj 8d7Fx9nuZh4g1UuWz0joFp4gr9BEaRSeChkxChqPCugy8VQNFK0c4hfkHYeSCfXfoEOB 9dc7EQX1VgkI072CFeoxJRwtmSWHJhN/rQPA44c3eyQmq0EzKaEPr8EIgxp7qw1jQNnz JVi3GTwM+jHDO+BPURucj2DzjeiprPP1gaxnvzXG7krOujkunmzQlBAu9Ngp1f4hH08V 1wZRYlBoKdtaNfsvStEuLT7NzS6IZ3aCtStcwlZWp83UfOXoVukb781q5m0MO2BdhFTE cC1A== X-Gm-Message-State: APf1xPCyrWUv9WEfbJbkEaw9vQaLSK5959XaPyqPS1TTaFIEbw00gBC7 jpKTDN6RE+nGoTkoGI0Zocaghr+ZRQG5rBSv6RPHuPJk X-Google-Smtp-Source: AG47ELvjACFAv9coGeZcFWtsnBMgrx3Fk60+WElnRkQUNn7YS0hC6ENil6AmiDiC+fdUS2NECR9uIAQvPrpS5n/5u0w= X-Received: by 10.223.139.9 with SMTP id n9mr17413656wra.73.1520354624797; Tue, 06 Mar 2018 08:43:44 -0800 (PST) MIME-Version: 1.0 Received: by 10.223.181.129 with HTTP; Tue, 6 Mar 2018 08:43:44 -0800 (PST) In-Reply-To: References: From: Marti Bolivar Date: Tue, 6 Mar 2018 11:43:44 -0500 Message-ID: To: Hannes Tschofenig Cc: "suit@ietf.org" Content-Type: multipart/alternative; boundary="f403045ea3f45814730566c125f0" Archived-At: Subject: Re: [Suit] draft-moran-suit-architecture-02 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Mar 2018 16:43:49 -0000 --f403045ea3f45814730566c125f0 Content-Type: text/plain; charset="UTF-8" Hi Hannes, Thanks for the fast response. I confirm these are addressed in version -03. Marti On Mon, Mar 5, 2018 at 3:39 PM, Hannes Tschofenig wrote: > Hi Marti, > > > > I thought I had addressed these issues in version -02 already. I might > have messed something up. In any case, they should now be there in version > -03. > > > > Ciao > Hannes > > > > *From:* Marti Bolivar [mailto:marti@opensourcefoundries.com] > *Sent:* 05 March 2018 19:58 > *To:* Hannes Tschofenig > *Cc:* suit@ietf.org > *Subject:* Re: [Suit] draft-moran-suit-architecture-02 > > > > Hi Hannes, > > > > Thank you for the update. > > > > I also renew these previous comments which you agreed should correspond to > updated text, with updated page and section numbers: > > > > Page 8: in "it conveys it", the first "it" refers to a person (the > Author), and should use a personal pronoun (so perhaps "they convey it"; > "they" is used elsewhere in the document as a gender-neutral alternative to > "he" or "she"). > > > > Pages 21-22: > > > > MFSR4 (Signed Payload Descriptor) is described as mitigating threat MFT5 > (The target device installs the payload to the wrong location), among other > threats, presumably since in A.3.4, the location to store the payload MUST > be included in the signed information (and A.6.7 specifies that Storage > Location is a Manifest Field). > > > > If that reasoning is correct, then MFSR4 should also mitigate against MFT4 > (The target device misinterprets the type of payload), since in A.3.4, it's > specified that the payload format MUST be included in the signed > information, and in A.6.6, the Payload Format is listed as a Manifest Field. > > > > However, MFSR4 is not specified to mitigate MFT4. In fact, none of the > security requirements are listed as a mitigation for MFT4. This seems > likely to be a simple oversight, which can be fixed by adding MFT4 to the > list of > > threats MFSR4 mitigates against. > > > > Thanks, > > Marti > > > > > > On Fri, Mar 2, 2018 at 4:23 PM, Hannes Tschofenig < > Hannes.Tschofenig@arm.com> wrote: > > Hi all, > > I submitted a new version of the architecture document based on the > feedback from the virtual interim meeting and the mailing list discussions: > https://tools.ietf.org/html/draft-moran-suit-architecture-02 > > Many of the changes resulted from feedback provided by Marti Bolivar, > Andrzej Puzdrowski, and Markus Gueller. > > There are various changes: > * added two figures to the architecture describing the delivery methods > * updated and clarified text in the requirements section > * added a new threat about "Reverse Engineering Of Firmware Image for > Vulnerability Analysis" > * added a new security requirement about "Firmware encryption" > * added use case about "IP Protection" > * added the manifest field "Content Key Distribution Method" > > Ciao > Hannes > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy the > information in any medium. Thank you. > > _______________________________________________ > Suit mailing list > Suit@ietf.org > https://www.ietf.org/mailman/listinfo/suit > > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy the > information in any medium. Thank you. > --f403045ea3f45814730566c125f0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Hannes,

Thanks for the fast response= . I confirm these are addressed in version -03.

Ma= rti

On= Mon, Mar 5, 2018 at 3:39 PM, Hannes Tschofenig <Hannes.Tschofenig= @arm.com> wrote:

Hi Marti,

=C2=A0

I thought I had addressed= these issues in version -02 already. I might have messed something up. In = any case, they should now be there in version -03.

=C2=A0

Ciao
Hannes

=C2=A0

From: Marti Bolivar [mailto:marti@opensourcefoundries.com]
Sent: 05 March 2018 19:58
To: Hannes Tschofenig
Cc: suit@ietf.org=
Subject: Re: [Suit] draft-moran-suit-architecture-02<= /u>

=C2=A0

Hi Hannes,

=C2=A0

Thank you for the update.

=C2=A0

I also renew these previous comments which you agree= d should correspond to updated text, with updated page and section numbers:=

=C2=A0

P= age 8: in "it conveys it", the first "it" refers to a p= erson (the Author), and should use a personal pronoun (so perhaps "the= y convey it"; "they" is used elsewhere in the document as a gender-n= eutral alternative to "he" or "she").

=C2=A0

P= ages 21-22:

<= u>=C2=A0

M= FSR4 (Signed Payload Descriptor) is described as mitigating threat MFT5 (Th= e target device installs the payload to the wrong location), among other threats, presumably since in A.3.4, the location to store the = payload MUST be included in the signed information (and A.6.7 specifies tha= t Storage Location is a Manifest Field).

<= u>=C2=A0

I= f that reasoning is correct, then MFSR4 should also mitigate against MFT4 (= The target device misinterprets the type of payload), since in A.3.4, it's specified that the payload format MUST be included in t= he signed information, and in A.6.6, the Payload Format is listed as a Mani= fest Field.

<= u>=C2=A0

H= owever, MFSR4 is not specified to mitigate MFT4. In fact, none of the secur= ity requirements are listed as a mitigation for MFT4. This seems likely to be a simple oversight, which can be fixed by adding MFT4 t= o the list of=C2=A0

t= hreats MFSR4 mitigates against.

<= u>=C2=A0

T= hanks,

M= arti

=C2=A0

=C2=A0

On Fri, Mar 2, 2018 at 4:23 PM, Hannes Tschofenig &l= t;Hannes.Tsc= hofenig@arm.com> wrote:

Hi all,

I submitted a new version of the architecture document based on the feedbac= k from the virtual interim meeting and the mailing list discussions:
https://tools.ietf.org/html/draft-moran-suit-architect= ure-02

Many of the changes resulted from feedback provided by Marti Bolivar, Andrz= ej Puzdrowski, and Markus Gueller.

There are various changes:
* added two figures to the architecture describing the delivery methods
* updated and clarified text in the requirements=C2=A0 section
* added a new threat about "Reverse Engineering Of Firmware Image for = Vulnerability Analysis"
* added a new security requirement about "Firmware encryption" * added use case about "IP Protection"
* added the manifest field "Content Key Distribution Method"

Ciao
Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you.

_______________________________________________
Suit mailing list
Suit@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/suit

=C2=A0

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you.

--f403045ea3f45814730566c125f0-- From nobody Fri Mar 9 22:40:21 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E515D127867 for ; Fri, 9 Mar 2018 22:40:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.02 X-Spam-Level: X-Spam-Status: No, score=-2.02 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8CZ0s1CuwwDA for ; Fri, 9 Mar 2018 22:40:17 -0800 (PST) Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-bn3nam01on0098.outbound.protection.outlook.com [104.47.33.98]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9DEB0126DEE for ; Fri, 9 Mar 2018 22:40:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=oBL64+eMo7DIJMhZrCX3OhXI8Y1hx/ggUmXQK+nDoUI=; b=JaRq1DvVi5J/UEny53mpnBR9MmoU9E08BwTlzDBHAutMQOCeVDLSAT7AW83IE93qghdwOCpmICiDVjhfohRjmgjZhXrWxD3xhomia4U5SXuPTQKR84lm/d3Uh7klgBrWD1JwtI0+7/U1rcT98M8ubCfIEC/kz02FBntO2VdcBK8= Received: from DM5PR21MB0859.namprd21.prod.outlook.com (10.173.172.145) by DM5PR21MB0156.namprd21.prod.outlook.com (10.173.173.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.588.3; Sat, 10 Mar 2018 06:40:15 +0000 Received: from DM5PR21MB0859.namprd21.prod.outlook.com ([fe80::65ec:3de7:b9dc:c113]) by DM5PR21MB0859.namprd21.prod.outlook.com ([fe80::65ec:3de7:b9dc:c113%2]) with mapi id 15.20.0588.009; Sat, 10 Mar 2018 06:40:15 +0000 From: Dave Thaler To: "suit@ietf.org" Thread-Topic: Call for adoption on architecture document Thread-Index: AdO4OiIvYK5j8Oe7RD2Y44XV3TVlXA== Date: Sat, 10 Mar 2018 06:40:15 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-03-10T06:39:30.1435805Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [73.254.202.27] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM5PR21MB0156; 7:N0mdqVZLLcNRMz7DA8885gNTzLhUeefks5MSaY4HgqGSaIKzqiOXMhvdvcaoELeQy6XaRT5XiHpyAwtkyGpnRGGRQ5SaMQWxVVCiIFyY82rUjwwf9CCQjYAeyApAjqYlSluSskHW/zcH0W2i4kznDOvX1yT1RbWy2SMFqs950IL3ZRYcXckQJvEaCCyPAXrh0vbLK4DRG89r1HSNY5fr5wVbPkAVxOOu2pcZtmVkDKjboco5UnW/1Gbbo7ETVEwd; 20:K7caM8MOLQv0aYVqCvTMPNE0wHa6ZaUFBmhrAaQp7cOeLNXoHTzt01sn5HFWhrbbJT0JF8Sg0trLp1B+FNyhKNDBC/OkODJ72w96j0TUcACfzvHN3QGcwtegXXGZcoL6I9icZIJp1v03cJ4FT1G+HCn8ITCCiWRiTvhyew+hnio= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: b66aed60-77e7-4669-1515-08d58651c880 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7193020); SRVR:DM5PR21MB0156; x-ms-traffictypediagnostic: DM5PR21MB0156: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040522)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(3231220)(944501255)(52105095)(10201501046)(6055026)(61426038)(61427038)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(20161123564045)(20161123562045)(6072148)(201708071742011); SRVR:DM5PR21MB0156; BCL:0; PCL:0; RULEID:; SRVR:DM5PR21MB0156; x-forefront-prvs: 06070568C5 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39380400002)(376002)(366004)(396003)(39860400002)(346002)(199004)(189003)(54896002)(316002)(6116002)(74316002)(790700001)(3846002)(2351001)(2900100001)(5640700003)(81156014)(3660700001)(55016002)(5660300001)(102836004)(53936002)(6306002)(9686003)(5630700001)(106356001)(6506007)(2906002)(5250100002)(81166006)(7696005)(1730700003)(97736004)(8676002)(33656002)(7736002)(6436002)(25786009)(186003)(8936002)(66066001)(2501003)(6916009)(478600001)(99286004)(10290500003)(8990500004)(86612001)(10090500001)(86362001)(3280700002)(22452003)(19609705001)(105586002)(26005)(14454004)(68736007); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR21MB0156; H:DM5PR21MB0859.namprd21.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: q21ZFTdAafZMr7QZ+afqa0FSF04mi0+TgjbuWC+YklhIaNyyLRwi/xm58NSvksdrdlXjN8+yGzopol+8QgkPpMgXd/hCEne31gpU4c51byU/XOLYAXPacyvi8+bsEk4wX3Gz/SURqjmEZnVCAtXumOR69glnUnIcNYJ6HPRqJdRmR05ykd+5apGDaZy6uz8eFIG3asGLKXPqTEWsnBuvaHgRNmk1QB9glCzrn6JERF9gYnw/eOAmU20OirdCAzBdUbIARbDH33vcb5FhwGi6qH+f7ZtgWmYmbzfnBOprmmS+T2bHJFPJYK4n62cqn0TSJ8uHUp6dAtLrjOpILgiI5A== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_DM5PR21MB0859EEF21D81683F6B6561D8A3DD0DM5PR21MB0859namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: b66aed60-77e7-4669-1515-08d58651c880 X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Mar 2018 06:40:15.5540 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR21MB0156 Archived-At: Subject: [Suit] Call for adoption on architecture document X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Mar 2018 06:40:20 -0000 --_000_DM5PR21MB0859EEF21D81683F6B6561D8A3DD0DM5PR21MB0859namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Our first WG milestone (already overdue) is to: Adopt "Architecture" document as WG item. We had some good discussion on architecture during the webex interim meetin= g, and draft-moran-suit-architecture has subsequently been updated based on th= at discussion. Based on the interim meeting discussion on architecture, the chairs would l= ike to start a call for adoption on on draft-moran-suit-architecture. That is: is this document a = good _starting point_ for the WG architecture document. We realize that there are also one or two= other (much shorter) drafts from other individuals. As chairs, we believe that this one has had= the most discussion on it, has the most content, and had support during the interim meeting for starti= ng a call for adoption on. If needed, content from other drafts could be merged in, if we start from t= his document. If you believe that this document is not an acceptable starting point, plea= se state the rationale. This call for adoption concludes at the IETF 101 WG meeting in London. Dave --_000_DM5PR21MB0859EEF21D81683F6B6561D8A3DD0DM5PR21MB0859namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Our fir= st WG milestone (already overdue) is to:

Adopt "Architecture" document as = WG item.

 

We had some good discu= ssion on architecture during the webex interim meeting,

and dra= ft-moran-suit-architecture has subsequently been updated based on that disc= ussion.

&n= bsp;

Based o= n the interim meeting discussion on architecture, the chairs would like to = start a call for
adoption on on draft-mo= ran-suit-architecture.&= nbsp; That is: is this document a good _starting point_

for the= WG architecture document. We realize that there are also one or two other = (much shorter)

drafts = from other individuals.  As chairs, we believe that this one has had t= he most discussion on it,

has the= most content, and had support during the interim meeting for starting a ca= ll for adoption on.

If need= ed, content from other drafts could be merged in, if we start from this doc= ument.

&n= bsp;

If you = believe that this document is not an acceptable starting point, please stat= e the rationale.

&n= bsp;

This ca= ll for adoption concludes at the IETF 101 WG meeting in London.<= /span>

&n= bsp;

Dave

&n= bsp;

--_000_DM5PR21MB0859EEF21D81683F6B6561D8A3DD0DM5PR21MB0859namp_-- From nobody Sat Mar 10 15:43:54 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37BB612420B for ; Sat, 10 Mar 2018 15:43:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.911 X-Spam-Level: X-Spam-Status: No, score=-1.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c6b6DL4JJFcL for ; Sat, 10 Mar 2018 15:43:51 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 997BD12008A for ; Sat, 10 Mar 2018 15:43:51 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 2A62F20090 for ; Sat, 10 Mar 2018 18:52:13 -0500 (EST) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 4009580F63 for ; Sat, 10 Mar 2018 18:43:50 -0500 (EST) From: Michael Richardson To: "suit\@ietf.org" In-Reply-To: References: X-Mailer: MH-E 8.6; nmh 1.7-RC3; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Suit] Call for adoption on architecture document X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Mar 2018 23:43:53 -0000 --=-=-= Content-Type: text/plain I have read the architecture document. I believe that this is a great starting point. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlqkbbQACgkQgItw+93Q 3WWFKQf/cqghdXcVGDdiErkPvgud1UbQtAwFMXb/FrXuQylzBRkgvkIzXEJw7z9O RreZBwWLTA39q0NvBIasc+KZWgEbRzs1ECbaog9XsTJyplGizwevc6w2JZL0AP+i Ba7NFLWBjk11ccHPjvuVYDndiRSMDidZcIo4cb1jCHUwRuYnckEZzTuF3vMZwdut h5zjZ1lvD4BPKFnCJQxyYuWmf0T395gKudPBqnhPqYuD6uAS93lLvriEXmlBqxbw tg9TsqIgGcMN4xB8mQcY5ubb7UNc8D7ts3QsNizm5QOAhh96IGfaSHBAu9vYM135 Efre36mqcbfH00YJCTDBCyDZ+JriMA== =MX7l -----END PGP SIGNATURE----- --=-=-=-- From nobody Sun Mar 11 20:46:00 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7387126D3F for ; Sun, 11 Mar 2018 20:45:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.231 X-Spam-Level: X-Spam-Status: No, score=-4.231 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EafkXpMoR4Mi for ; Sun, 11 Mar 2018 20:45:58 -0700 (PDT) Received: from huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2BC66126CBF for ; Sun, 11 Mar 2018 20:45:58 -0700 (PDT) Received: from LHREML713-CAH.china.huawei.com (unknown [172.18.7.107]) by Forcepoint Email with ESMTP id DF680B1349EBE for ; Mon, 12 Mar 2018 03:45:53 +0000 (GMT) Received: from DGGEML401-HUB.china.huawei.com (10.3.17.32) by LHREML713-CAH.china.huawei.com (10.201.108.36) with Microsoft SMTP Server (TLS) id 14.3.382.0; Mon, 12 Mar 2018 03:45:55 +0000 Received: from DGGEML510-MBX.china.huawei.com ([169.254.2.73]) by DGGEML401-HUB.china.huawei.com ([fe80::89ed:853e:30a9:2a79%31]) with mapi id 14.03.0361.001; Mon, 12 Mar 2018 11:45:46 +0800 From: "Zhujintao (Julian)" To: "suit@ietf.org" Thread-Topic: New Version Notification for draft-zhu-suit-automatic-fu-arch-00.txt Thread-Index: AQHTtImFlwarKobmwUqMyYz2Ho5CwqPL/saw Date: Mon, 12 Mar 2018 03:45:46 +0000 Message-ID: References: <152025807142.14636.14268737391142133990.idtracker@ietfa.amsl.com> In-Reply-To: <152025807142.14636.14268737391142133990.idtracker@ietfa.amsl.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.146.38.66] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: Subject: [Suit] FW: New Version Notification for draft-zhu-suit-automatic-fu-arch-00.txt X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2018 03:46:00 -0000 SGkgYWxsLA0KDQpJIHN1Ym1pdHRlZCBhIGRyYWZ0IHRvIHRhbGsgYWJvdXQgImF2YWlsYWJpbGl0 eSIgYXNwZWN0IG9mIHNlY3VyaXR5IGluIHNlY3VyZSBmaXJtd2FyZSB1cGRhdGUgYXJjaGl0ZWN0 dXJlLg0KDQpZb3VyIGNvbW1lbnRzIGFyZSBhbHdheXMgd2VsY29tZWQgYW5kIGFwcHJlY2lhdGVk Lg0KDQpUaGFuayB5b3UhDQpKdWxpYW4NCg0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0K RnJvbTogaW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIFttYWlsdG86aW50ZXJuZXQtZHJhZnRzQGll dGYub3JnXSANClNlbnQ6IE1vbmRheSwgTWFyY2ggMDUsIDIwMTggOTo1NSBQTQ0KVG86IFpodWpp bnRhbyAoSnVsaWFuKSA8amludGFvLnpodUBodWF3ZWkuY29tPjsgWmh1amludGFvIChKdWxpYW4p IDxqaW50YW8uemh1QGh1YXdlaS5jb20+DQpTdWJqZWN0OiBOZXcgVmVyc2lvbiBOb3RpZmljYXRp b24gZm9yIGRyYWZ0LXpodS1zdWl0LWF1dG9tYXRpYy1mdS1hcmNoLTAwLnR4dA0KDQoNCkEgbmV3 IHZlcnNpb24gb2YgSS1ELCBkcmFmdC16aHUtc3VpdC1hdXRvbWF0aWMtZnUtYXJjaC0wMC50eHQN CmhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkgSmludGFvIFpodSBhbmQgcG9zdGVk IHRvIHRoZSBJRVRGIHJlcG9zaXRvcnkuDQoNCk5hbWU6CQlkcmFmdC16aHUtc3VpdC1hdXRvbWF0 aWMtZnUtYXJjaA0KUmV2aXNpb246CTAwDQpUaXRsZToJCUEgU2VjdXJlIGFuZCBBdXRvbWF0aWMg RmlybXdhcmUgVXBkYXRlIEFyY2hpdGVjdHVyZSBmb3IgSW9UIERldmljZXMNCkRvY3VtZW50IGRh dGU6CTIwMTgtMDMtMDUNCkdyb3VwOgkJSW5kaXZpZHVhbCBTdWJtaXNzaW9uDQpQYWdlczoJCTcN ClVSTDogICAgICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvZHJh ZnQtemh1LXN1aXQtYXV0b21hdGljLWZ1LWFyY2gtMDAudHh0DQpTdGF0dXM6ICAgICAgICAgaHR0 cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtemh1LXN1aXQtYXV0b21hdGljLWZ1 LWFyY2gvDQpIdG1saXplZDogICAgICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0 LXpodS1zdWl0LWF1dG9tYXRpYy1mdS1hcmNoLTAwDQpIdG1saXplZDogICAgICAgaHR0cHM6Ly9k YXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC16aHUtc3VpdC1hdXRvbWF0aWMtZnUt YXJjaC0wMA0KDQoNCkFic3RyYWN0Og0KICAgRmlybXdhcmUgdXBkYXRlIGlzIG9uZSBvZiB0aGUg a2V5IGZlYXR1cmVzIGZvciBhbGwgSW50ZXJuZXQgb2YNCiAgIFRoaW5ncyhJb1QpIERldmljZXMu ICBJbmNlbnRpdmVzIG9mIGZpcm13YXJlIHVwZGF0ZSBpcyB0byBmaXggYnVncywNCiAgIHVwZ3Jh ZGUgY29uZmlndXJhdGlvbnMsIGFkZCBuZXcgc2VydmljZXMgZnJvbSBjb25zdGFpbmVkIGRldmlj ZXMgdG8NCiAgIGNvbm5lY3RlZCB2ZWhpY2xlcy4gIFRoZSBJRVRGIFNVSVQgd29ya2luZyBncm91 cCBpcyBmb2N1c2luZyBvbg0KICAgZGVmaW5pbmcgYSBmaXJtd2FyZSB1cGRhdGUgc29sdXRpb24g dGhhdCB3aWxsIGJlIHVzYWJsZSBvbiBDbGFzcyAxDQogICBkZXZpY2VzIGFzIHdlbGwgYXMgbW9y ZSBjYXBhYmxlIGRldmljZXMgd2l0aCBleGlzdGluZyBtZWNoYW5pc21zLg0KICAgVGhpcyBkb2N1 bWVudCBwcm92aWRlcyBhbiBmaXJtd2FyZSB1cGRhdGUgYXJjaGl0ZWNodHVyZSwgdGhhdCBhaW1z IGF0DQogICBoZWxwaW5nIGJ1aWxkIGEgc2VjdXJlLCBhdXRvbWF0aWMgYW5kIGludGVyb3BlcmFi bGUgSW9UIGZpcm13YXJlDQogICB1cGRhdGUgbWVjaGFuaXNtLg0KDQogICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgDQoNCg0KUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBt aW51dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3VibWlzc2lvbiB1bnRpbCB0aGUgaHRtbGl6ZWQgdmVy c2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLg0KDQpUaGUgSUVU RiBTZWNyZXRhcmlhdA0KDQo= From nobody Sun Mar 11 22:02:50 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA0C3126DCA for ; Sun, 11 Mar 2018 22:02:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wB2ofwceolg1 for ; Sun, 11 Mar 2018 22:02:46 -0700 (PDT) Received: from gcc01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0112.outbound.protection.outlook.com [23.103.200.112]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E448B126C0F for ; Sun, 11 Mar 2018 22:02:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=4cpkNeHnV9IesByZKoQvCiwELTow3qMAgiiBlzA29wA=; b=Vb6cD71VK/5cjui1AWXZG2f26Ei5sQrh/HxZxlURdlN7Fq8AFECCkRMSrW5iiZpDrFDcHasLUfklWKpVSg8u1oQzlr/aeZfbVv+LMjwvfxjENh+Ne4lOjlf4fvYKW9NdThacQCIP7qoO0SKrnsvdo9MLILLpTChBOUiOJIWzNx8= Received: from BL0PR0901MB2306.namprd09.prod.outlook.com (52.132.18.148) by BL0PR0901MB2305.namprd09.prod.outlook.com (52.132.18.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.567.14; Mon, 12 Mar 2018 05:02:44 +0000 Received: from BL0PR0901MB2306.namprd09.prod.outlook.com ([fe80::9aa:3aa4:170a:7073]) by BL0PR0901MB2306.namprd09.prod.outlook.com ([fe80::9aa:3aa4:170a:7073%13]) with mapi id 15.20.0567.018; Mon, 12 Mar 2018 05:02:44 +0000 From: "Waltermire, David A. (Fed)" To: "suit@ietf.org" Thread-Topic: Agenda requests for IETF 101 Thread-Index: AQHTub9aQb7CtkokEEaYz+kiicmNXQ== Date: Mon, 12 Mar 2018 05:02:43 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov; x-originating-ip: [2600:1003:b002:3d93:db9b:16f0:af50:33ce] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BL0PR0901MB2305; 6:jayrK8meoq8+Id7c/SyHlGbf5mzO31BqE58H6pt4OnEBPnf28PcmrETDR0FkrRnkYhBWOGw/CUklq/UzUiAXtDwZpf2krp05m7Q7v14ujW9AixsNY43LeU/1MDtDGqRA76pTKwFbh20gHIcTwvfeOHWcEU5c0Cxi/RM15I5nHEJv9cA+bt+T8I58yDFppY697ApiIZ1ykGLCYv0PnHK09TxlU8T8BxQamQ97/ETa6x4brWgoJTQxaPYvilTBgyfBXzT1hCS4fre1cQMLBp9AulpTqHU0sKYiAsEeJCn35NgI/Rtj/yfLR22pCXmU3qZJIdZ0NGftDXHwrkMkccjfOPtfVUDpXKhbr0/AWpRvERCy7pT6+xW35xzr9MOmC/lC; 5:C+OyAvCgoWptgtsmoUVE4lMeysuDCltSaxQ3wAVruEMu0yUxu1MWD48JN3DbeOa3Ba7d5kHNlVWAq5TMvm3dsApLV1uYglFm3utpZ2S5Mi+6B9C0Hd9A043aBSANJ0anByLhewemI1ur0rCJtz3tkxsjwttD3AyCIQ/uF3TtjvY=; 24:ziR3Ea+nXWC2RPa6lmIS0Pv72FRAciob5D6WTZQAxdxzaHnwynXQoIhofScFoz2qN/9GBL4nPpvz5AI4Jz/jwEE2s38O4XNBK/jliuNGRhg=; 7:/mlZuGBv3rd8lMdPoaTdhWeiYRZpLogTsoQuYYN0baHVAMhU7Nh2sw1F6c5rpQFbbRfK7q37/55r5Pm4G6Lt1r6CBeHSqeT0PC5vJAZo5OzDZ+r+7YLyc3YfOp2vZLeyST2Nvmk8cmuu3R5NTIhBbI1n2qHapZF+U1jP6DZgYu1z3Yyv0+f7XKwVFifbqtpCjO6Xa8QTj4Jvefd8lla1wrGjEbmvP2LvLLVbER9PVGzLDN4FDie03/tD9/BT9zCp x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: ee114893-6061-4ea4-1c15-08d587d67d90 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BL0PR0901MB2305; x-ms-traffictypediagnostic: BL0PR0901MB2305: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(10201501046)(3231220)(944501244)(52105095)(6055026)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123560045)(20161123558120)(6072148)(201708071742011); SRVR:BL0PR0901MB2305; BCL:0; PCL:0; RULEID:; SRVR:BL0PR0901MB2305; x-forefront-prvs: 06098A2863 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(39850400004)(396003)(346002)(39380400002)(376002)(189003)(199004)(33896004)(105586002)(68736007)(53936002)(2351001)(106356001)(5250100002)(2501003)(54896002)(316002)(6486002)(6512007)(9686003)(5640700003)(6436002)(51650200002)(63666004)(6116002)(99286004)(3280700002)(478600001)(2906002)(95246002)(8936002)(7736002)(14454004)(1730700003)(25786009)(46003)(81156014)(8676002)(186003)(6506007)(102836004)(86362001)(305945005)(6916009)(81166006)(5660300001)(2900100001)(97736004)(3660700001)(14943795004); DIR:OUT; SFP:1102; SCL:1; SRVR:BL0PR0901MB2305; H:BL0PR0901MB2306.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-microsoft-antispam-message-info: Fv6YTNhnQysuVJqM7slAkF83aHoWKctoumz3m34Vbrk1oECqA0XPdmwPm+967HyUNWhjyOeLdmH29Lmbciy4T20rVDl7Wm4lf5GJNArl7Klb0sVm5jRAcN8W5Pbe8Ad0Od5Gk9youBVCxCVFONOe8qEL7eEcbUpdsyhaK0roewPx14My2beZuRdICLJ+7kp9I63iY8o4qjcFMQjz46qljowYTklyj22knj6m2K/5VnmA3mrGtQm0m5feExF30O2k837DLe8qnR22Aj2377G14WrnCEuyZe6ylOzSiR+1WZJarJ42jZYGM2QngLjxZYj55i2m4f0Bgxp7F8yU09TSow== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_lnj7icnb56l17os7rmf4abp01520830962757emailandroidcom_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: ee114893-6061-4ea4-1c15-08d587d67d90 X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Mar 2018 05:02:43.8859 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR0901MB2305 Archived-At: Subject: [Suit] Agenda requests for IETF 101 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2018 05:02:48 -0000 --_000_lnj7icnb56l17os7rmf4abp01520830962757emailandroidcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UGxlYXNlIHNlbmQgeW91ciByZXF1ZXN0cyBmb3IgdGltZSBvbiB0aGUgU1VJVCBXRyBhZ2VuZGEg Zm9yIElFVEYgMTAxIGFzIHNvb24gYXMgcG9zc2libGUuIFdlIHdpbGwgYWxsb2NhdGUgdGltZSBm b3IgYXJjaGl0ZWN0dXJlIGFuZCBtYW5pZmVzdCAgZGlzY3Vzc2lvbiBhcyBhIGhpZ2hlciBwcmlv cml0eS4gUGxlYXNlIGFsc28gaW5kaWNhdGUgaWYgeW91IG5lZWQgcmVtb3RlIHByZXNlbnRhdGlv biBjYXBhYmlsaXR5LiBQbGVhc2UgYWxzbyBrZWVwIGluIG1pbmQgdGhhdCB5b3Ugd2lsbCBuZWVk IHRvIHNlbmQgeW91ciBzbGlkZXMgYnkgQ29CIFNhdHVyZGF5LCBNYXJjaCAxN3RoIHRvIGVuc3Vy ZSBhIHNwZWFraW5nIHNsb3QuDQoNClRoYW5rcywNClRoZSBTVUlUIENoYWlycw0K --_000_lnj7icnb56l17os7rmf4abp01520830962757emailandroidcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5Pg0KUGxlYXNlIHNlbmQg eW91ciByZXF1ZXN0cyBmb3IgdGltZSBvbiB0aGUgU1VJVCBXRyBhZ2VuZGEgZm9yIElFVEYgMTAx IGFzIHNvb24gYXMgcG9zc2libGUuIFdlIHdpbGwgYWxsb2NhdGUgdGltZSBmb3IgYXJjaGl0ZWN0 dXJlIGFuZCBtYW5pZmVzdCZuYnNwOyBkaXNjdXNzaW9uIGFzIGEgaGlnaGVyIHByaW9yaXR5LiBQ bGVhc2UgYWxzbyBpbmRpY2F0ZSBpZiB5b3UgbmVlZCByZW1vdGUgcHJlc2VudGF0aW9uIGNhcGFi aWxpdHkuIFBsZWFzZSBhbHNvIGtlZXANCiBpbiBtaW5kIHRoYXQgeW91IHdpbGwgbmVlZCB0byBz ZW5kIHlvdXIgc2xpZGVzIGJ5IENvQiBTYXR1cmRheSwgTWFyY2ggMTd0aCB0byBlbnN1cmUgYSBz cGVha2luZyBzbG90Ljxicj4NCjxicj4NClRoYW5rcyw8YnI+DQpUaGUgU1VJVCBDaGFpcnMNCjwv Ym9keT4NCjwvaHRtbD4NCg== --_000_lnj7icnb56l17os7rmf4abp01520830962757emailandroidcom_-- From nobody Mon Mar 12 05:55:21 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F58E127342 for ; Mon, 12 Mar 2018 05:55:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.911 X-Spam-Level: X-Spam-Status: No, score=-2.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H5=-1, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R4mKFiCS4dlS for ; Mon, 12 Mar 2018 05:55:17 -0700 (PDT) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20044.outbound.protection.outlook.com [40.107.2.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 387DA124B0A for ; Mon, 12 Mar 2018 05:55:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Q4MwMavlPqyRTsrMzIdmiA67iIHjeva2Gcfa8vo5WFc=; b=J8rZo6PDwz8iPckZ7ki9re5fEeSn0gx+Uf0sciDu5oVEBVlNGRx6x7j2TQDXsaGZAGPp1BqTjLNzyKZvl4nWUBQHGgDs+YR61dv/RM7MUM2WvDiUfXh1Kl+vooCUhC3dJck8aamd1nFSdTu3fXimuFzACWI2PzcjzOP5/S9ygEo= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1518.eurprd08.prod.outlook.com (10.167.210.144) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.548.13; Mon, 12 Mar 2018 12:55:14 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::783f:d09c:fea6:f83d%17]) with mapi id 15.20.0548.021; Mon, 12 Mar 2018 12:55:14 +0000 From: Hannes Tschofenig To: "suit@ietf.org" Thread-Topic: =?Windows-1252?Q?Working_Paper_about_=93Updating_firmware_of_embedded_sys?= =?Windows-1252?Q?tems_in_the_Internet_of_Things=94?= Thread-Index: AdO6AT88N33p7gxmQvGPsGy05PtnlQ== Date: Mon, 12 Mar 2018 12:55:14 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [156.67.194.210] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1518; 7:9kLcBJCPMfJyrp7aTIWti15nzC+x8ziMUGpfBmtG+HISRAeWYPvHCsBbijzfts4G2QUtS+Ytz5E+kgKg0sIVlOSFTBoG7gVNmZSYOXOPTX5uw0vheBR86C07Me0ZzrJhWhxw93+1Axzzp/XiiJuZWuiQUzHGisNHStNZlKHJzkHxGKRsyCPpxvvBW4GM1pJTZYT6yIFAxSvfWjkolsLDWdQQtrb6RJNqqA1CcXQH5b4FvsH5Iq5N6kdNCLLrAULg x-ms-exchange-antispam-srfa-diagnostics: SSOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 9dc1d402-38e8-4b0d-3d4d-08d588187fb1 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1518; x-ms-traffictypediagnostic: VI1PR0801MB1518: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(93006095)(93001095)(10201501046)(3231220)(944501244)(52105095)(6055026)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123560045)(20161123558120)(6072148)(201708071742011); SRVR:VI1PR0801MB1518; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1518; x-forefront-prvs: 06098A2863 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(376002)(39380400002)(396003)(366004)(39860400002)(189003)(199004)(53754006)(40434004)(53936002)(72206003)(66066001)(105586002)(106356001)(6916009)(478600001)(7736002)(305945005)(5250100002)(97736004)(5890100001)(74316002)(2501003)(5660300001)(2351001)(966005)(3660700001)(86362001)(186003)(8936002)(3280700002)(25786009)(2900100001)(6116002)(3846002)(7696005)(5640700003)(33656002)(68736007)(14454004)(55016002)(2906002)(102836004)(26005)(6506007)(59450400001)(99286004)(81156014)(81166006)(9686003)(6306002)(1730700003)(316002)(6436002); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1518; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: YLcczfgZocrQsQEXDkopsI52b6sO6xZT9gd0NnAL97dWL3v/YHF/s3yFjWTbRD19Jhk5AGTr6Ne8tUnzqFGiOrpwIKci4o6Bd2Oe7t5fpxEDixMmMb4uQCvxCByM34Dve2PxIVXHx2gIiXZpq2xvjTwTxaT+ZS5PdK2BqtvTBcgyZPqjEzsOvTpmaEHtt77wIIZDaT4MOi7ZJSK+xN8QfM+CGVSFjL7fKfrBEUQODoBzhw6PxNOltvkqILlg5HZlQGwGYdve9eEiWmVE7gNoiKpfWXdZQtCHFBW4SW5Yfq7ew07N39BSKD7AZCh3wSFWUbcXQ0Gcj0VEToK/qa08Gw== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9dc1d402-38e8-4b0d-3d4d-08d588187fb1 X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Mar 2018 12:55:14.4614 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1518 Archived-At: Subject: [Suit] =?windows-1252?q?Working_Paper_about_=93Updating_firmware_?= =?windows-1252?q?of_embedded_systems_in_the_Internet_of_Things=94?= X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2018 12:55:19 -0000 Hi all, you may find it interesting that the Berlin Group* has published a working = paper with the title =93Updating firmware of embedded systems in the Intern= et of Things=94: https://www.datenschutz-berlin.de/pdf/publikationen/working-paper/2017/2017= -IWGDPT_Working_Paper_Firmware_Updates-en.pdf The content is relevant to the work in this group. Ciao Hannes (*) A short description of the Berlin Group can be found at https://www.dat= enschutz-berlin.de/gremien.html#BerlinGroup IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. From nobody Tue Mar 13 11:24:12 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55D7E1205F0 for ; Tue, 13 Mar 2018 11:24:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=opensourcefoundries-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YUkn1wVYPce9 for ; Tue, 13 Mar 2018 11:24:09 -0700 (PDT) Received: from mail-wr0-x229.google.com (mail-wr0-x229.google.com [IPv6:2a00:1450:400c:c0c::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4907E12D77E for ; Tue, 13 Mar 2018 11:24:08 -0700 (PDT) Received: by mail-wr0-x229.google.com with SMTP id h2so1552371wre.12 for ; Tue, 13 Mar 2018 11:24:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=opensourcefoundries-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=E7maheRmRGY+KrnbHmHqbzY9fInf8uWvQ8/6+/YJ8wo=; b=rShKXh3euSwqZGYrcW5lN59dUyyHxL4+x8Yf6OtefoaxOE3HtPDvhDQBvL5taHh/j0 2+WnOlo3DgtsufXyvcUmnHf4nFCAiofeoxtPw0i+knTnYUmFUZZO/pqqsLF39iQ0J30/ Ag0IkAkQLnNckIv5KKJ6CJePgW+FEBzixUAuxCh/9JifsVKdSmObFkiLJh0c9kCTG5l3 iAO+mjyfjkWOQ9Xpo3+dkW3+b/5BhVDk74g2JFciGAAwmmZZs+Its2JYYFPfGq7jZse9 Yt62VcGWTQZsedOOCYP7Ow0D5bg+7DtmpaoFnvqEOl8JJlgslaJ7t4+xXqd1bIbZpGew hBZQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=E7maheRmRGY+KrnbHmHqbzY9fInf8uWvQ8/6+/YJ8wo=; b=CZn2GRr0lyGVcJRuraNLYeSWDReqfzhjrc9q54ATdEGo6BnvOacTWF96PFhHiyMyy5 G1p2/kICh6QNGipVvmw+DL48MdUyJsUnbZgfVTpa/C6h50Hl7EF+pThOdVI6ngYpIr9D 4Zj0xvLOSKo2K/7alrnTkcewBbOhFPuvxXzphxm3sBhOjz7SYOpMjooXOYJ92r3OZmWw ikno6npdvxX1zeKaIU04xE/mxaU17KEYvVuvTOcKPAVHFJnQHMpDGF9YX5l15RU6OD8z ip4n01q7NOZqOJvfxhsBRHwq9X+9a0UNeRnFA7ggXLICwwmo7g0JYp0QVp+SZbHFdPYd Y+xQ== X-Gm-Message-State: AElRT7FLLt32bmgs61L2IG6gtResIiBHbaBb7hTRvlkMAXkssQ5EKuUY 9ANC8h2vJP20esMOztBc49U2t1prCImINwmGq1dm7w== X-Google-Smtp-Source: AG47ELuUk+B6ZqDmiOHT1MMBdxoJQ2SoYp6xX7w7NjXkr+sDd63dgHxpV/RXdE2z/s6J32LnCCZn3Ybln9yehDGzXNM= X-Received: by 10.28.35.14 with SMTP id j14mr1501551wmj.43.1520965446406; Tue, 13 Mar 2018 11:24:06 -0700 (PDT) MIME-Version: 1.0 Received: by 10.223.181.129 with HTTP; Tue, 13 Mar 2018 11:24:05 -0700 (PDT) Received: by 10.223.181.129 with HTTP; Tue, 13 Mar 2018 11:24:05 -0700 (PDT) In-Reply-To: References: From: Marti Bolivar Date: Tue, 13 Mar 2018 11:24:05 -0700 Message-ID: To: Dave Thaler Cc: suit@ietf.org Content-Type: multipart/alternative; boundary="001a113ead28262d7c05674f5dbf" Archived-At: Subject: Re: [Suit] Call for adoption on architecture document X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Mar 2018 18:24:11 -0000 --001a113ead28262d7c05674f5dbf Content-Type: text/plain; charset="UTF-8" I have read the architecture document, and believe it is a good starting point. Thanks, Marti On Mar 9, 2018 10:40 PM, "Dave Thaler" wrote: > Our first WG milestone (already overdue) is to: > > Adopt "Architecture" document as WG item. > > > > We had some good discussion on architecture during the webex interim > meeting, > > and draft-moran-suit-architecture has subsequently been updated based on > that discussion. > > > > Based on the interim meeting discussion on architecture, the chairs would > like to start a call for > adoption on on draft-moran-suit-architecture. That is: is this document > a good _*starting point*_ > > for the WG architecture document. We realize that there are also one or > two other (much shorter) > > drafts from other individuals. As chairs, we believe that this one has > had the most discussion on it, > > has the most content, and had support during the interim meeting for > starting a call for adoption on. > > If needed, content from other drafts could be merged in, if we start from > this document. > > > > If you believe that this document is not an acceptable starting point, > please state the rationale. > > > > This call for adoption concludes at the IETF 101 WG meeting in London. > > > > Dave > > > > _______________________________________________ > Suit mailing list > Suit@ietf.org > https://www.ietf.org/mailman/listinfo/suit > > --001a113ead28262d7c05674f5dbf Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I have read the architecture document, = and believe it is a good starting point.

<= div dir=3D"auto">Thanks,
Marti

On Mar 9, 2018 10:40 PM, &q= uot;Dave Thaler" <dthaler@= microsoft.com> wrote:

Our fir= st WG milestone (already overdue) is to:

Adopt "Architecture" document as = WG item.<= /span>

=C2=A0

We had some good discu= ssion on architecture during the webex interim meeting,=

and dra= ft-moran-suit-architecture has subsequently been updated based on that disc= ussion.

= =C2=A0

Based o= n the interim meeting discussion on architecture, the chairs would like to = start a call for
adoption on on draft-mo= ran-suit-architecture.<= wbr>=C2=A0 That is: is this document a good _starting point_

for the= WG architecture document. We realize that there are also one or two other = (much shorter)

drafts = from other individuals.=C2=A0 As chairs, we believe that this one has had t= he most discussion on it,

has the= most content, and had support during the interim meeting for starting a ca= ll for adoption on.

If need= ed, content from other drafts could be merged in, if we start from this doc= ument.

= =C2=A0

If you = believe that this document is not an acceptable starting point, please stat= e the rationale.

= =C2=A0

This ca= ll for adoption concludes at the IETF 101 WG meeting in London.

= =C2=A0

Dave=

= =C2=A0


_______________________________________________
Suit mailing list
Suit@ietf.org
https://www.ietf.org/mailman/= listinfo/suit

--001a113ead28262d7c05674f5dbf-- From nobody Wed Mar 14 06:48:16 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19C1512D778 for ; Wed, 14 Mar 2018 06:48:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.41 X-Spam-Level: X-Spam-Status: No, score=-2.41 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=infineon.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jK56JBDKBrpj for ; Wed, 14 Mar 2018 06:48:14 -0700 (PDT) Received: from smtp2.infineon.com (smtp2.infineon.com [IPv6:2a00:18f0:1e00:4::4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7961F12D775 for ; Wed, 14 Mar 2018 06:48:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=infineon.com; i=@infineon.com; q=dns/txt; s=IFXMAIL; t=1521035293; x=1552571293; h=from:to:subject:date:message-id:references:in-reply-to: mime-version; bh=mwWELuFV8jnfPy8w04Q3tV89bRO3KPAtJ12sR2NwYkc=; b=lpa5W12b+mDBOtbye3qQKZHsyXes5AbTqQCkrOJ85d25ZwBwWIKZJQ2v IXwoWy/gDHXy+sX5JARVqqhqTfG8KOh3PdDYNTuNX7TCpPEYID4+R+opC JZT19oq1eGRYpVqJ0/gyS1KZd20wl5xBnulaKkPUkKjVMX7c91xvYlCZ7 4=; X-SBRS: None Received: from unknown (HELO mucxv003.muc.infineon.com) ([172.23.11.20]) by smtp2.infineon.com with ESMTP/TLS/AES256-GCM-SHA384; 14 Mar 2018 14:48:11 +0100 Received: from MUCSE707.infineon.com (MUCSE707.infineon.com [172.23.7.81]) by mucxv003.muc.infineon.com (Postfix) with ESMTPS; Wed, 14 Mar 2018 14:48:11 +0100 (CET) Received: from MUCSE702.infineon.com (172.23.7.91) by MUCSE707.infineon.com (172.23.7.81) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.1415.2; Wed, 14 Mar 2018 14:48:01 +0100 Received: from MUCSE702.infineon.com ([172.23.106.22]) by MUCSE702.infineon.com ([172.23.106.22]) with mapi id 15.01.1415.003; Wed, 14 Mar 2018 14:48:01 +0100 From: To: , Thread-Topic: Call for adoption on architecture document Thread-Index: AdO4OiIvYK5j8Oe7RD2Y44XV3TVlXADYBtMA Date: Wed, 14 Mar 2018 13:48:01 +0000 Message-ID: References: In-Reply-To: Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.23.8.247] Content-Type: multipart/alternative; boundary="_000_eabd8ad4c1184cd5af7f96de1eeaa105infineoncom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Suit] Call for adoption on architecture document X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Mar 2018 13:48:15 -0000 --_000_eabd8ad4c1184cd5af7f96de1eeaa105infineoncom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Dave, All I believe the architecture document draft-moran-suit-architecture is a goo= d starting point. Thanks, Markus --_000_eabd8ad4c1184cd5af7f96de1eeaa105infineoncom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Dave, All

 

I believe the architec= ture document  dra= ft-moran-suit-architecture is a good starting point.

 

Thanks,

Markus

--_000_eabd8ad4c1184cd5af7f96de1eeaa105infineoncom_-- From nobody Sat Mar 17 14:02:04 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45E0512D86F for ; Sat, 17 Mar 2018 14:02:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.019 X-Spam-Level: X-Spam-Status: No, score=-2.019 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nN3vWR85n0Hs for ; Sat, 17 Mar 2018 14:02:00 -0700 (PDT) Received: from NAM01-BY2-obe.outbound.protection.outlook.com (mail-by2nam01on0131.outbound.protection.outlook.com [104.47.34.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 07A73124D37 for ; Sat, 17 Mar 2018 14:01:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=XpB9elTteHMyyN7bC/i2n65b09GBK4erSz3l9Tgkq+M=; b=iLsreLpBiBaCI4ikUApYLT8dGFqpCXj7yFypXs4VSImXSQpunazVnyGh5KJluByD1kimoggjz4b3YW1OFxsIaC9qgimSiTFiHshtpX+H1rC9jVpv3Z4siJmhz8IPtrd4mAi/KWwKXTXvwPQ+/9RA0H51sM83E4aIUtllqYSg3HU= Received: from CY4PR21MB0774.namprd21.prod.outlook.com (10.173.192.20) by CY4PR21MB0471.namprd21.prod.outlook.com (10.172.121.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.631.0; Sat, 17 Mar 2018 21:01:58 +0000 Received: from CY4PR21MB0774.namprd21.prod.outlook.com ([fe80::41f5:f274:8793:f7b1]) by CY4PR21MB0774.namprd21.prod.outlook.com ([fe80::41f5:f274:8793:f7b1%8]) with mapi id 15.20.0631.002; Sat, 17 Mar 2018 21:01:58 +0000 From: Dave Thaler To: "suit@ietf.org" Thread-Topic: SUIT interim meeting minutes posted Thread-Index: AdO+MvMCuHj6K831RYuOCpfuVWhZ/Q== Date: Sat, 17 Mar 2018 21:01:58 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-03-17T21:01:57.6307080Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [31.133.149.159] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4PR21MB0471; 7:U3lpWfMWSgbXVc2lUQX9gSTJ44O9h2wLxflQe3A6NAx260DCIkq+pmpEiBauSe5CZAqe0k19kJMd3n2fsvJc2HhTpZcshVwSFu2irTSOIGu+r7jRahiZ2zY9RqeZUEwedgY+dYk1f4X9U2d9fOJXuwX8YV5kyFMv8NWEtxMJ5onvkz7pwLvzCs2bp7F3EgeiPuke6TTfdCa6AKucD5s7Z7Vl1Czzzxk3NgRndF/iD5cdz4YJP8YtJjkX/1Mj3XNJ; 20:dnbyH1sOn9FWHxymcdb/XtGimsaVnd4S7DSlOL6TtqwYRIEvuzL4l6mqWLyuJSXRkggpYMvirKtPDMQB03HSyI7yJy86wEh+8G5Yjvbbmv2pI8xEYA1uo3TN2W6OeHUadTcccYBkVycmSvikxZ8YfQSN3Vinvv3dY8tG97RfeeE= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 59780e1a-fd4d-4faf-de70-08d58c4a52d1 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7193020); SRVR:CY4PR21MB0471; x-ms-traffictypediagnostic: CY4PR21MB0471: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(120809045254105)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040522)(2401047)(8121501046)(5005006)(3231221)(944501300)(52105095)(10201501046)(93006095)(93001095)(3002001)(6055026)(61426038)(61427038)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123560045)(20161123564045)(20161123558120)(6072148)(201708071742011); SRVR:CY4PR21MB0471; BCL:0; PCL:0; RULEID:; SRVR:CY4PR21MB0471; x-forefront-prvs: 06141B80DC x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(366004)(39380400002)(376002)(346002)(39860400002)(189003)(199004)(10090500001)(8936002)(5630700001)(966005)(606006)(3660700001)(86362001)(8990500004)(14454004)(2906002)(68736007)(3280700002)(25786009)(1730700003)(81156014)(81166006)(6916009)(10290500003)(8676002)(66066001)(26005)(186003)(478600001)(53936002)(22452003)(7696005)(5640700003)(7736002)(6436002)(102836004)(6306002)(54896002)(9686003)(55016002)(236005)(558084003)(6506007)(5660300001)(106356001)(2351001)(2900100001)(74316002)(105586002)(97736004)(790700001)(86612001)(6116002)(33656002)(3846002)(5250100002)(316002)(99286004)(2501003); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR21MB0471; H:CY4PR21MB0774.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: FvFPMql27Fm8jX8xfWnQlkMCjY0y36NpvMZTPAe4DpJ2gln+cD2rs0dYwrhdkyfkjXteGaW9urbbieI5lHSFyvRlBqeohNngq524Mhmjo5IYxs5mhucRI6aHiXRBpKdED4pdP43UcVxfshppGkDkshxastii/ia596z+rOKa6PBywoXTrrXWABkSSbKIWLPd8ae/Vn3FJ5/s2PNPdbyV6WIxyHOu/0aCnRHxXFaJWvSGDiiBe+QhuRvcFb04R/mGx7KVMtKS/tY3lsrMThqiYJ/9YDgIE6J2+9Ma+q76VHdilVVZeATbGHQ5tubjxJ9GqmIJVvJGIFgGV8cVE7urUg== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_CY4PR21MB0774A7DFB217D36DD282712DA3D60CY4PR21MB0774namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 59780e1a-fd4d-4faf-de70-08d58c4a52d1 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Mar 2018 21:01:58.6136 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR21MB0471 Archived-At: Subject: [Suit] SUIT interim meeting minutes posted X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Mar 2018 21:02:02 -0000 --_000_CY4PR21MB0774A7DFB217D36DD282712DA3D60CY4PR21MB0774namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable The meeting notes are now posted at the interim meeting site: https://datatracker.ietf.org/meeting/interim-2018-suit-01/session/suit If there are any additions or corrections to the minutes, send them to the = chairs. Thanks, Dave --_000_CY4PR21MB0774A7DFB217D36DD282712DA3D60CY4PR21MB0774namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

The meeting notes are now posted at the interim meet= ing site:

https://datatracker.ietf.org/meeting/interim= -2018-suit-01/session/suit

 

If there are any additions or corrections to the min= utes, send them to the chairs.

 

Thanks,

Dave

--_000_CY4PR21MB0774A7DFB217D36DD282712DA3D60CY4PR21MB0774namp_-- From nobody Sun Mar 18 05:24:08 2018 Return-Path: X-Original-To: suit@ietf.org Delivered-To: suit@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CBDF5128896; Sun, 18 Mar 2018 05:24:06 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Secretariat To: , , X-Test-IDTracker: no X-IETF-IDTracker: 6.75.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <152137584683.15912.3759202444684113289.idtracker@ietfa.amsl.com> Date: Sun, 18 Mar 2018 05:24:06 -0700 Archived-At: Subject: [Suit] The SUIT WG has placed draft-moran-suit-architecture in state "Candidate for WG Adoption" X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Mar 2018 12:24:07 -0000 The SUIT WG has placed draft-moran-suit-architecture in state Candidate for WG Adoption (entered by David Waltermire) The document was previously in state Call For Adoption By WG Issued The document is available at https://datatracker.ietf.org/doc/draft-moran-suit-architecture/ Comment: Correcting the associated WG. From nobody Sun Mar 18 09:04:12 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27D91128954 for ; Sun, 18 Mar 2018 09:04:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.32 X-Spam-Level: X-Spam-Status: No, score=-4.32 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aXEJwv05vzhC for ; Sun, 18 Mar 2018 09:04:08 -0700 (PDT) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8C62F127286 for ; Sun, 18 Mar 2018 09:04:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1521389046; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=jnO3A+5DyKDmULAkIS59SEYxxpBZRk50WBnpKRGM6UA=; b=XXwMFcus6y87Lm7U2M0qeA+2djPGM+q4G0E9ks4IKSrGENGv0HPO08WMzbgQiBil 2fUkQbawogbBnGHwXGgh5ygmzBhBJjn9b59km5P9888rACK2DbMpZHFFlVQFNyZb AhmWak+Um7HUosmfM4MbgP6LR/EOOSg4x2Qt9HAncYQ=; X-AuditID: c1b4fb2d-499ff70000005540-4d-5aae8df6d032 Received: from ESESSHC008.ericsson.se (Unknown_Domain [153.88.183.42]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 44.05.21824.6FD8EAA5; Sun, 18 Mar 2018 17:04:06 +0100 (CET) Received: from ESESSMB107.ericsson.se ([169.254.7.151]) by ESESSHC008.ericsson.se ([153.88.183.42]) with mapi id 14.03.0382.000; Sun, 18 Mar 2018 17:04:05 +0100 From: =?utf-8?B?SmFpbWUgSmltw6luZXo=?= To: "suit@ietf.org" Thread-Topic: SUIT Hackathon notes Thread-Index: AdO+0r1FKGLxqqE6TluDP10aJxh/lQ== Date: Sun, 18 Mar 2018 16:04:05 +0000 Message-ID: <99EF646B-4865-40B4-9C32-7746CDF4BD78@ericsson.com> Accept-Language: en-US Content-Language: es-ES X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: multipart/alternative; boundary="_000_99EF646B486540B49C327746CDF4BD78ericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrGLMWRmVeSWpSXmKPExsUyM2K7lu633nVRBg+v6ljMPHqb0YHRY8mS n0wBjFFcNimpOZllqUX6dglcGfc+HmYsmM5Vsfx1E3MD4z3OLkZODgkBE4nNizYzdTFycQgJ HGaUmLn6CjOEs4RRYv30PhaQKjYBZ4lPzxrZQWwRAWWJl7MfM4PYwgJyEtMuXYGLf7g0hQnC 1pOYcXszWJxFQFXi/M2FYPW8AvYSf9ZPArMZBcQkvp9aA1bPLCAucW9KDyvERQISS/acZ4aw RSVePv7HClGTLHHxcjfUHEGJkzOfsExgFJiFpH0WkrJZSMpmMXIAxTUl1u/ShyhRlJjS/ZAd wtaQaJ0zF8q2lth9rYMNWc0CRo5VjKLFqcXFuelGxnqpRZnJxcX5eXp5qSWbGIGhf3DLb90d jKtfOx5iFOBgVOLhlapfFyXEmlhWXJl7iFGCg1lJhHdhC1CINyWxsiq1KD++qDQntfgQozQH i5I470lP3ighgfTEktTs1NSC1CKYLBMHp1QDo227nUncid2GYofuv7nGa9RS03tgaYCReqCf +e9vRRcT2ly4p3wNSJ4Yc2Sq+HZ15ncTNjrJ8m27svHssxteq/IOPdr5bp4y+8w74sWxbxw6 uA8n3Ji2/+C61QfNhRs38z+odDLvWSi7TfjhzKSHFY03mKRO5t1fqcThbaK/9IDJpNV2rC1P bJRYijMSDbWYi4oTAfRo8oZ5AgAA Archived-At: Subject: [Suit] SUIT Hackathon notes X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Mar 2018 16:04:10 -0000 --_000_99EF646B486540B49C327746CDF4BD78ericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCkkgd291bGQgbGlrZSB0byBzaGFyZSB3aXRoIHRoZSBncm91cCBzb21lIG9mIHRoZSBu b3RlcyB3ZSB0b29rIGR1cmluZyB0aGUgSUVURiAxMDEgSGFja2F0aG9uLg0KDQpodHRwczovL2dp c3QuZ2l0aHViLmNvbS9qYWltZWppbS8zYWE5YzZlODVlODJhMzUzYzlmYTkwNzk0Yzg1NmQ4OQ0K DQpDaWFvIQ0K --_000_99EF646B486540B49C327746CDF4BD78ericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <72AC9F50274E8E41B9F40FE74064BFA4@ericsson.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IGRpcj0iYXV0byI+DQpI aSwNCjxkaXY+PC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5JIHdvdWxkIGxpa2UgdG8g c2hhcmUgd2l0aCB0aGUgZ3JvdXAgc29tZSBvZiB0aGUgbm90ZXMgd2UgdG9vayBkdXJpbmcgdGhl IElFVEYgMTAxIEhhY2thdGhvbi48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PjxhIGhy ZWY9Imh0dHBzOi8vZ2lzdC5naXRodWIuY29tL2phaW1lamltLzNhYTljNmU4NWU4MmEzNTNjOWZh OTA3OTRjODU2ZDg5Ij5odHRwczovL2dpc3QuZ2l0aHViLmNvbS9qYWltZWppbS8zYWE5YzZlODVl ODJhMzUzYzlmYTkwNzk0Yzg1NmQ4OTwvYT48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2 PkNpYW8hPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_99EF646B486540B49C327746CDF4BD78ericssoncom_-- From nobody Sun Mar 18 13:23:11 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4105312AF84 for ; Sun, 18 Mar 2018 13:23:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vC9ol-uEAZHl for ; Sun, 18 Mar 2018 13:23:08 -0700 (PDT) Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on0713.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe48::713]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F18D4127876 for ; Sun, 18 Mar 2018 13:23:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=BzYATXLZ4PyMBGHOaK5bFZfhVPDEOvTFuy2WWztdgys=; b=Q7dZNz5hybS04fD8AsDW9Gizsay37zBE4k+tRd9H/TbGZALxrdvX6ssOBkesJdDsf0EEzRRPd4mkydD1IzqnzbwKGH9XxDK1RXwYV1auw6Q/zJ3soTKFvHXEHULdB3rPTabOj2Q7uPylsQNucFLiOyGQF5HWum7exVOflxn18I0= Received: from CY4PR21MB0774.namprd21.prod.outlook.com (10.173.192.20) by CY4PR21MB0758.namprd21.prod.outlook.com (10.173.192.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.631.1; Sun, 18 Mar 2018 20:23:06 +0000 Received: from CY4PR21MB0774.namprd21.prod.outlook.com ([fe80::41f5:f274:8793:f7b1]) by CY4PR21MB0774.namprd21.prod.outlook.com ([fe80::41f5:f274:8793:f7b1%8]) with mapi id 15.20.0631.002; Sun, 18 Mar 2018 20:23:06 +0000 From: Dave Thaler To: "suit@ietf.org" Thread-Topic: Comments on draft-moran-suit-architecture-03 Thread-Index: AdO+9SVgAbCbwp3FR0CKdVx6aDlYqQ== Date: Sun, 18 Mar 2018 20:23:06 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-03-18T20:23:06.9105053Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [31.133.149.159] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4PR21MB0758; 7:r4WKupl2F+trv/vIuwIM1kuV/UHEGUl7vN3BlvGK4tdYT3x3eOeo3F5f//r/Av4eVcdGuJ99nt40SMqhQc73z9bvFB5TUAPnwXkZVytL0YO+gXw2r1pysz88qNweGXDnkHjOmls1/Qt515AKuEMD6ENY9wuWJ5sYfzo7bH+ISr5JA5mGNMDQFtIr8iGe3i0PvI1RNvP4teV9aIMa3iiunUFibC/txFVUFycY2qulSa8FA+OKWIW+rhM38Kccn2yn; 20:UMxF7r4srWsxz39RLCYTrGqauz1GYV2bZt9anWqO/LQEaDFyxmJ6jh1e23ALISOu4MMeQNUY9zqyk+nv7F2YnmeJyePSHfSGdKWKWSr93qGEOvvcYNIzXw2lA4cfgOROL3dE6bpdUK0KJSaZnhxpWhUCXDuhOYv1IW/afWrftQg= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 04a50f19-ebed-46d7-dbce-08d58d0e0f28 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7193020); SRVR:CY4PR21MB0758; x-ms-traffictypediagnostic: CY4PR21MB0758: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(43050042349365)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040522)(2401047)(5005006)(8121501046)(3002001)(3231221)(944501300)(52105095)(10201501046)(93006095)(93001095)(6055026)(61426038)(61427038)(6041310)(20161123560045)(20161123558120)(20161123564045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(6072148)(201708071742011); SRVR:CY4PR21MB0758; BCL:0; PCL:0; RULEID:; SRVR:CY4PR21MB0758; x-forefront-prvs: 06157D541C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(39860400002)(366004)(376002)(39380400002)(396003)(189003)(199004)(606006)(25786009)(478600001)(26005)(86362001)(6506007)(966005)(14454004)(8936002)(97736004)(2501003)(53936002)(86612001)(99286004)(102836004)(316002)(1730700003)(22452003)(5630700001)(8676002)(59450400001)(7696005)(81156014)(81166006)(68736007)(186003)(6916009)(74316002)(3280700002)(105586002)(10090500001)(8990500004)(6306002)(9686003)(236005)(10290500003)(2900100001)(33656002)(5250100002)(790700001)(106356001)(2351001)(6436002)(5640700003)(66066001)(55016002)(3660700001)(7736002)(5660300001)(2906002)(6116002)(3846002)(54896002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR21MB0758; H:CY4PR21MB0774.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 3QfYfdhEsPemVCDAg7VKadcXA8A5Ho3RthSNXFDAzzbDd5xm6fsPJVjD5T+Q4/jrtsgofOMHoOv8Lz8MnjhtXU1zxS8XyRR6RNYQ84R0reyhn727XOSZoClpoWRMGVaxMWBvyLbTvBqT8iFtO3TmCvyX9cIuP4VdgMlv+yWdkkDz3t8bVIRoYg9K9HyhBXpVgFUjMwUr9ouw1S4MBntPaZgcXAbS1P0XG0MgNYB/7XiE7Am8FJ5Ij2LMA/KoXOgt7jyPw6egTpfV6j2JNBeOfHv4e15Pd5BGrU1tqKhgyTiTaZvVb3VrdKsiEebuI6hTM3ino26kqYFamG2OpXMvyw== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_CY4PR21MB0774C418C4562ACD6AE53430A3D50CY4PR21MB0774namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 04a50f19-ebed-46d7-dbce-08d58d0e0f28 X-MS-Exchange-CrossTenant-originalarrivaltime: 18 Mar 2018 20:23:06.5186 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR21MB0758 Archived-At: Subject: [Suit] Comments on draft-moran-suit-architecture-03 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Mar 2018 20:23:10 -0000 --_000_CY4PR21MB0774C418C4562ACD6AE53430A3D50CY4PR21MB0774namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable A marked up copy with my comments (as an individual) is at https://www.microsoft.com/en-us/research/uploads/prod/2017/05/draft-moran-s= uit-architecture-03.pdf None of them would hold up adoption as a WG draft, everything could be hand= led as part of normal WG work. High level comments (see marked up copy for more detailed comments and nits= ): 1) Currently the draft covers both architecture and manifest informatio= n model. We have separate WG milestones for those two items, and maybe it s= hould be split into two separate drafts. E.g. maybe all of Appendix A move= s to a second document. 2) Currently the document assumes public key crypto, and says "Future = versions may also describe a symmetric key approach". The WG should decide whether symmetric key suppor= t is also required. 3) The architecture document does not discuss the four roles we discus= sed in the interim meeting during the liaison statement discussion. It sho= uld (modulo any changes we make to the roles). 4) The discussion of broadcast discovery is confusing, and the WG prob= ably needs to discuss this. 5) The discussion of quantum resistant signatures needs elaboration. 6) The coverage of counter-signing by the owner/operator is incomplete= . Some sections are now good, but some are still wrong because they don't = take that into account. Also, one should not assume that the device owner/= operator is necessarily the same entity as the network owner/operator. The= y may or may not be the same. 7) A number of places in the doc use wording that assumes a push model= or assumes a pull model for update distribution. The document needs to be= more agnostic or cover both models. 8) The information model in A.6 needs to be more clear about what info= rmation is mandatory and what is optional, also what items might occur more= than once. Dave --_000_CY4PR21MB0774C418C4562ACD6AE53430A3D50CY4PR21MB0774namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

A marked up copy with my comments (as an individual)= is at

https://www.micr= osoft.com/en-us/research/uploads/prod/2017/05/draft-moran-suit-architecture= -03.pdf

 

None of them would hold up adoption as a WG draft, e= verything could be handled as part of normal WG work.

 

High level comments (see marked up copy for more det= ailed comments and nits):

1)     Currently the draft covers both architecture and ma= nifest information model. We have separate WG milestones for those two item= s, and maybe it should be split into two separate drafts.  E.g. maybe = all of Appendix A moves to a second document.

2)      Currently the document assumes public key crypto, and says &= #8220;Future versions may also describe a
symmetric key approach”.  The WG should decide whether symmetric= key support is also required.

3)      The architecture document does not discuss the four roles we= discussed in the interim meeting during the liaison statement discussion.&= nbsp; It should (modulo any changes we make to the roles).

4)      The discussion of broadcast discovery is confusing, and the = WG probably needs to discuss this.

5)      The discussion of quantum resistant signatures needs elabora= tion.

6)      The coverage of counter-signing by the owner/operator is inc= omplete.  Some sections are now good, but some are still wrong because= they don’t take that into account.  Also, one should not assume that the device owner/operator is necessarily the same entity a= s the network owner/operator.  They may or may not be the same.

7)      A number of places in the doc use wording that assumes a pus= h model or assumes a pull model for update distribution.  The document= needs to be more agnostic or cover both models.

8)      The information model in A.6 needs to be more clear about wh= at information is mandatory and what is optional, also what items might occ= ur more than once.

 

Dave

 

--_000_CY4PR21MB0774C418C4562ACD6AE53430A3D50CY4PR21MB0774namp_-- From nobody Mon Mar 19 02:47:07 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32D54126DFB for ; Mon, 19 Mar 2018 02:47:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.09 X-Spam-Level: X-Spam-Status: No, score=0.09 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EC5U5wmw-dQG for ; Mon, 19 Mar 2018 02:47:02 -0700 (PDT) Received: from GCC01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on071d.outbound.protection.outlook.com [IPv6:2a01:111:f400:fd00::71d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 225211243F6 for ; Mon, 19 Mar 2018 02:47:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Mz/xByv8i/cbFTy1Vf+p8EhU77mGEcwp2wHWGPWz/xk=; b=QQefJ1+lSfRo6yHQZu4RncgBqPBBDFKgvMS9/TBLyOl9jok6u3UTXgmCarerJhHZ7e+3uWxnAnAohbJWttjQlLAq/1D7ZD/xDjKNibvf2diXOeCiD5GaKw8IsWM7OpkyyRZZnK7y5hdHuaU5fpz77dcf9sQ0+Zffb6jsIELoiCw= Received: from BL0PR0901MB2306.namprd09.prod.outlook.com (52.132.18.148) by BL0PR0901MB2305.namprd09.prod.outlook.com (52.132.18.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.588.14; Mon, 19 Mar 2018 09:47:00 +0000 Received: from BL0PR0901MB2306.namprd09.prod.outlook.com ([fe80::a493:b067:10e0:5d51]) by BL0PR0901MB2306.namprd09.prod.outlook.com ([fe80::a493:b067:10e0:5d51%13]) with mapi id 15.20.0588.017; Mon, 19 Mar 2018 09:47:00 +0000 From: "Waltermire, David A. (Fed)" To: =?iso-8859-1?Q?Jaime_Jim=E9nez?= , "suit@ietf.org" Thread-Topic: [Suit] SUIT Hackathon notes Thread-Index: AdO+0r1FKGLxqqE6TluDP10aJxh/lQAlGDbm Date: Mon, 19 Mar 2018 09:47:00 +0000 Message-ID: References: <99EF646B-4865-40B4-9C32-7746CDF4BD78@ericsson.com> In-Reply-To: <99EF646B-4865-40B4-9C32-7746CDF4BD78@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov; x-originating-ip: [2001:67c:1232:144:2197:8722:4ab5:9605] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BL0PR0901MB2305; 6:rh6CxnmmeFPmWrPZOUmhVRdMQcV8vri/T4j0heJRvTdgwvS0Qzo0ZxiyaVbENeyKOS6ZKK3Ou4wCn/8wJ7ajochC2N9ejICEOhwR3ljamwHSEGFBmhE34S7iQ1XB5r/RFlLNf6XzeiaE+ezLSLLOW5rUpzf2icJOPQ8cHhuC1q4R3W+T5QFS0nHyKDb9RPOYwUgVS4X89oCwv0YdYrniPgjbgjbht2LJ2Nz3XliKzgyqWQ6eYOtaGzTyHsw22+D27HlDLSYUUqyfTynYuOwdCYcjq01tYAWtcg7l/IjSkVgEk0VbjkZS7LqMj7mhZEAEZEnUktIfIyzRMzcZaAu4IcS8A0kuZAnZK1SisN1nxlE+htYi3sdFBkY10cGoYyd+; 5:1eO/0TZYMYie5i+VattBOag8GHhXRJNO/DXKZ2d3WQSrQ4ih6r+aK/gbsodF1x0/rEo07LoZ5bc4GAv9BrzsKXsApooxzbIe7IPLK4V1CHCADxF/5TOzCREDepcMBgPKzFkoVlk9qUaxqPYNliak85CeTrkmZo0FFqwRI0zM9Dk=; 24:KqD8d1Kzcx3h8d8SCfrbqT/9mI6wob+SOcVAhOhfrgXC4xe8aL8OPezQup9ngCFTMwOj45ayLzYyOECt+2nCfSPu4CRQeSRYxMLQL8b/ckQ=; 7:zPKcrHMrdjX9U9dC/zxpFBoeOSdCWVcsm9WtyXViwiFA5gPBcab532VqGGy6fETlgCKBsgZoyaWgM8uSgJT/wko1Y+eq3NmNAoXz7ONIT5Fx7X63D2CEjF+XHIfjVJf2duIKLbHmq7Frpw2L+mxa5UH+y59b3wCNgO35GOZaDaiMBTfOMFf2h++Y+cAagCs36LgabNqhx/Ca73e4gtn1i/XrwJ+A4W5rXsPCuCczsXqWzQWEupO5DRb/gC25LE5s x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: cfb80a21-0867-4cac-d71d-08d58d7e5cc4 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BL0PR0901MB2305; x-ms-traffictypediagnostic: BL0PR0901MB2305: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(37575265505322)(166708455590820)(189930954265078)(219752817060721)(192278398808882); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(8121501046)(5005006)(3231221)(944501244)(52105095)(3002001)(93006095)(93001095)(10201501046)(6055026)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123558120)(6072148)(201708071742011); SRVR:BL0PR0901MB2305; BCL:0; PCL:0; RULEID:; SRVR:BL0PR0901MB2305; x-forefront-prvs: 06167FAD59 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(396003)(346002)(39380400002)(376002)(39850400004)(189003)(199004)(3660700001)(99286004)(6436002)(55016002)(6306002)(236005)(54896002)(9686003)(8676002)(6246003)(102836004)(5660300001)(53546011)(6506007)(68736007)(186003)(33656002)(106356001)(97736004)(19627405001)(6116002)(76176011)(345774005)(105586002)(7696005)(2906002)(966005)(606006)(7736002)(478600001)(74316002)(229853002)(3280700002)(53936002)(86362001)(2950100002)(110136005)(2501003)(2900100001)(81156014)(81166006)(8936002)(25786009)(316002)(5250100002)(6606003)(14454004)(46003); DIR:OUT; SFP:1102; SCL:1; SRVR:BL0PR0901MB2305; H:BL0PR0901MB2306.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-microsoft-antispam-message-info: +p/RUNP2+3wdn6DE3klo1YKkMre/IkfW37DQlRP5GvgcuJ/PnBPw/OftI+j4yBQirjc3Z0Ww1A+jYR0fE07xQ+ppA5pprNMCLR5YYiQGzuQykKmd73Tdf5PuCsdJyKHmU8/tdSZT2+cJ2W+k/QfxAKpd/hTgB0dKvtwR50T7Ql9sPAw7iIttymeIZXdDqmWJ7D0u27u8bBnA/UGczIuhmXSJsL2WXhTGK84bD5O7GAhMUBSfF/kEvN+TGuEa4JhH/uU7pshxiK5OyyA4fM3UFKrq7QQdxQocwLjZOqBy9HgduRY65fdaqnxpV9mQ6Nb490ttzVhkKMkBfNp9ZcTWOw== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BL0PR0901MB230637623ECAAD03C38D670AF0D40BL0PR0901MB2306_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: cfb80a21-0867-4cac-d71d-08d58d7e5cc4 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Mar 2018 09:47:00.2717 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR0901MB2305 Archived-At: Subject: Re: [Suit] SUIT Hackathon notes X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 09:47:05 -0000 --_000_BL0PR0901MB230637623ECAAD03C38D670AF0D40BL0PR0901MB2306_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Jaime, Thank you for sharing this. Thanks, Dave ________________________________ From: Suit on behalf of Jaime Jim=E9nez Sent: Sunday, March 18, 2018 12:04:05 PM To: suit@ietf.org Subject: [Suit] SUIT Hackathon notes Hi, I would like to share with the group some of the notes we took during the I= ETF 101 Hackathon. https://gist.github.com/jaimejim/3aa9c6e85e82a353c9fa90794c856d89 Ciao! --_000_BL0PR0901MB230637623ECAAD03C38D670AF0D40BL0PR0901MB2306_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Jaime,


Thank you for sharing thi= s.


Thanks,

Dave

From: Suit <suit-bounces= @ietf.org> on behalf of Jaime Jim=E9nez <jaime.jimenez@ericsson.com&g= t;
Sent: Sunday, March 18, 2018 12:04:05 PM
To: suit@ietf.org
Subject: [Suit] SUIT Hackathon notes
 
Hi,

I would like to share with the group some of the notes we took during = the IETF 101 Hackathon.


Ciao!
--_000_BL0PR0901MB230637623ECAAD03C38D670AF0D40BL0PR0901MB2306_-- From nobody Mon Mar 19 02:52:05 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 71E9C127867 for ; Mon, 19 Mar 2018 02:52:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M7nczUfyw2jD for ; Mon, 19 Mar 2018 02:52:03 -0700 (PDT) Received: from GCC01-DM2-obe.outbound.protection.outlook.com (mail-dm2gcc01on0707.outbound.protection.outlook.com [IPv6:2a01:111:f400:fd01::707]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EBC7412751F for ; Mon, 19 Mar 2018 02:52:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=eVphogY3bCE8ktaK0s09Ih/GlGW5BCzfb3I6xQQwuec=; b=A4sm+81isudzzXl4+itsAJKy9H81pw39+CK7ijy5WQjim/pAgcq7F4y6FVhco3sb57ljWoj2WVbDfN26xJVPp1vpuZ2zlqPZ62DvMzb0O/VbhB5qC0mMDrlyBoFtsf0Yzy62CuN1sm6ZHPDIDeuif7hKzFhDHQUSA0k5hQTXbPQ= Received: from BL0PR0901MB2306.namprd09.prod.outlook.com (52.132.18.148) by BL0PR0901MB2308.namprd09.prod.outlook.com (52.132.18.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Mon, 19 Mar 2018 09:52:00 +0000 Received: from BL0PR0901MB2306.namprd09.prod.outlook.com ([fe80::a493:b067:10e0:5d51]) by BL0PR0901MB2306.namprd09.prod.outlook.com ([fe80::a493:b067:10e0:5d51%13]) with mapi id 15.20.0588.017; Mon, 19 Mar 2018 09:52:00 +0000 From: "Waltermire, David A. (Fed)" To: "suit@ietf.org" Thread-Topic: Hackathon Slides Thread-Index: AQHTv2fODY7Plop3qkyhtDs7gy491A== Date: Mon, 19 Mar 2018 09:52:00 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [2001:67c:1232:144:2197:8722:4ab5:9605] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BL0PR0901MB2308; 7:TnNDCXPRY6dnq8S1zaeILjg9jwR1uFhbhl2MxKulafV1Y67RLfffcAcXvat2plW+wCGKDfJYX932Cy8IWIum/1gQlXxJU0OUTg8jqiBy9pka/OdV1e44XAbNIilOPuxH4dZzP7rurUYXvMbNTVgniaKs0wdbbH8k9DfuQu6zciCxv0AiasnoqAZWjiA8nsnxbby3svouCfvMt79piH+39RADwVGtuSAgjL3xpVg8pywL5bjs+f+/D1WuMoGDjiWx x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 53278a6e-4a08-4daf-0740-08d58d7f0f91 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BL0PR0901MB2308; x-ms-traffictypediagnostic: BL0PR0901MB2308: authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(8121501046)(5005006)(3231221)(944501300)(52105095)(3002001)(93006095)(93001095)(10201501046)(6055026)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123558120)(6072148)(201708071742011); SRVR:BL0PR0901MB2308; BCL:0; PCL:0; RULEID:; SRVR:BL0PR0901MB2308; x-forefront-prvs: 06167FAD59 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(376002)(396003)(366004)(39850400004)(39380400002)(189003)(199004)(7696005)(1730700003)(53936002)(86362001)(105586002)(33656002)(97736004)(5250100002)(3480700004)(81156014)(6116002)(102836004)(6506007)(2351001)(81166006)(8936002)(186003)(19627405001)(5660300001)(106356001)(7116003)(9686003)(478600001)(3280700002)(2906002)(6916009)(558084003)(99286004)(74316002)(5640700003)(6606003)(2501003)(2900100001)(25786009)(221733001)(46003)(14454004)(6436002)(3660700001)(8676002)(55016002)(316002)(68736007)(7736002)(54896002); DIR:OUT; SFP:1102; SCL:1; SRVR:BL0PR0901MB2308; H:BL0PR0901MB2306.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-microsoft-antispam-message-info: grkv8s+h2Br2cRWe0kKoVXN7ndGspkF4CxPyzO3FNFtNLywx3ZPO+P8ywKuGNcp4Q4Ba3FK0GqD7yqvO4MTJRcZowDwAgUXm/Fwqcb2NQM9ODBOthK7T5hUhXJ+78EL4Y+6grd3gathg2YQGmnwh1UOabQUV0mV7nqFAJgcUUjnh1Yc2heLVlnx2pwuN9n825aP6nlEOS4W6GgFEEmXl9DuZWpqEXH5BXvCZE1USU8vmBOjEFVZ0S0Oh4ouPJJomd0+o/wyHPYv42X1ucYTy3xnxvzrNGClRRXfBr3XuP8B0ZW9YMtna6jxcsSH83soRD2fvQA0Se/YK4x4xrfC90A== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BL0PR0901MB230650155C98FA5CC3EBCE76F0D40BL0PR0901MB2306_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: 53278a6e-4a08-4daf-0740-08d58d7f0f91 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Mar 2018 09:52:00.2756 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR0901MB2308 Archived-At: Subject: [Suit] Hackathon Slides X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 09:52:04 -0000 --_000_BL0PR0901MB230650155C98FA5CC3EBCE76F0D40BL0PR0901MB2306_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable We have not received any slides for the Hackathon report yet. For this repo= rt do you intend to use the slides you made for the hackathon? If so, pleas= e send those to me ASAP for posting on the SUIT meeting materials page. Thanks, Dave --_000_BL0PR0901MB230650155C98FA5CC3EBCE76F0D40BL0PR0901MB2306_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

We have not received any = slides for the Hackathon report yet. For this report do you intend to use t= he slides you made for the hackathon? If so, please send those to me ASAP f= or posting on the SUIT meeting materials page.


Thanks,

Dave


--_000_BL0PR0901MB230650155C98FA5CC3EBCE76F0D40BL0PR0901MB2306_-- From nobody Mon Mar 19 03:14:28 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3085B126CE8 for ; Mon, 19 Mar 2018 03:14:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.019 X-Spam-Level: X-Spam-Status: No, score=-2.019 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ca_ygk4sUuyJ for ; Mon, 19 Mar 2018 03:14:20 -0700 (PDT) Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-sn1nam01on0092.outbound.protection.outlook.com [104.47.32.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BD171126DC2 for ; Mon, 19 Mar 2018 03:14:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=a4k6R8XOZFT1WVQrAuGnOIFyvLedj9IXBh8UGUtFLMg=; b=iA7tWCXPN3kGtj92AwlwPaDBXnxCXHGwEcG8ddGEiiy2BPTfcZwDRHKS57Kfm3rRu8eckiTD+VMMF5nbsUMkN0tfAvx9kNA5i64/e/MtKqnD4QOiymRESqBC7+lsVvsQ8jNdy9z4zM3UTkV1DoE4+vXtwpoeTVo/0L6Cve8y2b0= Received: from CY4PR21MB0774.namprd21.prod.outlook.com (10.173.192.20) by CY4PR21MB0279.namprd21.prod.outlook.com (10.173.193.145) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.631.0; Mon, 19 Mar 2018 10:14:19 +0000 Received: from CY4PR21MB0774.namprd21.prod.outlook.com ([fe80::41f5:f274:8793:f7b1]) by CY4PR21MB0774.namprd21.prod.outlook.com ([fe80::41f5:f274:8793:f7b1%8]) with mapi id 15.20.0631.004; Mon, 19 Mar 2018 10:14:19 +0000 From: Dave Thaler To: "Waltermire, David A. (Fed)" , "suit@ietf.org" Thread-Topic: Hackathon Slides Thread-Index: AQHTv2fODY7Plop3qkyhtDs7gy491KPXVy4w Date: Mon, 19 Mar 2018 10:14:19 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-03-19T10:14:21.2012201Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [31.133.149.159] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; CY4PR21MB0279; 7:iHUhHmjMQQbFfpFqYp27J5eOS5eK+rrQpLalgrf4rkYlsh2bwa3YgmxtEIDzoRZAUTabeoUTVjbb+1/q8OF5KwJ5jTRX7VBC55W4WiWEl39SwNjz5n0yXFjyhIpLVYh1tztizEtzBEABUgwScwmv3xeBe6AdBng8EDp0Dv5UpK7IK3KvrWEDd1tk5xq8+9zmPiPHgiNP7mPI+FZXguHFyWMe8tHEhPJhaTT7lB/OiYUB51bRN8sQXCGuqvbOn/S4; 20:Wq9y9n+l5/ZZzM/SZ98itDeuqpAbzbpko6QMVVbEJsl+k4SKUTbFDEAMAwCoeYZ5Rw3RPlQs8aiUt6vj3dQdBH9gQyyAqCVoJBa6WFfLoY+MsTHWazlCV7d6P2zaJtIDfbTaFEw1YkwdLhPAjQGvhAKqQgF5fK7+bF8xWxigif8= x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: f225d3ad-e1ac-474e-f25c-08d58d822d98 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7193020); SRVR:CY4PR21MB0279; x-ms-traffictypediagnostic: CY4PR21MB0279: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(61425038)(6040522)(2401047)(5005006)(8121501046)(3231221)(944501300)(52105095)(3002001)(93006095)(93001095)(10201501046)(6055026)(61426038)(61427038)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123564045)(20161123558120)(6072148)(201708071742011); SRVR:CY4PR21MB0279; BCL:0; PCL:0; RULEID:; SRVR:CY4PR21MB0279; x-forefront-prvs: 06167FAD59 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(346002)(376002)(396003)(39380400002)(366004)(39860400002)(199004)(189003)(106356001)(6246003)(7116003)(81166006)(2906002)(5660300001)(81156014)(7736002)(790700001)(68736007)(66066001)(3846002)(6116002)(8676002)(110136005)(3280700002)(2900100001)(97736004)(74316002)(8990500004)(6436002)(3660700001)(86362001)(2501003)(5250100002)(53936002)(8656006)(25786009)(9686003)(6506007)(53546011)(229853002)(55016002)(33656002)(478600001)(7696005)(76176011)(14454004)(221733001)(6306002)(54896002)(10290500003)(10090500001)(99286004)(86612001)(26005)(316002)(105586002)(186003)(8936002)(2950100002)(3480700004)(102836004)(22452003); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR21MB0279; H:CY4PR21MB0774.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: zeA83xIB3NqiVXZaww30g+zCHy4FTPt8jW8V4P6Ved0iY+08Lk5SNhU/PSWoRUsNTIfzr0Kb0lAiyqXbOPBDoYFpuPrBLu7fXggdAu0kYTatr6kGIhuIg0V5NbHvu5I0VTk8PA3FavN83C426ZRe9nDbvBD+Lt85851DpDNl/RylCxSvlHY+vdoev/4eHbv+F/ZJl94wCMonq+mEWYeF2bZWaqA5CA48U0m6v9acTLryeDlDS/i4s/NSERNpx49ELUoLllxUYWsGPN7RtWvU53leVsjVQ/02/0IzEAl1c4413KXk4Dx8o3JLDt94Cjat6kxoALHrKTM9EivbVhixBQ== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_CY4PR21MB0774D685CC435B40C473D4A5A3D40CY4PR21MB0774namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: f225d3ad-e1ac-474e-f25c-08d58d822d98 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Mar 2018 10:14:19.1585 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR21MB0279 Archived-At: Subject: Re: [Suit] Hackathon Slides X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 10:14:27 -0000 --_000_CY4PR21MB0774D685CC435B40C473D4A5A3D40CY4PR21MB0774namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable And I believe Jaime sent to the list an updated link to be used in those sl= ides. From: Suit On Behalf Of Waltermire, David A. (Fed) Sent: Monday, March 19, 2018 9:52 AM To: suit@ietf.org Subject: [Suit] Hackathon Slides We have not received any slides for the Hackathon report yet. For this repo= rt do you intend to use the slides you made for the hackathon? If so, pleas= e send those to me ASAP for posting on the SUIT meeting materials page. Thanks, Dave --_000_CY4PR21MB0774D685CC435B40C473D4A5A3D40CY4PR21MB0774namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

And I believe Jaime sent to the list = an updated link to be used in those slides.

&nbs= p;

From: Suit <suit-bounces@ietf.org= > On Behalf Of Waltermire, David A. (Fed)
Sent: Monday, March 19, 2018 9:52 AM
To: suit@ietf.org
Subject: [Suit] Hackathon Slides

 

W= e have not received any slides for the Hackathon report yet. For this repor= t do you intend to use the slides you made for the hackathon? If so, please= send those to me ASAP for posting on the SUIT meeting materials page.

<= o:p> 

T= hanks,

D= ave

<= o:p> 

--_000_CY4PR21MB0774D685CC435B40C473D4A5A3D40CY4PR21MB0774namp_-- From nobody Mon Mar 19 03:21:10 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76E1212D9FE for ; Mon, 19 Mar 2018 03:21:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JvyksnHH0BYq for ; Mon, 19 Mar 2018 03:20:59 -0700 (PDT) Received: from GCC01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0126.outbound.protection.outlook.com [23.103.200.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A518D126CBF for ; Mon, 19 Mar 2018 03:20:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=jrsvEDCyPWMoMqaztsNLMMrACUdkeqoIgBl5gQn3Mwc=; b=ArSmln58+TTRV+Jyy0oOUiLLcrF1GK5AhHtHBAMqnrxcP2sHlwJF0JZVpV6s6c3nWLI4PpbHmJWzjlhfokZ+vg3gWP1CqP9ECTZBY98dOBVdBOTt+qMeMuvIwNu6GkGglzuDk5OBBxXyfD0iUgHQGl5seT/BoOMaUJZLH8Mr+es= Received: from BL0PR0901MB2306.namprd09.prod.outlook.com (52.132.18.148) by BL0PR0901MB2306.namprd09.prod.outlook.com (52.132.18.148) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.588.14; Mon, 19 Mar 2018 10:20:58 +0000 Received: from BL0PR0901MB2306.namprd09.prod.outlook.com ([fe80::a493:b067:10e0:5d51]) by BL0PR0901MB2306.namprd09.prod.outlook.com ([fe80::a493:b067:10e0:5d51%13]) with mapi id 15.20.0588.017; Mon, 19 Mar 2018 10:20:58 +0000 From: "Waltermire, David A. (Fed)" To: Dave Thaler , "suit@ietf.org" Thread-Topic: Hackathon Slides Thread-Index: AQHTv2fODY7Plop3qkyhtDs7gy491KPXVy4wgAABaYY= Date: Mon, 19 Mar 2018 10:20:57 +0000 Message-ID: References: , In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [2001:67c:1232:144:2197:8722:4ab5:9605] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BL0PR0901MB2306; 7:GW1VNeEWtRmfLWlCz3BIjU5AeyMWgszmOXPYEJbA4Wjb/701ZI9i7zzfw8UDvAqbvLsCRjMUhRmkIi0GlC4ip1uVHDbKMQyyWDmnahdugtxGgIETGnzIsijgIX8LOTVHjg92u0OBK0ivTjw8D2rjr+Gco8L/kGNUL677ZOixRiGS+vT0A1v30FAY2xRUp/yICLs9Z/6IognHQWjF1eMSDmJJuy0A9P5iUC7TQvEF+cJR1yQ4flDPCPlMpXIE870R x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: c2e818b8-b48d-424d-3e62-08d58d831b57 x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(7020095)(4652020)(48565401081)(5600026)(4604075)(3008032)(4534165)(4627221)(201703031133081)(201702281549075)(2017052603328)(7153060)(7193020); SRVR:BL0PR0901MB2306; x-ms-traffictypediagnostic: BL0PR0901MB2306: authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(28532068793085)(89211679590171); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(6040522)(2401047)(8121501046)(5005006)(3231221)(944501300)(52105095)(3002001)(93006095)(93001095)(10201501046)(6055026)(6041310)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123562045)(20161123558120)(6072148)(201708071742011); SRVR:BL0PR0901MB2306; BCL:0; PCL:0; RULEID:; SRVR:BL0PR0901MB2306; x-forefront-prvs: 06167FAD59 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(39850400004)(39380400002)(396003)(376002)(346002)(199004)(189003)(106356001)(105586002)(68736007)(81156014)(8936002)(8676002)(7116003)(81166006)(5660300001)(1511001)(53546011)(6506007)(97736004)(7736002)(99286004)(14454004)(221733001)(25786009)(86362001)(45080400002)(3480700004)(5250100002)(46003)(2501003)(478600001)(2900100001)(110136005)(55016002)(186003)(54896002)(6116002)(229853002)(33656002)(6246003)(6606003)(102836004)(2950100002)(8666007)(74316002)(316002)(19627405001)(76176011)(6436002)(2906002)(7696005)(53936002)(9686003)(584604001)(3280700002)(3660700001)(19627235001); DIR:OUT; SFP:1102; SCL:1; SRVR:BL0PR0901MB2306; H:BL0PR0901MB2306.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) x-microsoft-antispam-message-info: gkgZN0GwCcMHBYK4YCUxfQJwFtRwCy6yYjPmRCOFH0eEWJp5wi9Cg7g1+tW1XQZhDqhMp9PTQqYVLsLMGwxH1YtSewA2KxEQ1lNz8JjYadimBSmRes43ZVcz+tiPlUc0Bmy8XytRV5bEKjFSr4L4cPf5PQkKAnMnVwaWWyh40bddOCyy+Yyn0gg1kRFJbQ5M0zg2fVnhlpDB9AcwEOidGf5RSgxP9QurTjXiKKlTbEQ8rGOOCuqO6TRxhpT/s3+SXpMsUhbZcW/7TQYWVFIv8FyqJc5Rtz1ZMOaE57DgLtpxA2HwliCbwdOxOsC7wkgrICLjY9aZh7S7Z8YBA6AK6A== spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BL0PR0901MB2306966E1849D8670E192D70F0D40BL0PR0901MB2306_" MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-Network-Message-Id: c2e818b8-b48d-424d-3e62-08d58d831b57 X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Mar 2018 10:20:57.9852 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL0PR0901MB2306 Archived-At: Subject: Re: [Suit] Hackathon Slides X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Mar 2018 10:21:05 -0000 --_000_BL0PR0901MB2306966E1849D8670E192D70F0D40BL0PR0901MB2306_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable It looks like the current link is included in the slides from what I can se= e. I'll add slide numbers and post the slides. Thanks, Dave ________________________________ From: Dave Thaler Sent: Monday, March 19, 2018 6:14:19 AM To: Waltermire, David A. (Fed); suit@ietf.org Subject: RE: Hackathon Slides And I believe Jaime sent to the list an updated link to be used in those sl= ides. From: Suit On Behalf Of Waltermire, David A. (Fed) Sent: Monday, March 19, 2018 9:52 AM To: suit@ietf.org Subject: [Suit] Hackathon Slides We have not received any slides for the Hackathon report yet. For this repo= rt do you intend to use the slides you made for the hackathon? If so, pleas= e send those to me ASAP for posting on the SUIT meeting materials page. Thanks, Dave --_000_BL0PR0901MB2306966E1849D8670E192D70F0D40BL0PR0901MB2306_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

It looks like the current= link is included in the slides from what I can see.


I'll add slide numbers an= d post the slides.


Thanks,

Dave



From: Dave Thaler <dthal= er@microsoft.com>
Sent: Monday, March 19, 2018 6:14:19 AM
To: Waltermire, David A. (Fed); suit@ietf.org
Subject: RE: Hackathon Slides
 

And I believe Jaime sent to the l= ist an updated link to be used in those slides.

&nb= sp;

From: Suit <suit-bounces@ietf= .org> On Behalf Of Waltermire, David A. (Fed)
Sent: Monday, March 19, 2018 9:52 AM
To: suit@ietf.org
Subject: [Suit] Hackathon Slides

 

= We have not received any slides for the Hackathon report yet. For this repo= rt do you intend to use the slides you made for the hackathon? If so, pleas= e send those to me ASAP for posting on the SUIT meeting materials page.

=  

= Thanks,

= Dave

=  

--_000_BL0PR0901MB2306966E1849D8670E192D70F0D40BL0PR0901MB2306_-- From nobody Tue Mar 20 11:14:43 2018 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D7B0127978; Tue, 20 Mar 2018 11:14:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cE9IY7v8zn-g; Tue, 20 Mar 2018 11:14:39 -0700 (PDT) Received: from mail-wr0-x232.google.com (mail-wr0-x232.google.com [IPv6:2a00:1450:400c:c0c::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21856127286; Tue, 20 Mar 2018 11:14:39 -0700 (PDT) Received: by mail-wr0-x232.google.com with SMTP id z8so2681621wrh.7; Tue, 20 Mar 2018 11:14:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=P2dRsmk+h/GJ8b6snaqZTqe/JNuf7xSK8qEx1PX0Pt4=; b=d2ZqBvtA/IEXFkBCCkDqQ2NFVlS/CFavsxgwDpIA1oEa3T/aClhhsdoTqEOLZQVIOD vM5T2YITBgNdXroa8UKn4KQ46lrBJxnK9IdGgBCGu3lwD8IX3JWh3TwqeZdPoLhUDRs0 UH9nV0qrIuEbIRz3lyVw5Shr/Qyj1LeEbP5jTNd0/YRXrlNn0JEOJ5xVnGF9WAcdSo4r c4BFwKZSBD8KWEje0A4gAF7Et6GOyLRpX+fYNxOH6R8v4Sm/jztTceIVAp0cFNQHXNbP qOVlfaVIREIlHoNiEG2tu5QIazb5CwYn93lqUAsUTuytojJlzM/M3wnH7cWwsE8vs7nb 5rSg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=P2dRsmk+h/GJ8b6snaqZTqe/JNuf7xSK8qEx1PX0Pt4=; b=g0gum85GBqYprO/3wfsRamd2bel0M/YX41OWlvQRpAeAezCEGcn8DagA7NNLohn5EY oLqwrZdmQ47YLI7cj6goEzvAI7yUyngF9Injtj4Fk1UcFEvRgSqUXp6kKmPi14cFYIR0 r6XdOKQ2C+QYwyazlQ1VlXgJb3ZEV3lzkw/QYf5kVAmTOPQV2QRTJLygRqLllvOXg3Ek 3bOSlcrqz3d1NdDaRdl+w+gle2vVQL8cFLLje+zROV8TXlEJ1RGqwBAgBeX9s/w8qYKT FJ0Mbh/hR/6Q9sWbogdNY9pb4agW+OkYOAT+75W1KS5h89jdMGHDGP3EJhhkeMdFyzBg UfTg== X-Gm-Message-State: AElRT7HLblMSlHLZuPH7fTXJrzJeUVPzLAo89atJsBOkkQVh1N13AL7z CGH6L0l6GsY9KE6U+4P7uMmnXolv4iIAaONBwz5e+g== X-Google-Smtp-Source: AG47ELtpXbHeeKiRNGLdAtNAIjzwrIC33AjWFLZDnmIdMcZSJEA3RcOQcofvwLV7smEUe96esyLEnG3xIGoo17iJ+M4= X-Received: by 10.223.151.204 with SMTP id t12mr14692323wrb.156.1521569677488; Tue, 20 Mar 2018 11:14:37 -0700 (PDT) MIME-Version: 1.0 References: <152137584683.15912.3759202444684113289.idtracker@ietfa.amsl.com> In-Reply-To: <152137584683.15912.3759202444684113289.idtracker@ietfa.amsl.com> From: Padmakumar Subramani Date: Tue, 20 Mar 2018 18:14:26 +0000 Message-ID: To: IETF Secretariat Cc: draft-moran-suit-architecture@ietf.org, suit@ietf.org, suit-chairs@ietf.org Content-Type: multipart/alternative; boundary="94eb2c1b5eae20b6550567dc0c95" Archived-At: Subject: Re: [Suit] The SUIT WG has placed draft-moran-suit-architecture in state "Candidate for WG Adoption" X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Mar 2018 18:14:41 -0000 --94eb2c1b5eae20b6550567dc0c95 Content-Type: text/plain; charset="UTF-8" the following questions may be relevant for section 6 manifest - by when the firmware looses its potential for upgrade, meaning if the firmware is not updated by such time indicated in manifest, it needs to check back for new software - by when the firmware looses its potential for to be used for normal operations of the device, meaning after that date, the device should not be eligible to use that firmware Regards Padhu On Sun, 18 Mar 2018 at 12:24 PM, IETF Secretariat < ietf-secretariat-reply@ietf.org> wrote: > > The SUIT WG has placed draft-moran-suit-architecture in state > Candidate for WG Adoption (entered by David Waltermire) > > The document was previously in state Call For Adoption By WG Issued > > The document is available at > https://datatracker.ietf.org/doc/draft-moran-suit-architecture/ > > Comment: > Correcting the associated WG. > > _______________________________________________ > Suit mailing list > Suit@ietf.org > https://www.ietf.org/mailman/listinfo/suit > --94eb2c1b5eae20b6550567dc0c95 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
the following questions may be relevant for section = 6 manifest

- by when the= firmware looses its potential for upgrade, meaning if the firmware is not = updated by such time indicated in manifest, it needs to check back for new = software=C2=A0

- by when= the firmware looses its potential for to be used for normal operations of = the device, meaning after that date, the device should not be eligible to u= se that firmware=C2=A0

R= egards
Padhu

On Sun, 18 Mar 2018 at 12:24 PM, IETF Secretariat <ietf-secretariat-reply@ietf.org> wro= te:

The SUIT WG has placed draft-moran-suit-architecture in state
Candidate for WG Adoption (entered by David Waltermire)

The document was previously in state Call For Adoption By WG Issued

The document is available at
https://datatracker.ietf.org/doc/draf= t-moran-suit-architecture/

Comment:
Correcting the associated WG.

_______________________________________________
Suit mailing list
Suit@ietf.org
https://www.ietf.org/mailman/listinfo/suit
--94eb2c1b5eae20b6550567dc0c95--