
From nobody Fri Mar  1 13:13:40 2019
Return-Path: <agenda@ietf.org>
X-Original-To: suit@ietf.org
Delivered-To: suit@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 80AE2130FDF; Fri,  1 Mar 2019 13:10:03 -0800 (PST)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: "\"IETF Secretariat\"" <agenda@ietf.org>
To: <suit-chairs@ietf.org>, <housley@vigilsec.com>
Cc: ekr@rtfm.com, suit@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.92.1
Auto-Submitted: auto-generated
Precedence: bulk
Message-ID: <155147460352.6101.18111778748839342980.idtracker@ietfa.amsl.com>
Date: Fri, 01 Mar 2019 13:10:03 -0800
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/lQ-4Nz8wyuWlFEFEnN5FMQz2erk>
Subject: [Suit] suit - Requested session has been scheduled for IETF 104
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 01 Mar 2019 21:10:14 -0000

Dear Russ Housley,

The session(s) that you have requested have been scheduled.
Below is the scheduled session information followed by
the original request. 


    suit Session 1 (1:30 requested)
    Wednesday, 27 March 2019, Morning Session I 0900-1100
    Room Name: Congress Hall 3 size: 250
    ---------------------------------------------


iCalendar: https://datatracker.ietf.org/meeting/104/sessions/suit.ics

Request Information:


---------------------------------------------------------
Working Group Name: Software Updates for Internet of Things
Area Name: Security Area
Session Requester: Russ Housley

Number of Sessions: 1
Length of Session(s):  1.5 Hours
Number of Attendees: 100
Conflicts to Avoid: 
 First Priority: ipwave lamps stir ipsecme tls sipbrandy curdle sacm mile teep core ace acme saag
 Second Priority: t2trg lwig 6lo cfrg perc cbor dprive secdispatch sidrops tcpinc
 Third Priority: v6ops 6man intarea uta


People who must be present:
  Russ Housley
  Eric Rescorla
  Dave Thaler
  Hannes Tschofenig
  David Waltermire

Resources Requested:

Special Requests:
  
---------------------------------------------------------


From nobody Fri Mar  1 18:18:01 2019
Return-Path: <cabo@tzi.org>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCA4912D4EA; Fri,  1 Mar 2019 18:17:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TbuyjqtRoMfg; Fri,  1 Mar 2019 18:17:33 -0800 (PST)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D67E13108E; Fri,  1 Mar 2019 18:17:32 -0800 (PST)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost2.informatik.uni-bremen.de [IPv6:2001:638:708:30c8:406a:91ff:fe74:f2b7]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id x222HN87009103; Sat, 2 Mar 2019 03:17:28 +0100 (CET)
Received: from [192.168.217.106] (p54A6C2FE.dip0.t-ipconnect.de [84.166.194.254]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 44B90g24Tkz1Bp8; Sat,  2 Mar 2019 03:17:23 +0100 (CET)
From: Carsten Bormann <cabo@tzi.org>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
Date: Sat, 2 Mar 2019 03:17:20 +0100
Message-Id: <71380398-B9E0-48D4-BEFB-9EAC6C47FB82@tzi.org>
To: suit <suit@ietf.org>, teep@ietf.org, din@irtf.org, rats@ietf.org, eat@ietf.org
X-Mailer: Apple Mail (2.3445.9.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/DrZITxK5oWPkK20hr0tCzTF-MRs>
Subject: [Suit] Constrained Node/Network Cluster @ IETF104: FINAL AGENDA
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 02 Mar 2019 02:17:46 -0000

Here is my usual eclectic condensed agenda based on the FINAL AGENDA
for IETF104.  Remember that, even though this will now go to the
printers, there is still some potential for changes.

The somewhat annoying coflicts cose/teep and lpwan/t2trg remain.
I also don't like that I'll have to miss the cacao BOF (vs. core),
dinrg/suit, coinrg/git.  rats has been swapped against the paw/saag
conflict.

All times are CET (Central European Time) =3D=3D UTC +1 hours.  Note =
that
there is no daylight saving time in effect at the time in Europe (this
starts on the Sunday *after* IETF).  (You can get pure UTC times on
https://datatracker.ietf.org/meeting/agenda-utc, for those who want to
listen from remote.)

Gr=C3=BC=C3=9Fe, Carsten

FRIDAY, March 22, 2019
-- Fri 0930=E2=80=931830 T2TRG Work Meeting -- Istanbul room

SATURDAY/SUNDAY, March 23/24. 2019
-- Hackathon (including various interops) (Grand Hilton Ballroom)
-- Sun 1700-1900  Welcome Reception - Congress Hall 1/2
-- Sun 1800-2000  Hot RFC Lightning Talks - Congress Hall 3

MONDAY, March 25, 2019

0900-1100  Morning Session I
Congress H 3	ART	dispatch	Dispatch WG - Joint with ARTAREA
Congress H 2	INT	6man	IPv6 Maintenance WG
Congress H 1	IRTF	pearg	Privacy Enhancements and Assessments =
Proposed Research Group
Karlin 3	RTG	bier	Bit Indexed Explicit Replication WG

1120-1220  Morning Session II
Congress H 3	INT ***	6tisch	IPv6 over the TSCH mode of IEEE =
802.15.4e WG
Karlin 3	RTG	bier	Bit Indexed Explicit Replication WG
Congress H 2	SEC	tls	Transport Layer Security WG
Karlin 1/2	TSV	rmcat	RTP Media Congestion Avoidance =
Techniques WG

1350-1550  Afternoon Session I
Karlin 1/2	INT ***	6lo	IPv6 over Networks of =
Resource-constrained Nodes WG
Congress H 2	IRTF	irtfopen	IRTF Open Meeting
Congress H 3	SEC	secdispatch	Security Dispatch WG

1610-1810  Afternoon Session II
Congress H 2	ART	httpbis	Hypertext Transfer Protocol WG
Congress H 3	IAB	smart	Stopping Malware and Researching Threats
Berlin/Brussels	INT	dnssd	Extensions for Scalable DNS Service =
Discovery WG
Grand BR	IRTF	qirg	Quantum Internet Proposed Research Group
Karlin 3	RTG ***	roll	Routing Over Low power and Lossy =
networks WG
Athens/Barcel.	SEC	oauth	Web Authorization Protocol WG
Congress H 1	TSV	tsvwg	Transport Area Working Group WG

TUESDAY, March 26, 2019

0900-1100  Morning Session I
Karlin 3	ART	uta	Using TLS in Applications WG - 1000 - =
1100
Grand BR	INT	homenet	Home Networking WG
Berlin/Brussels	SEC ***	cose	CBOR Object Signing and Encryption WG
Karlin 1/2	SEC ***	teep	Trusted Execution Environment =
Provisioning WG
Congress H 2	TSV	quic	QUIC WG

1120-1220  Morning Session II
Athens/Barcel.	INT ***	lwig	Light-Weight Implementation Guidance WG
Congress H 1	IRTF	qirg	Quantum Internet Proposed Research Group
Congress H 3	TSV	tsvwg	Transport Area Working Group WG

1350-1550  Afternoon Session I
Berlin/Brussels	ART ***	core	Constrained RESTful Environments WG
Karlin 1/2	OPS	anima	Autonomic Networking Integrated Model =
and Approach WG
Congress H 1	SEC	mls	Messaging Layer Security WG
Congress H 3	TSV	tsvarea	Transport Area Open Meeting

1610-1810  Afternoon Session II
Grand BR	INT ***	lpwan	IPv6 over Low Power Wide-Area Networks =
WG
Congress H 1	IRTF***	t2trg	Thing-to-Thing
Congress H 2	SEC	tls	Transport Layer Security WG

WEDNESDAY, March 27, 2019

0900-1100  Morning Session I
Karlin 1/2	IRTF***	dinrg	Decentralized Internet Infrastructure
Congress H 1	RTG	detnet	Deterministic Networking WG
Grand BR	RTG	rift	Routing In Fat Trees WG
Congress H 3	SEC ***	suit	Software Updates for Internet of Things =
WG
Congress H 2	TSV	quic	QUIC WG

1120-1320  Morning Session II
Grand BR	IRTF	cfrg	Crypto Forum  - 12:20 - 13:20
Grand BR	SEC	acme	Automated Certificate Management =
Environment WG - 11:20 - 12:20

1500-1700  Afternoon Session I
Grand BR	OPS	wgtlgo	Technology Deep Dive - Modern Router =
Architecture BOF

THURSDAY, March 28, 2019

0900-1030  Morning Session I
Karlin 3	ART ***	cbor	Concise Binary Object Representation =
Maintenance and Extensions WG
Congress H 3	IRTF	panrg	Path Aware Networking RG
Athens/Barcel.	RTG	babel	Babel routing protocol WG
Congress H 1	SEC	mls	Messaging Layer Security WG
Berlin/Brussels	SEC	oauth	Web Authorization Protocol WG

1050-1220  Morning Session II
Congress H 3	GEN	git	GitHub Integration and Tooling WG
Congress H 1	IRTF	coinrg	Computing in the Network
Congress H 2	IRTF	maprg	Measurement and Analysis for Protocols

1350-1550  Afternoon Session I
Congress H 3	ART	httpbis	Hypertext Transfer Protocol WG
Grand BR	INT ***	paw	Predictable and Available Wireless BOF
Athens/Barcel.	OPS	v6ops	IPv6 Operations WG
Congress H 1	SEC	saag	Security Area Open Meeting

1610-1810  Afternoon Session II
Athens/Barcel.	INT	intarea	Internet Area Working Group WG
Grand BR	SEC ***	rats	Remote ATtestation ProcedureS BOF

FRIDAY, March 29, 2019

0900-1030  Morning Session I
Grand BR	ART ***	core	Constrained RESTful Environments WG
Congress H 1	INT	6man	IPv6 Maintenance WG
Berlin/Brussels	SEC	cacao	Collaborative Automated Course of Action =
Operations for Cyber Security BOF

1050-1250  Morning Session II
Berlin/Brussels	INT	ipwave	IP Wireless Access in Vehicular =
Environments WG
Karlin 1/2	IRTF	icnrg	Information-Centric Networking
Congress H 1	SEC ***	ace	Authentication and Authorization for =
Constrained Environments WG
Athens/Barcel.	TSV	taps	Transport Services WG



From nobody Fri Mar  8 06:54:16 2019
Return-Path: <Brendan.Moran@arm.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4477E1313B7 for <suit@ietfa.amsl.com>; Fri,  8 Mar 2019 06:54:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vf6mQMKxHHGZ for <suit@ietfa.amsl.com>; Fri,  8 Mar 2019 06:54:06 -0800 (PST)
Received: from EUR02-AM5-obe.outbound.protection.outlook.com (mail-am5eur02on0612.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe07::612]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D3F41313B5 for <suit@ietf.org>; Fri,  8 Mar 2019 06:54:05 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com;  s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=g5//iUr0Llzldpjk8e0P2MQxHqaBsw4VTcOmWPtQ2fs=; b=nRniQU0m/RQ79IDlvF2fyQf3TKsk+hgZZ8TnJdD7OpShXl0UZiombztCtAFzqwKNpYV4AQIUkGCxfLE2kRJouLqshWCxhJ4cUjxrc6i2/hzTiiAS387qKEExf4JlofOAlk2FG9uvr3jydmKA6C+Qryd4tEm/zDbj31NDiNztp+g=
Received: from DB6PR0801MB1879.eurprd08.prod.outlook.com (10.168.84.137) by DB6PR0801MB2101.eurprd08.prod.outlook.com (10.168.86.146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1686.18; Fri, 8 Mar 2019 14:54:03 +0000
Received: from DB6PR0801MB1879.eurprd08.prod.outlook.com ([fe80::b135:ad5e:4ab2:48f6]) by DB6PR0801MB1879.eurprd08.prod.outlook.com ([fe80::b135:ad5e:4ab2:48f6%7]) with mapi id 15.20.1686.018; Fri, 8 Mar 2019 14:54:03 +0000
From: Brendan Moran <Brendan.Moran@arm.com>
To: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: Introducing draft-moran-suit-behavioural-manifests-00
Thread-Index: AQHU1b7FUHOtQLPEbkmOXwapehVVpA==
Date: Fri, 8 Mar 2019 14:54:03 +0000
Message-ID: <A65149C9-4CEF-4343-9B03-20BC8E60288E@arm.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-mailer: Apple Mail (2.3445.102.3)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brendan.Moran@arm.com; 
x-originating-ip: [217.140.106.50]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 660757d9-19a7-4771-e573-08d6a3d5e826
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7153060)(7193020); SRVR:DB6PR0801MB2101; 
x-ms-traffictypediagnostic: DB6PR0801MB2101:
x-ms-exchange-purlcount: 1
x-microsoft-exchange-diagnostics: 1; DB6PR0801MB2101; 20:wwTtEcRZ2lw0lBuG/kAO1gP0dJImG1SaKy0ZFv93DWhjQy+5spXZw6lS/gTUY19nsfCU5hTxRWnB7VQa8DJIPIrjqROgjt8bO0+2q8mt0KtTjUcZw/snGBF+4oSMTE36yFsBcp6gQ49FDTuQb9SWi6ocDtzOryLwe7PLUG8ASlw=
x-microsoft-antispam-prvs: <DB6PR0801MB2101A41202E3C56CA7A47D1AEA4D0@DB6PR0801MB2101.eurprd08.prod.outlook.com>
x-forefront-prvs: 0970508454
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(39860400002)(396003)(136003)(366004)(346002)(40434004)(189003)(199004)(186003)(256004)(68736007)(476003)(478600001)(72206003)(14444005)(486006)(5024004)(2351001)(2906002)(966005)(2616005)(6436002)(26005)(33656002)(5640700003)(14454004)(82746002)(97736004)(6506007)(106356001)(105586002)(25786009)(2501003)(5660300002)(57306001)(36756003)(3846002)(6116002)(7736002)(81166006)(1730700003)(66066001)(6306002)(81156014)(8676002)(6916009)(99286004)(50226002)(71190400001)(6512007)(83716004)(71200400001)(86362001)(6486002)(102836004)(8936002)(316002)(305945005)(53936002); DIR:OUT; SFP:1101; SCL:1; SRVR:DB6PR0801MB2101; H:DB6PR0801MB1879.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; 
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: T4vDvC82R+dYdcdpzxLW0k2rhHmM8fRIEOeh7GefxtPluPNaFS1G6srabLNHQvJvUiZqlR0aNO352dUFZgDejwZ+sAPGW1eBJT6umVBMZsYiWmSHTlEu592NdOmpPuB8qnQBSuD2Dp2IUprnu6TSp6t+QYFUrw+yv6a5szVFx1o7jFpkca27oezKD7XBDIcAk1K4xykW83FNdzA5qBTfv1SLJ+jvR/wXmDfKDUJgSV5mxAApIoUvWcRkG70nr+a5l2boJpYX3qxIHVKGw8H8XLX2aDoHrfhJqitb+1zx0W6ESKEGL7riSxK/tJQN5j4J8Q80gjJF7NjBnxk5i0a+KQ4tXLpeXuzSsViP6cQCh/1kWevp0nNvYsO1O5KCQ/drAIm1FQDHDaddeCtbnnKeCUJqZC3sMVDfCZjt0njajQo=
Content-Type: text/plain; charset="utf-8"
Content-ID: <4868C333D025C646BB547FB4D67417FB@eurprd08.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 660757d9-19a7-4771-e573-08d6a3d5e826
X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Mar 2019 14:54:03.6817 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0801MB2101
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/dudfCTvGb5s2e7tnpg1VMBYF9nI>
Subject: [Suit] Introducing draft-moran-suit-behavioural-manifests-00
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 08 Mar 2019 14:54:15 -0000
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From nobody Mon Mar 11 06:15:21 2019
Return-Path: <frank.kvamtro@nordicsemi.no>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3BCB31277D8 for <suit@ietfa.amsl.com>; Mon, 11 Mar 2019 06:15:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.922
X-Spam-Level: 
X-Spam-Status: No, score=-0.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FROM_EXCESS_BASE64=0.979, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nordicsemi.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xHpiJFJ-H3p5 for <suit@ietfa.amsl.com>; Mon, 11 Mar 2019 06:15:16 -0700 (PDT)
Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50078.outbound.protection.outlook.com [40.107.5.78]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6422A1277D0 for <suit@ietf.org>; Mon, 11 Mar 2019 06:15:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nordicsemi.onmicrosoft.com; s=selector1-nordicsemi-no; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WFn+BqMvgv0z8i6tnaPMJeNu4OSdmY98JEUzh1SK5HM=; b=PwlGzpy6uppDBdf0Yl9L0mtRGkJ4p3WQF2ZWMn06evCbH3lVs+tzBQ4ZkIe8po6uDWOx1fiXWZJ34bcLBHLqQQWhPuzoWKONiHCoE0JfSfah/NDEYSzj7JqTjQ+5D6PTxalchHoNvGiVysyuWDQgPyD9aohm/58Q3Y4VzCLVh2U=
Received: from VI1PR0501MB2288.eurprd05.prod.outlook.com (10.169.135.13) by VI1PR0501MB2672.eurprd05.prod.outlook.com (10.172.13.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1686.17; Mon, 11 Mar 2019 13:15:12 +0000
Received: from VI1PR0501MB2288.eurprd05.prod.outlook.com ([fe80::b00c:a435:903a:2c88]) by VI1PR0501MB2288.eurprd05.prod.outlook.com ([fe80::b00c:a435:903a:2c88%7]) with mapi id 15.20.1686.021; Mon, 11 Mar 2019 13:15:12 +0000
From: =?utf-8?B?S3ZhbXRyw7gsIEZyYW5rIEF1ZHVu?= <frank.kvamtro@nordicsemi.no>
To: Brendan Moran <Brendan.Moran@arm.com>, "suit@ietf.org" <suit@ietf.org>
Thread-Topic: Introducing draft-moran-suit-behavioural-manifests-00
Thread-Index: AQHU1b7FUHOtQLPEbkmOXwapehVVpKYGW6Hw
Date: Mon, 11 Mar 2019 13:15:12 +0000
Message-ID: <VI1PR0501MB22885868BFB301CA087E621DFC480@VI1PR0501MB2288.eurprd05.prod.outlook.com>
References: <A65149C9-4CEF-4343-9B03-20BC8E60288E@arm.com>
In-Reply-To: <A65149C9-4CEF-4343-9B03-20BC8E60288E@arm.com>
Accept-Language: nb-NO, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=frank.kvamtro@nordicsemi.no; 
x-originating-ip: [194.19.86.146]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: bc300ef5-d9e2-4f1b-e1cc-08d6a623980b
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600127)(711020)(4605104)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:VI1PR0501MB2672; 
x-ms-traffictypediagnostic: VI1PR0501MB2672:
x-ms-exchange-purlcount: 2
x-microsoft-exchange-diagnostics: =?utf-8?B?MTtWSTFQUjA1MDFNQjI2NzI7MjM6NnFEN0VpcDJKeWpHcy9FODJaTnBuTW9p?= =?utf-8?B?YWhacHlVWC9jeUJ2OWVYNXUxbUUveVlaU2FJZ3Z1Tm1OUWdzQnhxNUhDTEhP?= =?utf-8?B?OEVhaWNnd2pORmJxYlBhZWNrT0pNWExIMSt6cWVuUVMvV1dmNGhaTElmZnA0?= =?utf-8?B?N2RGd2FrUDd5YVg1aWRRcHJlRW0xZktwTS9yUmNxVnN1bU84RmRvc0IwRnRo?= =?utf-8?B?M0pnL2RabjB3M0FJTWx6di9LVlpEZVhqMGEwRVU1VDF5b1ZXdkVSV2g5c3Vi?= =?utf-8?B?MkNkenNLVlNib0lIdVpjVG1NSDBVS2lnUTVrWXFKR3NFS1BjZE9pa0dEcmVz?= =?utf-8?B?ZHRkSGdURVZKU3BpOTNOSHAyQjdkdzViZlNmRURCU043UUpYRytDN2orQVk2?= =?utf-8?B?dktEeTVUR3M2N2llZmIrNDhBZjNnOTltVnBRL3ByWjJzY0l2czhpWkQwT29C?= =?utf-8?B?UlhjVHVndTJRYWR3Z1g2NU43ZW9jVEFyazZxVk1ySkVQdk1TL2dDTjBNYWJa?= =?utf-8?B?dWFOOWY1NHR5MjJDbDIrSW04cVdpV0hXKzZEOTltMWFQM1o2RE1DZy8zMThK?= =?utf-8?B?OW1rd2wxckdxcmxIdmdiaDhEV1dQQlVTRU5oSVNpaU1GSVZ0YVkyMGgxN2dC?= =?utf-8?B?V2hzRll1NjhYaXhoSXgvdlNYVVhhdTB1aEtOenRxZVk5eTdOODIvSVdhcjFH?= =?utf-8?B?eFRHbVpxTW9RaGF5Nm10R2Z5ampkdml0R0Z1NmRRaGlZN1BBbnhwNzIrcERY?= =?utf-8?B?a2FWL1hOektOWDU4T3c4MExQa2sxREgvME5DQUt5TEU3a05TbWVsaXpSbWZt?= =?utf-8?B?d1E4TFQwbStDdVJhKzhMTFFSeFNVc1Y4czlXKzZoZVAwY0FMRDV5VTZHL0dH?= =?utf-8?B?YlVtN0JkNkM0TTc4VExiTkthdUVqQXZDc3pUVTQ4dDU2cHc4dmZlMUhrdmlD?= =?utf-8?B?Ui9tbFV1c3IyRmt0Z3ZGTXlCL1BScUppS0ZxdW93REJjRWM5REtRcStsL2pl?= =?utf-8?B?UGttSVJFQWRCV041MG5ITE54TnVHdzVCZStNUExLd3BhZFJTQlRGTTNMYWN2?= =?utf-8?B?MUJMK2Nib3Ywck40Q0t1TC80dzFZTTlWeFJSbU4rK3NvOU5aUUVJWjIzWFZl?= =?utf-8?B?RkxXVzNEWWJIdzFaUnJYSmhYQUVnT0xTM283L1Ftc01KSnY1djNSc1FTdUxY?= =?utf-8?B?VUxTamFwckJaZkJJeW1MSTFCRjlNNG53Q0piNnFrNHllSkQ2WCtCV1plK3ZE?= =?utf-8?B?R3RMemw3a1Via1BSWGsvcVVDZCt4V24zbXJPNmtFTjVLaFEyb1l6cFFiMEJp?= =?utf-8?B?WStibGFEWUFpenBnaFM5Q2dxaHFjb1QvQmZITmJHalMvOGtwNkdHd0VNTEs0?= =?utf-8?B?cWRnNityTEhUZkdKYVYyMUk2amZxRSs2YW1oKzFBdmtORkVkMkdQSklyTlFt?= =?utf-8?B?bHdGa1NjZHQzTUQ5TXVnN0lTWWptQ29NS0tORDNzVU53amVCZGFUUGk2WE01?= =?utf-8?B?S3BYaDdKZnAvK3dNK2V3UE1zZUxIUTh4eUF0TTRVc3laYkdJOGhGamhRUHgx?= =?utf-8?B?c01xK3hSUE5heWRkSEdvK0RhL21DT2tDeVFBUEhmbUwzeCtrSFhGR0lET3N5?= =?utf-8?B?M0trS0U5eG5oWDcrWnN1cUJZbzJCWDdqMUs3REpDK1VIOXNjY2RPMENaYmh3?= =?utf-8?B?ZTNlWFRwMG9zTDJ2ZW93MGpoVmVJOXZIUCs5TkxBb09HRkFvdk5oMk5oZUpY?= =?utf-8?B?TUZBdjVoTXc4R3JLa2N3b3hGM2hNNXBDZ3RmZlIrbjl3YnRjVmFuc3B2S1lT?= =?utf-8?B?NDVlU0Iram1oOSt3NENDN0RMQk45TDVOMUxpdVExM3U4VjhwOGUrcUxacU1q?= =?utf-8?Q?IDMnS1Rl2I5KBlIu7tyUhDyk93aogrfpyq?=
x-microsoft-antispam-prvs: <VI1PR0501MB2672CF9B7A973C98F7A15FD6FC480@VI1PR0501MB2672.eurprd05.prod.outlook.com>
x-forefront-prvs: 09730BD177
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(376002)(346002)(39850400004)(396003)(366004)(54094003)(13464003)(199004)(189003)(229853002)(74316002)(53936002)(8676002)(81166006)(33656002)(97736004)(6506007)(53546011)(316002)(7696005)(478600001)(71190400001)(71200400001)(476003)(11346002)(446003)(486006)(81156014)(2501003)(74482002)(7736002)(305945005)(55016002)(6246003)(6436002)(6306002)(9686003)(66066001)(8936002)(2906002)(85182001)(5024004)(186003)(3846002)(256004)(68736007)(6116002)(5660300002)(86362001)(76176011)(14454004)(99286004)(14444005)(966005)(25786009)(110136005)(26005)(52536013)(106356001)(102836004)(105586002)(777600001); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0501MB2672; H:VI1PR0501MB2288.eurprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; 
received-spf: None (protection.outlook.com: nordicsemi.no does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: 2h8OiB/dFQAuKV3GfRuzxm3t/y+7jGIK16Kio9uSiYbFSQ9UPHRUaBp3GLX0K0mmhQl8hD7td2819YwLiGDF7K6PEaCrF64XmtUd+sGuWmgrtezZC8vjzYDOtBRdE0omqe6bmBJu2OU0nyJNj4kKgdGK/Hb4zT5YNWpR54n0X6w9I3U415Q0iWoWpxAniVfSiUeWBieXQxjpTOgZMhtH3hRbrND3nZsxZ/Nq19d7RC+0zqmoV3/iC0spp44CyLopTRgbHhYVnTmG66x7EMtBDJ5auG+wEx3k4VWWF8epRKSAftwhF4VzkKtp9GaDlO8fCDgXJMF9nJk9FFhMd2vZB3B8FRAzpuzgZbzKB2+H0HDuq0w75SkwQO3s/1KVFh2ea3637qTMnT7d9zNTu/R8PPk9tNFhZPxJUggtok2x4HU=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: nordicsemi.no
X-MS-Exchange-CrossTenant-Network-Message-Id: bc300ef5-d9e2-4f1b-e1cc-08d6a623980b
X-MS-Exchange-CrossTenant-originalarrivaltime: 11 Mar 2019 13:15:12.3104 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 28e5afa2-bf6f-419a-8cf6-b31c6e9e5e8d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0501MB2672
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/iZojKq3KBpGrwCwbjY5PPgCQmsA>
Subject: Re: [Suit] Introducing draft-moran-suit-behavioural-manifests-00
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Mar 2019 13:15:19 -0000
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From nobody Mon Mar 11 13:47:39 2019
Return-Path: <internet-drafts@ietf.org>
X-Original-To: suit@ietf.org
Delivered-To: suit@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C3C9F13116B; Mon, 11 Mar 2019 13:47:31 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: <i-d-announce@ietf.org>
Cc: suit@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.93.0
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: suit@ietf.org
Message-ID: <155233725177.23186.4945617763891688062@ietfa.amsl.com>
Date: Mon, 11 Mar 2019 13:47:31 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/0yqiumn_g-kWwr_4Ypt52UdNVNg>
Subject: [Suit] I-D Action: draft-ietf-suit-architecture-03.txt
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Mar 2019 20:47:32 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Software Updates for Internet of Things WG of the IETF.

        Title           : A Firmware Update Architecture for Internet of Things Devices
        Authors         : Brendan Moran
                          Milosch Meriac
                          Hannes Tschofenig
                          David Brown
	Filename        : draft-ietf-suit-architecture-03.txt
	Pages           : 25
	Date            : 2019-03-11

Abstract:
   Vulnerabilities with Internet of Things (IoT) devices have raised the
   need for a solid and secure firmware update mechanism that is also
   suitable for constrained devices.  Incorporating such update
   mechanism to fix vulnerabilities, to update configuration settings as
   well as adding new functionality is recommended by security experts.

   This document lists requirements and describes an architecture for a
   firmware update mechanism suitable for IoT devices.  The architecture
   is agnostic to the transport of the firmware images and associated
   meta-data.

   This version of the document assumes asymmetric cryptography and a
   public key infrastructure.  Future versions may also describe a
   symmetric key approach for very constrained devices.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-suit-architecture/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-suit-architecture-03
https://datatracker.ietf.org/doc/html/draft-ietf-suit-architecture-03

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-suit-architecture-03


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Tue Mar 12 01:14:49 2019
Return-Path: <Hannes.Tschofenig@arm.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F5B8130EE7 for <suit@ietfa.amsl.com>; Tue, 12 Mar 2019 01:14:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mcz5gAywBBsm for <suit@ietfa.amsl.com>; Tue, 12 Mar 2019 01:14:43 -0700 (PDT)
Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on062d.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe02::62d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA511130E64 for <suit@ietf.org>; Tue, 12 Mar 2019 01:14:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com;  s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wmMbVGEgh8W2MfXSudk0V/JIYLxJwxt4s7YPSQ2t+0Y=; b=QC/0zLSSLEUWhGqNHJZsMXC6QWgcjKQOfxBmcXZrCwIa9122vpv/Gz1cwDvcuW+PAzct1UgquzWX/gkRJtH3oZ++pQrWqBexYJkugza0lIJLPcB1xhT6BmkL8S32CSoO4eKQdmeCu6qPNnlvveyfJFbJMKOOnL6bO0jh0I9txHM=
Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1710.eurprd08.prod.outlook.com (10.168.67.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1686.18; Tue, 12 Mar 2019 08:14:40 +0000
Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::dd0a:bfcc:b6ce:8d65]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::dd0a:bfcc:b6ce:8d65%11]) with mapi id 15.20.1686.021; Tue, 12 Mar 2019 08:14:40 +0000
From: Hannes Tschofenig <Hannes.Tschofenig@arm.com>
To: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: Architecture Draft Update
Thread-Index: AdTYq2JRtyNwTJWKRzeGB/THDXlGAw==
Date: Tue, 12 Mar 2019 08:14:39 +0000
Message-ID: <VI1PR0801MB2112E615E1B8EB4093B64126FA490@VI1PR0801MB2112.eurprd08.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; 
x-originating-ip: [80.92.123.154]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 2847fc21-6298-407c-1127-08d6a6c2c64c
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1710; 
x-ms-traffictypediagnostic: VI1PR0801MB1710:
x-ms-exchange-purlcount: 1
x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1710; 20:g7XAo+I4SpZlVfUbIRqR61xEPu2NJvdfMqdUHavvJngurZcdsDR8c3zN+tYJ2258rTvWc727KWmUbfjmz47YcOWH320gluWmbX2cEuTXVyKvey4bfjbogCpWH4Mucj8V16bT6ef/qFw5DQiHaHiGCdmJOEDRJryG9GOy/ttZKVI=
x-microsoft-antispam-prvs: <VI1PR0801MB1710FCBEA05F9635621150ACFA490@VI1PR0801MB1710.eurprd08.prod.outlook.com>
x-forefront-prvs: 09749A275C
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(376002)(346002)(366004)(136003)(396003)(40434004)(53754006)(199004)(189003)(2501003)(476003)(10710500007)(4744005)(71200400001)(71190400001)(7696005)(5660300002)(7116003)(2906002)(81156014)(3846002)(81166006)(86362001)(966005)(606006)(66066001)(72206003)(256004)(3480700005)(53936002)(6436002)(55016002)(6306002)(14454004)(54896002)(5640700003)(9686003)(236005)(486006)(2351001)(33656002)(5024004)(8936002)(478600001)(8676002)(6116002)(1730700003)(790700001)(105586002)(106356001)(7736002)(2420400007)(14444005)(316002)(7110500001)(15650500001)(25786009)(186003)(26005)(102836004)(52536013)(6916009)(99286004)(97736004)(74316002)(6506007)(68736007); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1710; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; 
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: GJt6LeGz9Gwx6f86nx8oXfhe6eIgwWux3TTnSTtNIb/vrX6LapGkUm7pjJUqR3tmlnZ+i/fDW0yzQ1jUi/osg+Mm/YNfOWS7qX6N+zp/5RGBUSqKt3+YyoQr4DagA3h/c75FOMk4ldJ5hEThl+SBTagvCR2EqnrHqhqCdpzWlnMZxduD/iQWBc5wmK4sV99wb9C484bKSc1RpEruqjBNcXOV/2GT8tk5rdDIPI3b4AHMx87IGiEgUGlDDLPEfD/GAUTv85/jNjDag3c+GL1+WskYiw0lJesUFTaY0WDlYx5HDhjr51EnAAwzpZ3er76L2Sl3QPejerxIpqP5+wCqhLMgJcza1AAqonczcJ741WN4gMYR0abA1JDWjrrZ+CXxD3vBkrUy+hMkN/FFOx2SfS6jBxLvMdJ+jgSOH7BUflk=
Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB2112E615E1B8EB4093B64126FA490VI1PR0801MB2112_"
MIME-Version: 1.0
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 2847fc21-6298-407c-1127-08d6a6c2c64c
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Mar 2019 08:14:39.8372 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1710
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/PsTL-0W73F1fJPu3P7v-mNEo9LY>
Subject: [Suit] Architecture Draft Update
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Mar 2019 08:14:47 -0000

--_000_VI1PR0801MB2112E615E1B8EB4093B64126FA490VI1PR0801MB2112_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi all,

I have submitted an update of the architecture draft to talk about bootload=
ers and secure boot in a little bit more details since this was a topic tha=
t surfaced a couple of times in discussions on the list.
Take a look at Section 8 of
https://tools.ietf.org/html/draft-ietf-suit-architecture-03

Ciao
Hannes

IMPORTANT NOTICE: The contents of this email and any attachments are confid=
ential and may also be privileged. If you are not the intended recipient, p=
lease notify the sender immediately and do not disclose the contents to any=
 other person, use it for any purpose, or store or copy the information in =
any medium. Thank you.

--_000_VI1PR0801MB2112E615E1B8EB4093B64126FA490VI1PR0801MB2112_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:DengXian;
	panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:"\@DengXian";
	panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:#0563C1;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:#954F72;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri",sans-serif;
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri",sans-serif;}
@page WordSection1
	{size:612.0pt 792.0pt;
	margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-GB" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span lang=3D"EN-US">Hi all, <o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">I have submitted an update of t=
he architecture draft to talk about bootloaders and secure boot in a little=
 bit more details since this was a topic that surfaced a couple of times in=
 discussions on the list.
<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Take a look at Section 8 of <o:=
p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><a href=3D"https://tools.ietf.o=
rg/html/draft-ietf-suit-architecture-03">https://tools.ietf.org/html/draft-=
ietf-suit-architecture-03</a><o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Ciao<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US">Hannes<o:p></o:p></span></p>
<p class=3D"MsoNormal"><span lang=3D"EN-US"><o:p>&nbsp;</o:p></span></p>
</div>
IMPORTANT NOTICE: The contents of this email and any attachments are confid=
ential and may also be privileged. If you are not the intended recipient, p=
lease notify the sender immediately and do not disclose the contents to any=
 other person, use it for any purpose,
 or store or copy the information in any medium. Thank you.
</body>
</html>

--_000_VI1PR0801MB2112E615E1B8EB4093B64126FA490VI1PR0801MB2112_--


From nobody Tue Mar 12 03:02:19 2019
Return-Path: <Brendan.Moran@arm.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 616BA130F13 for <suit@ietfa.amsl.com>; Tue, 12 Mar 2019 03:02:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ItqvfwRcWeMy for <suit@ietfa.amsl.com>; Tue, 12 Mar 2019 03:02:14 -0700 (PDT)
Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on0608.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe1f::608]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AECDA1274D0 for <suit@ietf.org>; Tue, 12 Mar 2019 03:02:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com;  s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=v7aIzvb3M1gI20/b5Jkra/xhmoNC5QhrHIl5Z9lpZKE=; b=N9kp79bLev3CccxPd57bESlFp6LGj22JlkCF3gpP450D7Tml9J7rFB1OaTUXLTO5VvM6je1xuD7Oe832B9oHaeCy8zUiNR0Bv2uGrpYbntj9Eq2M8JIDPZvnIXrGgNJMG4KGe1yGHzMeEiqRsPpIV6/1qFbmtNCJpidU2k+QGNY=
Received: from DB6PR0801MB1879.eurprd08.prod.outlook.com (10.168.84.137) by DB6PR0801MB1254.eurprd08.prod.outlook.com (10.168.11.8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1686.18; Tue, 12 Mar 2019 10:02:10 +0000
Received: from DB6PR0801MB1879.eurprd08.prod.outlook.com ([fe80::b135:ad5e:4ab2:48f6]) by DB6PR0801MB1879.eurprd08.prod.outlook.com ([fe80::b135:ad5e:4ab2:48f6%7]) with mapi id 15.20.1686.021; Tue, 12 Mar 2019 10:02:10 +0000
From: Brendan Moran <Brendan.Moran@arm.com>
To: =?utf-8?B?S3ZhbXRyw7gsIEZyYW5rIEF1ZHVu?= <frank.kvamtro@nordicsemi.no>
CC: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: Introducing draft-moran-suit-behavioural-manifests-00
Thread-Index: AQHU1b7FshUEgr2F5EypCp48YE0jsqYGbW0AgAFcZgA=
Date: Tue, 12 Mar 2019 10:02:10 +0000
Message-ID: <64367D8F-3B10-46D4-B133-74E4E056804A@arm.com>
References: <A65149C9-4CEF-4343-9B03-20BC8E60288E@arm.com> <VI1PR0501MB22885868BFB301CA087E621DFC480@VI1PR0501MB2288.eurprd05.prod.outlook.com>
In-Reply-To: <VI1PR0501MB22885868BFB301CA087E621DFC480@VI1PR0501MB2288.eurprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-mailer: Apple Mail (2.3445.102.3)
x-originating-ip: [217.140.106.51]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: a7051033-5cdb-4af3-affd-08d6a6d1cb28
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7153060)(7193020); SRVR:DB6PR0801MB1254; 
x-ms-traffictypediagnostic: DB6PR0801MB1254:
x-ms-exchange-purlcount: 2
x-microsoft-exchange-diagnostics: 1; DB6PR0801MB1254; 20:e5peaw24y5JAPyPiP5iuLXRBuwUC5rzJHtTB39aahVfo4IQ6qajiUSqZoMZDb7aBylY3LJ47EEHfKHKfk31QpSdFtUZi0fAJjEg6JAeKGdaKycuU9IOaSy/7zwCjgyBfN73pJhQNtu7kfceyQyssgyk4sdIhiJN+W9JcZwFLsd0=
x-microsoft-antispam-prvs: <DB6PR0801MB1254E0FF58C29C35066F8DB9EA490@DB6PR0801MB1254.eurprd08.prod.outlook.com>
x-forefront-prvs: 09749A275C
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(376002)(346002)(396003)(39860400002)(366004)(54094003)(189003)(199004)(13464003)(40434004)(5660300002)(2906002)(478600001)(71200400001)(71190400001)(33656002)(66066001)(97736004)(53936002)(57306001)(6306002)(105586002)(106356001)(966005)(83716004)(14454004)(99286004)(305945005)(102836004)(6512007)(72206003)(6916009)(7736002)(36756003)(446003)(2616005)(53546011)(486006)(11346002)(229853002)(6116002)(76176011)(82746002)(3846002)(6506007)(6436002)(316002)(256004)(5024004)(14444005)(6246003)(186003)(4326008)(68736007)(25786009)(476003)(81166006)(81156014)(8676002)(6346003)(50226002)(6486002)(26005)(8936002)(86362001); DIR:OUT; SFP:1101; SCL:1; SRVR:DB6PR0801MB1254; H:DB6PR0801MB1879.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; 
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brendan.Moran@arm.com; 
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: 7Muuddo4/wR1idi+zW3uphSJhvU9lkuGaVqQw6Syo3DwFuqOLa/8w5sUGF8cMhAAuKj4vLTPte10AT3xo0sGeAQDmc+4FWS3YREObLtdwi/A/o0nrWzWTRqvprTeZMKmwS5ForDuYwYEGs7X+MJuVJ9YEHslotgBzA+9pqDkLSdKTvkQNApfnsTyzDNoyv8i0SeIQHYfx7QuCHDBOCO95hlfor24nA7QwFgR86R7hfh24FH93cpN7r/katBiT8qFfLieGLB0TY2NgkJxzFGODYdMkwtxUjMra9jTaBCtXTZ8wRgsXKaSPCnCJlwpzg8BqsB7f+PVbSiRyzlYt+yGCRgn1v+zbumCT1TrFMFgNoM6kIGNaJ8NfzUtMPatCiQPnc/54lAfwY0D/HxMNjTLR1uBUKHSsyI3VeVYl5gOqdc=
Content-Type: text/plain; charset="utf-8"
Content-ID: <9CF309100BDD174BBC9C9EDA4A7A8651@eurprd08.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-Network-Message-Id: a7051033-5cdb-4af3-affd-08d6a6d1cb28
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Mar 2019 10:02:10.5400 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0801MB1254
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/QAsZ4mwfYLAV7AmlTjD4rsVZhUU>
Subject: Re: [Suit] Introducing draft-moran-suit-behavioural-manifests-00
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Mar 2019 10:02:17 -0000
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From nobody Tue Mar 12 03:34:55 2019
Return-Path: <Brendan.Moran@arm.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C70F129A85 for <suit@ietfa.amsl.com>; Tue, 12 Mar 2019 03:34:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SckOrVJic_vD for <suit@ietfa.amsl.com>; Tue, 12 Mar 2019 03:34:48 -0700 (PDT)
Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70074.outbound.protection.outlook.com [40.107.7.74]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4385D12E036 for <suit@ietf.org>; Tue, 12 Mar 2019 03:34:48 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com;  s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=L5SE6HwUqRh5fvRb4xBxIIHrw/6t9ACxoITchumIBJQ=; b=P1xg5kZuB09u7N0gKsDjVYJ2DSCLXLPvh8rwVzMHamPYgfYT80RumTviwMlZ4Mn43c20ks6o7eIN7z2IlFY9iDQK2b8Y4MnJ9sd9XoqqyIN+Xnj0oOTBE42rIube4nDUR/QVEolgY1AUQSLp+OWVMmnTkjnV8YrnIWbMLV3B2WM=
Received: from DB6PR0801MB1879.eurprd08.prod.outlook.com (10.168.84.137) by DB6PR0801MB1720.eurprd08.prod.outlook.com (10.169.220.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1686.18; Tue, 12 Mar 2019 10:34:45 +0000
Received: from DB6PR0801MB1879.eurprd08.prod.outlook.com ([fe80::b135:ad5e:4ab2:48f6]) by DB6PR0801MB1879.eurprd08.prod.outlook.com ([fe80::b135:ad5e:4ab2:48f6%7]) with mapi id 15.20.1686.021; Tue, 12 Mar 2019 10:34:45 +0000
From: Brendan Moran <Brendan.Moran@arm.com>
To: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: Introducing draft-moran-suit-manifest-04
Thread-Index: AQHU2L81dzELNCQKcEaCHfQ8cPehAw==
Date: Tue, 12 Mar 2019 10:34:44 +0000
Message-ID: <16EC7DB9-1649-4A86-A370-F77CB03305AC@arm.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-mailer: Apple Mail (2.3445.102.3)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brendan.Moran@arm.com; 
x-originating-ip: [217.140.106.54]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: fa3f3487-495f-4211-b0dd-08d6a6d65815
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7153060)(7193020); SRVR:DB6PR0801MB1720; 
x-ms-traffictypediagnostic: DB6PR0801MB1720:
x-ms-exchange-purlcount: 1
x-microsoft-exchange-diagnostics: 1; DB6PR0801MB1720; 20:lTvBHnINN+6taNcuLp1glx4cT30gSs514rgYeNP6VNuDqZnz7ztB9lrZ3TOgjVCH+uz1O4AulBdI/XMVLvz+MthdkqqlLWc2cTqJ1R7yYhhZXlGdEnvnaYULRzKfu6WjsfLr7WO1qdVBdVzOweunCxGXUZ0Z5FsKyFVi4guDrDs=
x-microsoft-antispam-prvs: <DB6PR0801MB1720D43FC361F3EC4648AE3FEA490@DB6PR0801MB1720.eurprd08.prod.outlook.com>
x-forefront-prvs: 09749A275C
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(136003)(346002)(376002)(396003)(39860400002)(40434004)(189003)(199004)(2616005)(476003)(966005)(72206003)(105586002)(5660300002)(50226002)(2351001)(8936002)(86362001)(82746002)(36756003)(14454004)(2501003)(6116002)(486006)(3846002)(478600001)(25786009)(68736007)(83716004)(71200400001)(71190400001)(6486002)(53936002)(33656002)(5640700003)(6916009)(1730700003)(57306001)(8676002)(97736004)(2906002)(99286004)(305945005)(6436002)(316002)(106356001)(7736002)(6512007)(102836004)(6506007)(256004)(66066001)(5024004)(14444005)(6306002)(26005)(81166006)(186003)(81156014); DIR:OUT; SFP:1101; SCL:1; SRVR:DB6PR0801MB1720; H:DB6PR0801MB1879.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; 
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: Xqh9Kil2X+VuO4JiToqctiWLh9ssz951VrAyEHJ/n3w/ybk9ro+qx/DeyFJDri6eJHmhCSmv02s1GjteS3eL4DWO4FMDTvgcSa2aAawZRtSTOqflJpuE6m4TXe5FlrTcawtO8CmlQnK7I5rg0ey4e0cLLh/OgODHuml7XLIz67JR9Vr63BuaDky7/LjHxMjkbl7XHDoZSrTfVXmX1yF8hwfVpBfrOsbcYTuX/DltGJxKAIG3NqwLXQVxYHBnoBjewU/22q7IgkSsnAvhMXYO8dIBRyKBALHf0PSCNBOKQfjBsldXCC7hggDY+95WXSPeUOZoH+MAXNEr0joTFmwu17oeuT43k+MaCghAsfhZEtJhwdL5/H8iCP3P1kOuC/uxPXM+tJvC9EP0waESGaK6d0xvhOP0ItiVgbS8juQTgUw=
Content-Type: text/plain; charset="us-ascii"
Content-ID: <A9C77B9D0894B04088D66427C0FEDA3B@eurprd08.prod.outlook.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-Network-Message-Id: fa3f3487-495f-4211-b0dd-08d6a6d65815
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Mar 2019 10:34:44.9731 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0801MB1720
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/Oc6Vui-4Oa84OWvzHha3nIt6WPQ>
Subject: [Suit] Introducing draft-moran-suit-manifest-04
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Mar 2019 10:34:51 -0000

draft-moran-suit-manifest-04 has now been published.

https://tools.ietf.org/html/draft-moran-suit-manifest-04

This draft is the result of combining the information model in draft-moran-=
suit-behavioural-manifests-00 (the 01 version fixes example formatting only=
) with that in draft-ietf-suit-information-model, then serialising the resu=
lt in CBOR. This is a significant departure from previous drafts. It attemp=
ts to preserve flexibility, fully define the behaviour of recipient, simpli=
fy the manifest structure, reduce code-size of the recipient, and reduce th=
e size of the manifest. This ambitious set of goals required a significant =
change in approach as compared to draft-moran-suit-manifest-03 and before. =
In order to outline the approach clearly, we have separately published draf=
t-moran-suit-behavioural-manifests-00. draft-moran-suit-manifest-04 focuses=
 more on the serialisation of the manifest.

I look forward to discussing this draft in more detail.

Best Regards,
Brendan
IMPORTANT NOTICE: The contents of this email and any attachments are confid=
ential and may also be privileged. If you are not the intended recipient, p=
lease notify the sender immediately and do not disclose the contents to any=
 other person, use it for any purpose, or store or copy the information in =
any medium. Thank you.


From nobody Tue Mar 12 04:27:44 2019
Return-Path: <cabo@tzi.org>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4FBB4130DE6 for <suit@ietfa.amsl.com>; Tue, 12 Mar 2019 04:27:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level: 
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L8qSa_S2ryeY for <suit@ietfa.amsl.com>; Tue, 12 Mar 2019 04:27:41 -0700 (PDT)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E6970130F16 for <suit@ietf.org>; Tue, 12 Mar 2019 04:27:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost2.informatik.uni-bremen.de [IPv6:2001:638:708:30c8:406a:91ff:fe74:f2b7]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id x2CBRUqS010680; Tue, 12 Mar 2019 12:27:35 +0100 (CET)
Received: from client-0070.vpn.uni-bremen.de (client-0070.vpn.uni-bremen.de [134.102.107.70]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 44JXkp49M0z1Bp8; Tue, 12 Mar 2019 12:27:30 +0100 (CET)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <64367D8F-3B10-46D4-B133-74E4E056804A@arm.com>
Date: Tue, 12 Mar 2019 12:27:29 +0100
Cc: =?utf-8?B?Ikt2YW10csO4LCBGcmFuayBBdWR1biI=?= <frank.kvamtro@nordicsemi.no>,  "suit@ietf.org" <suit@ietf.org>
X-Mao-Original-Outgoing-Id: 574082847.981697-f27970a4ed15f8a618225f29676e69f4
Content-Transfer-Encoding: quoted-printable
Message-Id: <9941AE75-5071-4F3E-ABDD-A35C4EDFD714@tzi.org>
References: <A65149C9-4CEF-4343-9B03-20BC8E60288E@arm.com> <VI1PR0501MB22885868BFB301CA087E621DFC480@VI1PR0501MB2288.eurprd05.prod.outlook.com> <64367D8F-3B10-46D4-B133-74E4E056804A@arm.com>
To: Brendan Moran <Brendan.Moran@arm.com>
X-Mailer: Apple Mail (2.3445.9.1)
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/xgbfGrPyJRRMjHMhFvFTocgdbBA>
Subject: Re: [Suit] Introducing draft-moran-suit-behavioural-manifests-00
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Mar 2019 11:27:43 -0000

On Mar 12, 2019, at 11:02, Brendan Moran <Brendan.Moran@arm.com> wrote:
>=20
> I think you=E2=80=99re right, the draft should, at least, specify that =
the behavioural document, as a whole, needs to be authenticated.

=E2=80=A6 and authorized.

The idea to turn the update manifest into an update script (which is a =
name I=E2=80=99d prefer then) and let that do what it wants to do, once =
authorization says that it should be able to, sounds good.
A few parameters go into that authorization.  They can be manifest-like =
external parameters, or they can be parameters to one or more =
=E2=80=9Cunlock=E2=80=9D commands that actually establish the =
authorization.

Gr=C3=BC=C3=9Fe, Carsten


From nobody Tue Mar 12 05:00:28 2019
Return-Path: <frank.kvamtro@nordicsemi.no>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 859BD130F24 for <suit@ietfa.amsl.com>; Tue, 12 Mar 2019 05:00:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.922
X-Spam-Level: 
X-Spam-Status: No, score=-0.922 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FROM_EXCESS_BASE64=0.979, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nordicsemi.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yArh24Q8K9Ny for <suit@ietfa.amsl.com>; Tue, 12 Mar 2019 05:00:23 -0700 (PDT)
Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40049.outbound.protection.outlook.com [40.107.4.49]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 11067130E6C for <suit@ietf.org>; Tue, 12 Mar 2019 05:00:22 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nordicsemi.onmicrosoft.com; s=selector1-nordicsemi-no; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=saaWsrrz8a4zIwEwPirsbVDlNoV6VmNI05StU57TFBE=; b=wxpyGweucHHQlV8PPn2ERkhRts/YZmXP0VVTe0M67d4+JIxuJxKIMsHKkfhSLn4W3d1DdAzwLLoTmhKL/etY7LXlSe3CZt5wwTmLxu9iMYcfi7Oeu1xLDK+g/3NQ05MBI15+wGWu12CW9TpUnEDYIkqIi2gMdx15kRSodzJYTIo=
Received: from VI1PR0501MB2288.eurprd05.prod.outlook.com (10.169.135.13) by VI1PR0501MB2704.eurprd05.prod.outlook.com (10.172.15.141) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1686.19; Tue, 12 Mar 2019 12:00:14 +0000
Received: from VI1PR0501MB2288.eurprd05.prod.outlook.com ([fe80::b00c:a435:903a:2c88]) by VI1PR0501MB2288.eurprd05.prod.outlook.com ([fe80::b00c:a435:903a:2c88%8]) with mapi id 15.20.1709.011; Tue, 12 Mar 2019 12:00:14 +0000
From: =?utf-8?B?S3ZhbXRyw7gsIEZyYW5rIEF1ZHVu?= <frank.kvamtro@nordicsemi.no>
To: Brendan Moran <Brendan.Moran@arm.com>
CC: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: Introducing draft-moran-suit-behavioural-manifests-00
Thread-Index: AQHU1b7FUHOtQLPEbkmOXwapehVVpKYGW6HwgAFuMgCAABz3EA==
Date: Tue, 12 Mar 2019 12:00:14 +0000
Message-ID: <VI1PR0501MB22880D5928006E6341DFCBF2FC490@VI1PR0501MB2288.eurprd05.prod.outlook.com>
References: <A65149C9-4CEF-4343-9B03-20BC8E60288E@arm.com> <VI1PR0501MB22885868BFB301CA087E621DFC480@VI1PR0501MB2288.eurprd05.prod.outlook.com> <64367D8F-3B10-46D4-B133-74E4E056804A@arm.com>
In-Reply-To: <64367D8F-3B10-46D4-B133-74E4E056804A@arm.com>
Accept-Language: nb-NO, en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
authentication-results: spf=none (sender IP is ) smtp.mailfrom=frank.kvamtro@nordicsemi.no; 
x-originating-ip: [194.19.86.146]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 608e4cc1-2aec-4891-f3fb-08d6a6e2494f
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(2017052603328)(7153060)(7193020); SRVR:VI1PR0501MB2704; 
x-ms-traffictypediagnostic: VI1PR0501MB2704:
x-ms-exchange-purlcount: 2
x-microsoft-exchange-diagnostics: =?utf-8?B?MTtWSTFQUjA1MDFNQjI3MDQ7MjM6ZXl2QkJ6VWJUY0QyL2VyOXpUWnhlcTV5?= =?utf-8?B?cHpKalNnSmNGbWJrUDg1eFBBUm1hODQrUzd5UEtmQnhqT1MweTNvR1RvdkJs?= =?utf-8?B?UEpEZkNpR0g5amdZT3duWDEySDkxbmcwZ09tWnR1dzlrUWdIS0pmMG91UjJQ?= =?utf-8?B?OVNRd1lSTms1S3pJNC84MWVYNkZhMGpiZzhac0ZzVUEza21kRUU4UC9qY2xU?= =?utf-8?B?Q3M4dXRuOE43WFFueEYyUmx0SEloYkF5M2NuWlFUNVpmMmhBTEdYem5RRlJm?= =?utf-8?B?ZGZvTGtoaFNUZUdZYStyM1hCQ3dMd0ZjbHJoUzJhL2lKQnUrbTl3c3pVcjNq?= =?utf-8?B?M01idW9FV01ndTBGOU5RcGp3Y0k4RmUyYUFQSDEyRXpHVE9uSTVPc215anFh?= =?utf-8?B?MXAzVy9KUFF1YjJKeHBOUGh6cWxwYkJuS3hRZStlakxNTnBSdWFVVmhOZnZG?= =?utf-8?B?Y0YwUWltMjZWNlFHR1pzT0dBckJuRTNsOXBXOWd5QjJIZU12S1BzMDduQm1u?= =?utf-8?B?TnR4WUUwWXdzRDNZYzlqdkNPU0JwcUoxQzlTZlBaQm1oenBQbFMyTXhsdEMv?= =?utf-8?B?akZoeWxDTmE1NVovL3ZIZWJFQ24yeDQ2NzRtb3F4MkxqdUNEYmdmSC9FYjNH?= =?utf-8?B?ZldoMVVodi84M3MvMDY0ZkdOY3kzbE1CeENrWmxVOEpsNm1Sc3lqdS82dUEz?= =?utf-8?B?bTZDOXBjYVlWTG9zd2NvNHhVY1htR1luWVBRakY2RnRPZ3dGZXRmR3dlUFFX?= =?utf-8?B?NlNKUzlybzVMS0krazRlUUZyRk9WRmYzd0dvMkdHUUY2VVovMHJ6c1VBdm5H?= =?utf-8?B?MGhBUGNYVHRUZzJRcDFvdjhzSk1zZlkyYnA3WGxqZDh0YkZrdUxSREZkUStP?= =?utf-8?B?THNsY3hmUFV1SWE4eFBVNDNMMy9nRUN0RFgwVS8vT05WOVZIMjRzeEIyZEpJ?= =?utf-8?B?dEtPcmRtaUVONWRuYnhoWVNSanp1SGYvZitrSGVkbEpWVG9PL1AxZS82Z2VX?= =?utf-8?B?OWtWZ2YySU1NV3ZQdktrSmpBSllOZlZuODNuT2l1cHFVWEJKOU9CMzNBdnc4?= =?utf-8?B?Vy9sa3lQMjF2c21vanMrSTVMRnRtTXk3QmJ1bXc3UitKZ1FYTHY0TkE3am4x?= =?utf-8?B?blN0OFZHSk4zMWEwVUFJeTNad3BDc21CNkx3cXFMNzExSENoTldMbUs3RHdi?= =?utf-8?B?cnBLQjJGSFJvNjN4YjZRc2pZKzFNRFNwSGNRVEpRQktROUdRUExDY3JmZlcw?= =?utf-8?B?S1dybG5KempKMmh3VXZWblRHMTM3Y0Y5Y0pQU0ZHcXBza1Nub1BlSk1JRldB?= =?utf-8?B?WG9EV2JXTHlFVUhNM0NVN0crMWhtRi9hYlpsNWt2S2lucW0wdFg2Tk1xaHk1?= =?utf-8?B?NkhCTkVxZzFsQ2pnVGJwTGw1Qm5RakkzRG0wN1d4eERNYTY2UEUxNVJ6bC9i?= =?utf-8?B?ZzZKYUc3UVBjenJaNVBIcFJ4U003a3FHamVoRmNBWVhHdDA3cU5ZVnZLTW9D?= =?utf-8?B?V1J4ZUJzcUFHMUYvNmVlZjZpcXBmanJaQ2hYZ0lFMC9nZDFRNHpxdW4wM1Vm?= =?utf-8?B?N2ZUZk5jQlREc0FHZEdwdmFYOU02VThsMENDZ0crUmlPVk1KMm9uUVRBREV6?= =?utf-8?B?Z0JFT2lZeWVpSU5JeDkrMmVzSzcvME1hczVKbURvdW1adXE3bXduZEdKRnVQ?= =?utf-8?B?dFhOYVBrZVhtTTJaclVJOWFGLytNS2cvVkxyTi9nY242djl6QnBiQmV6K2Vm?= =?utf-8?B?UXVUWEFRZjFUSzVZNmZ2aFl6VEVDZitnVUxtLzE4K1QxS3FXV0hmTmRhT2Zr?= =?utf-8?B?QlVWQU82R0NCbmZaVHdHdDBQTWNYZVhxNVZWemRBMGV0eXc1d1ltNlFSOG1x?= =?utf-8?Q?o1iTOIj5fIUiW/pBRnLIfdZWEn0GRlPn4W?=
x-microsoft-antispam-prvs: <VI1PR0501MB2704917EFCFDA1A9BB9A9949FC490@VI1PR0501MB2704.eurprd05.prod.outlook.com>
x-forefront-prvs: 09749A275C
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(376002)(39850400004)(136003)(346002)(396003)(13464003)(199004)(189003)(54094003)(6246003)(74482002)(2906002)(106356001)(97736004)(6116002)(68736007)(486006)(105586002)(66066001)(3846002)(6306002)(53936002)(86362001)(99286004)(9686003)(55016002)(25786009)(8676002)(81156014)(316002)(76176011)(81166006)(229853002)(102836004)(11346002)(4326008)(14454004)(7696005)(6506007)(186003)(5660300002)(256004)(5024004)(6436002)(14444005)(53546011)(8936002)(52536013)(85182001)(478600001)(7736002)(26005)(6916009)(446003)(476003)(74316002)(71200400001)(966005)(33656002)(71190400001)(305945005)(777600001); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0501MB2704; H:VI1PR0501MB2288.eurprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; 
received-spf: None (protection.outlook.com: nordicsemi.no does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: vT1gjxpvyHp/sXseNSbuZJPtCa99fhiwkmqfkYjYvAl/xxPEXPTqjPcRM8Y+61iem2LXCUouYDSxsBJGsIrb4IN/dQ5luy9WqTHdpMHSXn+4+jtS8hWqCB+SyKEhou/fU2aLN64lmGwo4cxzKqDK3zEklnsTAY9b7NabgSEtOvRcvuGvk7mHbIC8Cpw702bLxnpRYkDtw4DVgy8aEGfUHOEbUsQpTF0426cxJvj1LuvmJgWhQiNaSjmKoLXDzzSp08TW5qsxkTx7VTDMVl3fLUS31R3pM91xRBlAbJACbCObYFPdrOT4Ue4BdSz/7fndNctcn9SZeFRLsUZ5HgBV21yDrOmHKGMpR2pB6lIxhqXr2soKk+SWnUC2wXKFue00M644W38Kr1RZLIbzxh5c+KqhCMM3ImzQOdsWRULGckA=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: nordicsemi.no
X-MS-Exchange-CrossTenant-Network-Message-Id: 608e4cc1-2aec-4891-f3fb-08d6a6e2494f
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Mar 2019 12:00:14.1789 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 28e5afa2-bf6f-419a-8cf6-b31c6e9e5e8d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0501MB2704
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/A2-OQ9xQB65YnlrBbge5qxIdCdg>
Subject: Re: [Suit] Introducing draft-moran-suit-behavioural-manifests-00
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Mar 2019 12:00:27 -0000
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From nobody Tue Mar 12 16:38:43 2019
Return-Path: <david.brown@linaro.org>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CDD70128CE4 for <suit@ietfa.amsl.com>; Tue, 12 Mar 2019 16:38:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=linaro.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r-ktj0e4TGwQ for <suit@ietfa.amsl.com>; Tue, 12 Mar 2019 16:38:39 -0700 (PDT)
Received: from mail-qt1-x831.google.com (mail-qt1-x831.google.com [IPv6:2607:f8b0:4864:20::831]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A2BA5128B33 for <suit@ietf.org>; Tue, 12 Mar 2019 16:38:39 -0700 (PDT)
Received: by mail-qt1-x831.google.com with SMTP id v20so4663317qtv.12 for <suit@ietf.org>; Tue, 12 Mar 2019 16:38:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google;  h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=15QUJzdNkk7k6QiPcjtBx+QYmAFYDONZ9cm9mhbELHQ=; b=LNh/A/ja6WmqByNAqN6kKdz5/F5gB4DvuSWaqq9lkxKOeidPS76J81w+7kWwRxlPPz hjVwcDS28pyDdoyPTYuVAYTq50q6mpjAxfvjajyjw1pJ4tDO/fSdhh9+Gt17YVo8VyL1 ssZN4uUZxsbBKpnbZfJV864GEqLFxm2I4uJhREhuTjHHrGMNfzqC7cdtpHQ+4AcgEFYK ZII8vCT+W0FnQQ7i0xSCr/I4UIWk8vruWYSdZvxr6IuzsmGmU/Ey8d9hBJXISVtBQCyC sFirgI8vG/KuqnZahl+DhxR05pjccHRAQWvotALJkoOSTJpUUAc/JPaKHO/2IKRvg/yg MbwQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=15QUJzdNkk7k6QiPcjtBx+QYmAFYDONZ9cm9mhbELHQ=; b=ZTJPilJN6Y5RIA6arAvtNY+BtF5oxzIoNWh9/WlIqT7ENt8zDMUtKXhmgvvXMRz7mJ OAbkyJL0NLMJhL8vV9YepquAbgN4utXM5+JW1f+VxouJCrx9PIdjOyHcoccRV9hdzCKh ZjrFJLitc/vD4SJRxUJTXboz0k/eXhm/xQHfpuNpSDUvMyXsYgSfuOR/Ewfrn11jdgoZ SmohwbnnIeLTP1Y7vATJtPY2WT9okeZJrzSwrgeofdHYbSWMYu6pXJXjP5pEc578y9ta TGerY6qn9UNqChd1AZxxjT4IZb+vAbwQxDjaphpCG73DQmn6S4lZExGjUo4rtQYLNOJf OF5g==
X-Gm-Message-State: APjAAAWY56MQiw9Fpgynv5myTOdoXjqscPbljxxIqXqH6rgx+boA316f M570pNlfM1i9/r2wBGx1FkBJLQ==
X-Google-Smtp-Source: APXvYqwHNdoaUft2KxVjidJEemCJaDOtWW+d5U9aoUX6aXYAo3540nbMmOOUcxVA/2YezKsAjNCR3g==
X-Received: by 2002:ac8:1b38:: with SMTP id y53mr3035683qtj.130.1552433918603;  Tue, 12 Mar 2019 16:38:38 -0700 (PDT)
Received: from davidb.org (cn-co-b07400e8c3-142422-1.tingfiber.com. [64.98.48.55]) by smtp.gmail.com with ESMTPSA id p6sm1297671qkk.29.2019.03.12.16.38.36 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 12 Mar 2019 16:38:37 -0700 (PDT)
Date: Tue, 12 Mar 2019 17:38:34 -0600
From: David Brown <david.brown@linaro.org>
To: Brendan Moran <Brendan.Moran@arm.com>
Cc: "suit@ietf.org" <suit@ietf.org>
Message-ID: <20190312233834.GA30645@davidb.org>
References: <16EC7DB9-1649-4A86-A370-F77CB03305AC@arm.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
In-Reply-To: <16EC7DB9-1649-4A86-A370-F77CB03305AC@arm.com>
User-Agent: Mutt/1.10.1 (2018-07-13)
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/BhuRaSyALVU8AToWd7hLHqVp3AM>
Subject: Re: [Suit] Introducing draft-moran-suit-manifest-04
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Mar 2019 23:38:42 -0000

On Tue, Mar 12, 2019 at 10:34:44AM +0000, Brendan Moran wrote:

>https://tools.ietf.org/html/draft-moran-suit-manifest-04

>I look forward to discussing this draft in more detail.

So far, my initial impression is that this is a significant
improvement.  I will be spending some time changing my prototype
implementation to work as a manifest "executor" instead of something
that tries to extract data from the manifest to something that
evaluates the manifest.  In the process, I hope to produce some sample
manifests that show the current, as well as in-development multi-image
operations that happen within MCUboot.

One of the push-backs I got to SUIT on the MCUboot project was a
desire to maintain the same semantics between a SUIT manifest and the
existing simplistic manifests.  Unfortunately, that isn't really a
meaningful thing to do with this new manifest format.  However, I
think this new approach is enough of an improvement, that I may argue
to just move to the new SUIT semantics.

I'm sure I'll have more feedback as I work on an implementation.

David


From nobody Fri Mar 15 09:34:11 2019
Return-Path: <david.brown@linaro.org>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E8AF612788F for <suit@ietfa.amsl.com>; Fri, 15 Mar 2019 09:34:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=linaro.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rPQZRbuz2aHw for <suit@ietfa.amsl.com>; Fri, 15 Mar 2019 09:34:07 -0700 (PDT)
Received: from mail-qk1-x72e.google.com (mail-qk1-x72e.google.com [IPv6:2607:f8b0:4864:20::72e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9C885129284 for <suit@ietf.org>; Fri, 15 Mar 2019 09:34:07 -0700 (PDT)
Received: by mail-qk1-x72e.google.com with SMTP id z76so5856705qkb.12 for <suit@ietf.org>; Fri, 15 Mar 2019 09:34:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google;  h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=p/tAkprrogKC1o3ouMfKPU3ZwISSyhhxLgzAUi4kgNE=; b=z6StOYzwZP0kAyYC+OU6FRg1pWlcdvHs/h9DG5iXs+N5x2eCS1CfMWM6k+CPv1mn66 xo1Y1edgKUUNqcd5hJ8ccYyPooYZ8a/0TBND05v3M5PYTxy+lpJ2p3TsELzR3wOM4uN1 jWqDoirupmHboqwK9D1NA7zyDhnric/WgkC7jH1bH4RFcIN5JGM7L/5CTx7tpZ2U0Lq6 t8119jWmWzjn00Ldqfr7EDjleDEOfvSm6GGSWGiKOStaUS9wjLEpux2bRuvzwTrncwEH 90nUeqKXOAVC8PLrsFIWtlB6r4KO5n2C87ZkhihcQg5ZOMAorQU4cqtUpt7qUuzAHWUk +ujg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=p/tAkprrogKC1o3ouMfKPU3ZwISSyhhxLgzAUi4kgNE=; b=dnyPitwrLD9t6ylmpCswEn9kb5/B2x3PKtsGkvZ52jA41uyv93jSfw4vIEpRR/lvqx +WYoMa7uS4yP76KVKOn3B+89QZk7p6GKK3IxLP/3zFShfpk6zdC/xXS5LqiaTBErAUh7 csPoVfkhCmR2DxsYWbiKJqNHbjgCoePJo3PmXsqcdo/mifUSjNjmMefKLFTepH3GDlsi H2Obt7/LJm2c3rsKQHYr5zr4nnsHkRU7FB2EaZxrLNQdfjFsb4s4V6qnV8ywmOaVAugC 01MTX88P3kqQlhLvixO5ukxU22JLX3NszwqbBN/qzWwwq8rCmhBmpEiUlXtRgZKTP0SB Ggmg==
X-Gm-Message-State: APjAAAWR4K3Dm5I8AIFiE86jbwKTqR48WFM58Yq4j+oK/YTKisAs9DuN tf0dYx9UsEcS+yAWh+lIZnUgty4fojcFVg==
X-Google-Smtp-Source: APXvYqwuVgk7iCtkzAquEinIyIjvxZPBtJFUDcqW7DHaQ7Bb8d9y8zD3nWdct+MEYU98CuIUyeVYWw==
X-Received: by 2002:a05:620a:123b:: with SMTP id v27mr3321711qkj.29.1552667646396;  Fri, 15 Mar 2019 09:34:06 -0700 (PDT)
Received: from davidb.org (cn-co-b07400e8c3-142422-1.tingfiber.com. [64.98.48.55]) by smtp.gmail.com with ESMTPSA id a73sm1391318qkb.66.2019.03.15.09.34.04 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 15 Mar 2019 09:34:05 -0700 (PDT)
Date: Fri, 15 Mar 2019 10:34:02 -0600
From: David Brown <david.brown@linaro.org>
To: Brendan Moran <Brendan.Moran@arm.com>
Cc: "suit@ietf.org" <suit@ietf.org>
Message-ID: <20190315163402.GA25574@davidb.org>
References: <16EC7DB9-1649-4A86-A370-F77CB03305AC@arm.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
In-Reply-To: <16EC7DB9-1649-4A86-A370-F77CB03305AC@arm.com>
User-Agent: Mutt/1.10.1 (2018-07-13)
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/3mRtgmtASykNBiWJTyEc0uqMPgI>
Subject: Re: [Suit] Introducing draft-moran-suit-manifest-04
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Mar 2019 16:34:10 -0000

On Tue, Mar 12, 2019 at 10:34:44AM +0000, Brendan Moran wrote:
>draft-moran-suit-manifest-04 has now been published.
>
>https://tools.ietf.org/html/draft-moran-suit-manifest-04

One point I wanted to bring up on-list was that this draft seems to
have a bit of a bias toward devices that execute programs by copying
them from flash to RAM and executing them out of RAM.

Given the class of devices that we are targeting, I would suggest that
this is actually fairly uncommon, and most of these types of devices
will generally be set up to execute directly out of flash, so called
XIP or eXecute In Place.  For these kinds of devices, the directives
in the draft are a little bit of a mismatch with how upgrades happen
on these kinds of devices.

To clarify, I will explain how upgrades currently work for devices
targeted by MCUboot (and by extension TF-M):

  - The flash is divided into a series of slots.  For a device with a
    single process and image, it will be something like:

    +------------+
    | bootloader |
    +------------+
    | Primary    |
    +------------+
    | Secondary  |
    +------------+
    | Scratch    |
    +------------+
    | Storage    |
    +------------+

    For a multi-CPU/image device, there will be a pair of primary and
    secondary slots.  To simplify, I will make this example just for a
    single-image device.

  - For normal execution, the bootloader validates the image in the
    "primary" slot, and if it is valid, jumps directly to its start
    address within flash.

  - The download part of an upgrade happens while the application is
    running, and this code is contained within the code currently
    running in the primary image.  It downloads the upgrade into the
    "secondary" slot.  This new code cannot execute at this address,
    but is placed here as the image is downloaded.  The assumption is
    that their isn't sufficient RAM to hold the entire image, and that
    a download may be interrupted.

  - Once the application has finished downloading the new image, it
    writes a special marker to the end of the "secondary" slot and
    causes a reboot.

  - The bootloader detects this upgrade request in the secondary slot
    and begins a series of steps:

    - Verify the image in the secondary slot.

    - Using the scratch area exchange the images in the primary and
      secondary slot

    - Verify the new primary slot.

    - Jump to the new primary image

    This is designed in such a way that it can resume after any
    untimely interruption.

  - If the new image boots successfully, it writes a marker at the end
    of the "primary" slot to indicate that the image is correct.
    Otherwise, if the bootloader boots without seeing this marker, it
    will exchange the primary and secondary images again to undo the
    upgrade.

Within either the primary or secondary slot, the image has a format
similar to:

    +------------+
    | Header     |
    +------------+
    | Executable |
    +------------+
    | Manifest   |
    +------------+

there is no real separate place to store the manifest.  This does mean
that during an upgrade the manifest for both the old and the new image
are present in flash.

I'm curious what thoughts people have on how to apply the draft 4
manifest to the above scenario.  Operations such as "load" aren't
really meaningful, but apply-image would certainly make sense.
However, the installation of a new image is partially initiated by a
different piece of code than the bootloader which is responsible for
actually installing the image.  This state has to be managed carefully
in a way that works with NOR flash, and therefore will probably live
outside of the manifest.

Thanks,
David


From nobody Fri Mar 15 16:20:43 2019
Return-Path: <Martin.Pagel@microsoft.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02902124BAA for <suit@ietfa.amsl.com>; Fri, 15 Mar 2019 16:20:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XORMB1bJMu_n for <suit@ietfa.amsl.com>; Fri, 15 Mar 2019 16:20:39 -0700 (PDT)
Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-eopbgr740090.outbound.protection.outlook.com [40.107.74.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B515212008A for <suit@ietf.org>; Fri, 15 Mar 2019 16:20:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/s747BwjOEkl4KTiIEulENIDHPakCcypgGZOU7poGzA=; b=mfN4HY/9DFLw62CSFOhV+haPk9jN3qaBezltLntgF37z19wggxiJUvrVSBvLLUS/iLFYWpAqix1YFZgP/RGEX7/obKUdDMVcneSrYikamXzo0P+TzW3cLdFAFg54uaMczyGRTV4zl0gdZIdAPqZPc7b0iZiR+4Zb0GOfXVO5wug=
Received: from BYAPR21MB1317.namprd21.prod.outlook.com (20.179.60.199) by BYAPR21MB1350.namprd21.prod.outlook.com (20.179.60.212) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1730.0; Fri, 15 Mar 2019 23:20:35 +0000
Received: from BYAPR21MB1317.namprd21.prod.outlook.com ([fe80::a89a:5b8a:e27c:ec15]) by BYAPR21MB1317.namprd21.prod.outlook.com ([fe80::a89a:5b8a:e27c:ec15%7]) with mapi id 15.20.1730.000; Fri, 15 Mar 2019 23:20:35 +0000
From: Martin Pagel <Martin.Pagel@microsoft.com>
To: Brendan Moran <Brendan.Moran@arm.com>, "suit@ietf.org" <suit@ietf.org>
Thread-Topic: draft-moran-suit-manifest-04 - prescriptive
Thread-Index: AdTbfYV7dO45RdMkQRKtZzBYR1IzsA==
Date: Fri, 15 Mar 2019 23:20:35 +0000
Message-ID: <BYAPR21MB1317CA992FE49959A00AB19E9D440@BYAPR21MB1317.namprd21.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mapagel@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-03-15T23:20:34.4811192Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=37b80e76-2f10-4141-8f25-614ef6a983d7; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic
x-originating-ip: [97.113.77.118]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: b090f820-baa5-4688-64b3-08d6a99cd3ff
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7193020); SRVR:BYAPR21MB1350; 
x-ms-traffictypediagnostic: BYAPR21MB1350:
x-ms-exchange-purlcount: 2
x-microsoft-antispam-prvs: <BYAPR21MB1350526440107D4C5E3F1FB99D440@BYAPR21MB1350.namprd21.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 09778E995A
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(396003)(346002)(136003)(366004)(39860400002)(199004)(13464003)(40434004)(189003)(51444003)(186003)(53936002)(2906002)(478600001)(25786009)(26005)(110136005)(53546011)(6506007)(6116002)(6246003)(3846002)(66066001)(256004)(966005)(102836004)(81166006)(22452003)(81156014)(316002)(6346003)(106356001)(97736004)(8676002)(99286004)(14444005)(5024004)(105586002)(10290500003)(6436002)(9686003)(6306002)(14454004)(2501003)(229853002)(55016002)(7696005)(7736002)(72206003)(305945005)(86362001)(74316002)(8936002)(86612001)(5660300002)(476003)(71190400001)(52536014)(68736007)(10090500001)(8990500004)(71200400001)(486006)(33656002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR21MB1350; H:BYAPR21MB1317.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Martin.Pagel@microsoft.com; 
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: 6MKevhZTaTspYZEYC4AEjq/68B866QFyMpBxA3dApyIChVIacSvOrunLND02dcW/5vMlhexQCpRszo6WL8tTlaAOK4RYpBWTaXmEmmEMagTSjSRqONyQuhTLwnzQcEe8NsYfz2oCgOphAFcWFmwalqGimEBToy0P+c1KSKjwBwIiwOa7YYMzmlkTnsbP3pwn/00i3Nq899mhhhn5RgFDrEuf6YSDMml2Dq+GMNOyLpPM/0kjnDMw4AMn0q+jfQFHRWyTmgTULCeFm8I08WQ0QX7/nWnr6r4UPjq+QSipZnkadnDTcVbcYMOJaDXs6ABB5UORjmCNEPufuTo/Iym4UhpkGIFrlYfwflDrlahCeivg77diIZ5hckhltnkCjbUU7YtpQ+LNTX1C+5wQjRCGo2ukpG1CZzsGinXKh9r/tvQ=
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: b090f820-baa5-4688-64b3-08d6a99cd3ff
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Mar 2019 23:20:35.4623 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR21MB1350
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/U07INaDnz3n9neZkK60n-2mSvys>
Subject: Re: [Suit] draft-moran-suit-manifest-04 - prescriptive
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Mar 2019 23:20:42 -0000

Hi Brendan,=20
This an impressive re-draft, it's almost a new/separate manifest approach a=
ll together. I like the switch from a descriptive approach to a prescriptiv=
e one and the fact that the manifest is quite small for the basic cases.=20

Is your goal to develop a generic installer which could interpret the "scri=
pt" (apply-image and run-image sections) and apply any number of images on =
a fairly complicated MCU configuration? (It reminds me a bit of the setup.i=
nf scripting capabilities I added in Windows 2.0) I think that would be qui=
te intriguing for more sophisticated MCUs, but I would expect very constrai=
ned MCUs (like the one targeted by MCUBoot) to use a special purpose instal=
ler. But because the "script" portions of the manifest are optional, none w=
ould need to be present for those cases, correct?

Here are a few specific comments and questions:

* Component Id
I understand the first parameter is a bstr for name, but what's the second =
(numeric) parameter? Is that some type of offset? Did I miss the explanatio=
n for this parameter?

* URIs
If you need to install 10 images, the URIs take up a lot of space and there=
 is a good chance they all have the same base URL. How about allowing to sp=
ecify the base URL and append the component name to that URL?

* Dependency, Unpacking...
The examples are very useful, but only cover a few manifest options. Can yo=
u provide some more examples to cover dependency blocks, unpacking, run_seq=
uence etc?

Thanks
Martin


-----Original Message-----
From: Suit <suit-bounces@ietf.org> On Behalf Of Brendan Moran
Sent: Tuesday, March 12, 2019 3:35 AM
To: suit@ietf.org
Subject: [Suit] Introducing draft-moran-suit-manifest-04

draft-moran-suit-manifest-04 has now been published.

https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Ftools.i=
etf.org%2Fhtml%2Fdraft-moran-suit-manifest-04&amp;data=3D02%7C01%7Cmartin.p=
agel%40microsoft.com%7Cae6e6ad7d8824b10589808d6a6d6614f%7C72f988bf86f141af9=
1ab2d7cd011db47%7C1%7C1%7C636879837023990832&amp;sdata=3DqjrMKS33E91CBhWvq3=
vqxeyMeEnHC52UoIv1eU6vypM%3D&amp;reserved=3D0

This draft is the result of combining the information model in draft-moran-=
suit-behavioural-manifests-00 (the 01 version fixes example formatting only=
) with that in draft-ietf-suit-information-model, then serialising the resu=
lt in CBOR. This is a significant departure from previous drafts. It attemp=
ts to preserve flexibility, fully define the behaviour of recipient, simpli=
fy the manifest structure, reduce code-size of the recipient, and reduce th=
e size of the manifest. This ambitious set of goals required a significant =
change in approach as compared to draft-moran-suit-manifest-03 and before. =
In order to outline the approach clearly, we have separately published draf=
t-moran-suit-behavioural-manifests-00. draft-moran-suit-manifest-04 focuses=
 more on the serialisation of the manifest.

I look forward to discussing this draft in more detail.

Best Regards,
Brendan
IMPORTANT NOTICE: The contents of this email and any attachments are confid=
ential and may also be privileged. If you are not the intended recipient, p=
lease notify the sender immediately and do not disclose the contents to any=
 other person, use it for any purpose, or store or copy the information in =
any medium. Thank you.

_______________________________________________
Suit mailing list
Suit@ietf.org
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet=
f.org%2Fmailman%2Flistinfo%2Fsuit&amp;data=3D02%7C01%7Cmartin.pagel%40micro=
soft.com%7Cae6e6ad7d8824b10589808d6a6d6614f%7C72f988bf86f141af91ab2d7cd011d=
b47%7C1%7C1%7C636879837023990832&amp;sdata=3DXZUgZppgBVKl%2FXViCMnEyGQ030B6=
u5kZQY1OYCtCYXg%3D&amp;reserved=3D0


From nobody Fri Mar 15 16:24:26 2019
Return-Path: <Martin.Pagel@microsoft.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1BAC131095 for <suit@ietfa.amsl.com>; Fri, 15 Mar 2019 16:24:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bMusNj3JGTx6 for <suit@ietfa.amsl.com>; Fri, 15 Mar 2019 16:24:22 -0700 (PDT)
Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-eopbgr780112.outbound.protection.outlook.com [40.107.78.112]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2531512787D for <suit@ietf.org>; Fri, 15 Mar 2019 16:24:21 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5M1D5GWNN8MNlORyI/MLYr4r1qr0Om6vRnnEZGjt8Gk=; b=PQGA1M+VWAlN62YDm0mLVtcnNFoyYz2gcuWLjdDlTI/GtBvRTnsKKegjX6yUJftVFTwjgdftfrowMt21BZQDIp8Y/7kpKiorAqtuCFiBB63NflCmTXJUie3+MxOnn4cvkw5g1Li0cCaWJE3efFs6inkSqzED8Ml3X/mYC3oIi8k=
Received: from BYAPR21MB1317.namprd21.prod.outlook.com (20.179.60.199) by BYAPR21MB1350.namprd21.prod.outlook.com (20.179.60.212) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1730.0; Fri, 15 Mar 2019 23:24:19 +0000
Received: from BYAPR21MB1317.namprd21.prod.outlook.com ([fe80::a89a:5b8a:e27c:ec15]) by BYAPR21MB1317.namprd21.prod.outlook.com ([fe80::a89a:5b8a:e27c:ec15%7]) with mapi id 15.20.1730.000; Fri, 15 Mar 2019 23:24:19 +0000
From: Martin Pagel <Martin.Pagel@microsoft.com>
To: David Brown <david.brown@linaro.org>, Brendan Moran <Brendan.Moran@arm.com>
CC: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: [Suit] Introducing draft-moran-suit-manifest-04
Thread-Index: AQHU2L81dzELNCQKcEaCHfQ8cPehA6YM6E0AgABx0iA=
Date: Fri, 15 Mar 2019 23:24:19 +0000
Message-ID: <BYAPR21MB1317D154B6AE48E33D8B237A9D440@BYAPR21MB1317.namprd21.prod.outlook.com>
References: <16EC7DB9-1649-4A86-A370-F77CB03305AC@arm.com> <20190315163402.GA25574@davidb.org>
In-Reply-To: <20190315163402.GA25574@davidb.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mapagel@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-03-15T23:24:18.3751278Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=e6677e54-59fe-4c64-9cb8-227a37a8ebbf; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic
x-originating-ip: [97.113.77.118]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 62a2bba2-2632-4353-2de2-08d6a99d5981
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7193020); SRVR:BYAPR21MB1350; 
x-ms-traffictypediagnostic: BYAPR21MB1350:
x-ms-exchange-purlcount: 2
x-microsoft-antispam-prvs: <BYAPR21MB135070FA54CBCAFA64AB84E99D440@BYAPR21MB1350.namprd21.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 09778E995A
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(396003)(346002)(136003)(366004)(39860400002)(199004)(13464003)(189003)(186003)(76176011)(53936002)(2906002)(478600001)(25786009)(26005)(110136005)(53546011)(6506007)(6116002)(6246003)(3846002)(66066001)(256004)(966005)(102836004)(81166006)(22452003)(81156014)(316002)(6346003)(106356001)(97736004)(8676002)(99286004)(14444005)(105586002)(10290500003)(4326008)(6436002)(9686003)(6306002)(14454004)(229853002)(55016002)(7696005)(7736002)(72206003)(305945005)(446003)(86362001)(11346002)(74316002)(8936002)(86612001)(5660300002)(476003)(71190400001)(52536014)(68736007)(10090500001)(8990500004)(71200400001)(486006)(33656002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR21MB1350; H:BYAPR21MB1317.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Martin.Pagel@microsoft.com; 
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: yq+fFpbpqdchf0RfmbU58klu7KR7fa7Y7+ACZ49fR1PFV3+Zg8Qyw8aIfGd6jb+UP75xQXPpI8qT6NbR5LxsOdIsMIC8gcMBZTQt+nZT0j2vaxaWqM++6rJN3xRvWJDVGMergrzP8sVJH/Xro2oX7Fu5i4dFsxYeQf0fOI89Sfsgr3Uhhdhthbu3eouUL7z8jZZ+ygx97R53kXqmV79R0lcW6L2X5bS7niLk/NTwgXSSOeq5k8HtTKh6xjHNluDhCqKrQSCV5QiqMz1H0WsggxaihU7/vIOmOVaVHpmqiH9jEdz5CVwoj9sHTQqTxcor7wCF+bsSiGDd7VyiNTsSUFknJRARmEbvjWQcbc+IoseWcO00qLw3T/wnLHYzLTFZBCHECQO2TgeDzXf5zwgy3XC7VGObmh4J9rtbwVj5MH8=
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 62a2bba2-2632-4353-2de2-08d6a99d5981
X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Mar 2019 23:24:19.4747 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR21MB1350
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/iWZYZP1K_an8sEJJO-oOwM4Y5WA>
Subject: Re: [Suit] Introducing draft-moran-suit-manifest-04
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 15 Mar 2019 23:24:25 -0000

David,=20
I don't think that copying to RAM is mandatory or even recommended.
Example 1 should be all you need.
Martin

-----Original Message-----
From: Suit <suit-bounces@ietf.org> On Behalf Of David Brown
Sent: Friday, March 15, 2019 9:34 AM
To: Brendan Moran <Brendan.Moran@arm.com>
Cc: suit@ietf.org
Subject: Re: [Suit] Introducing draft-moran-suit-manifest-04

On Tue, Mar 12, 2019 at 10:34:44AM +0000, Brendan Moran wrote:
>draft-moran-suit-manifest-04 has now been published.
>
>https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Ftools
>.ietf.org%2Fhtml%2Fdraft-moran-suit-manifest-04&amp;data=3D02%7C01%7Cmart
>in.pagel%40microsoft.com%7Ccfe120c246fd48faecff08d6a9641143%7C72f988bf8
>6f141af91ab2d7cd011db47%7C1%7C0%7C636882644594352532&amp;sdata=3DeWHvkKwY
>sXddzBMjbNpDlT9%2FQwshteFLmbU3bIiKwk4%3D&amp;reserved=3D0

One point I wanted to bring up on-list was that this draft seems to have a =
bit of a bias toward devices that execute programs by copying them from fla=
sh to RAM and executing them out of RAM.

Given the class of devices that we are targeting, I would suggest that this=
 is actually fairly uncommon, and most of these types of devices will gener=
ally be set up to execute directly out of flash, so called XIP or eXecute I=
n Place.  For these kinds of devices, the directives in the draft are a lit=
tle bit of a mismatch with how upgrades happen on these kinds of devices.

To clarify, I will explain how upgrades currently work for devices targeted=
 by MCUboot (and by extension TF-M):

  - The flash is divided into a series of slots.  For a device with a
    single process and image, it will be something like:

    +------------+
    | bootloader |
    +------------+
    | Primary    |
    +------------+
    | Secondary  |
    +------------+
    | Scratch    |
    +------------+
    | Storage    |
    +------------+

    For a multi-CPU/image device, there will be a pair of primary and
    secondary slots.  To simplify, I will make this example just for a
    single-image device.

  - For normal execution, the bootloader validates the image in the
    "primary" slot, and if it is valid, jumps directly to its start
    address within flash.

  - The download part of an upgrade happens while the application is
    running, and this code is contained within the code currently
    running in the primary image.  It downloads the upgrade into the
    "secondary" slot.  This new code cannot execute at this address,
    but is placed here as the image is downloaded.  The assumption is
    that their isn't sufficient RAM to hold the entire image, and that
    a download may be interrupted.

  - Once the application has finished downloading the new image, it
    writes a special marker to the end of the "secondary" slot and
    causes a reboot.

  - The bootloader detects this upgrade request in the secondary slot
    and begins a series of steps:

    - Verify the image in the secondary slot.

    - Using the scratch area exchange the images in the primary and
      secondary slot

    - Verify the new primary slot.

    - Jump to the new primary image

    This is designed in such a way that it can resume after any
    untimely interruption.

  - If the new image boots successfully, it writes a marker at the end
    of the "primary" slot to indicate that the image is correct.
    Otherwise, if the bootloader boots without seeing this marker, it
    will exchange the primary and secondary images again to undo the
    upgrade.

Within either the primary or secondary slot, the image has a format similar=
 to:

    +------------+
    | Header     |
    +------------+
    | Executable |
    +------------+
    | Manifest   |
    +------------+

there is no real separate place to store the manifest.  This does mean that=
 during an upgrade the manifest for both the old and the new image are pres=
ent in flash.

I'm curious what thoughts people have on how to apply the draft 4 manifest =
to the above scenario.  Operations such as "load" aren't really meaningful,=
 but apply-image would certainly make sense.
However, the installation of a new image is partially initiated by a differ=
ent piece of code than the bootloader which is responsible for actually ins=
talling the image.  This state has to be managed carefully in a way that wo=
rks with NOR flash, and therefore will probably live outside of the manifes=
t.

Thanks,
David

_______________________________________________
Suit mailing list
Suit@ietf.org
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet=
f.org%2Fmailman%2Flistinfo%2Fsuit&amp;data=3D02%7C01%7Cmartin.pagel%40micro=
soft.com%7Ccfe120c246fd48faecff08d6a9641143%7C72f988bf86f141af91ab2d7cd011d=
b47%7C1%7C0%7C636882644594352532&amp;sdata=3D271MhUpRnQbktJs5CgZfjLBYPbVkMX=
nPE80wSZL%2BrDY%3D&amp;reserved=3D0


From nobody Sat Mar 16 23:27:44 2019
Return-Path: <david.brown@linaro.org>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05E7313115A for <suit@ietfa.amsl.com>; Sat, 16 Mar 2019 23:27:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2
X-Spam-Level: 
X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9,  DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=linaro.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OoWbeX2uINgN for <suit@ietfa.amsl.com>; Sat, 16 Mar 2019 23:27:41 -0700 (PDT)
Received: from mail-qt1-x835.google.com (mail-qt1-x835.google.com [IPv6:2607:f8b0:4864:20::835]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CFC8E131159 for <suit@ietf.org>; Sat, 16 Mar 2019 23:27:40 -0700 (PDT)
Received: by mail-qt1-x835.google.com with SMTP id z25so14555701qti.13 for <suit@ietf.org>; Sat, 16 Mar 2019 23:27:40 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google;  h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=VRM43PWG6BHBqgWQSzTs4qV+KEvGEkva8Bp+AFHnvCM=; b=LmZSP7dnQKUiT4dwf1IEx3WrOQ+dO6nRAtm266UGZDrk+uvcDqDz0AiGxuiOjX4miw J2M1RF9UpNcOagNoSVmUpwcKkyvtU2B+lVD76ZWno0xotVqrt5lF218HvxSZslouM489 xRYxnmvoljkz3Ip6aOzlqI6EMj+wPtEiEOZpNCGetr6gVZw3bBGv1YaNqDrxnlNseEHV a0Jf41jEz2SDpXlQ1m+kERJjoPp3kyTpGFrZrJWctFq1pJvlw3eKOMb55VnFZmldrG00 wXSvPL+SnoHHoR/WmYHHHNuka66AkYnzcWf/0cfYEwqEd4qsh16EcGwOqlnuPtFklCYY 44EA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=VRM43PWG6BHBqgWQSzTs4qV+KEvGEkva8Bp+AFHnvCM=; b=Q8eZA8kzVLMtV3j3R6JJjfoR0eoopAth5z3Ys93VQ4jyOajAd2MmnE1EmHQ6RToKUd qo1omjOwWNF+gfOU6IUWWrXXaMqzbfslH7ggXs/FWdFRv5hMuSzhbTIy9TE8iMwammww h+McL7dse3tdf95ppBl1FZgqBgeu+zlhHMuDDkApZuEtJyzkn6D/s2dOPSlHL6zTpTFb pIKGEuWCnPgHDsl/TjGolhCBBiXs/NHLGoImx6hKetfXE+jb5E5+pe0GvMqWyga6zTw+ Dm0JgCcn//ef7VNo7kvNDLsDTrOW/OXa2or79uOmULWuPhIn8wlfrxzBrGT59NCSC4As m8fg==
X-Gm-Message-State: APjAAAVEE3+M53yzNzzVoSXLhv7oAJRDThpKb5a2MOVeKsvKRouZBvfO uoiYxgngsV/zChoL4bZ3YGee2A==
X-Google-Smtp-Source: APXvYqz3PqZdmmQn2AfbBC7XVtsUfapU22KR2504tk6P6NJvPfiyqO/08y80ZUpZshllwGpYtgcX8A==
X-Received: by 2002:aed:2062:: with SMTP id 89mr9374046qta.273.1552804059715;  Sat, 16 Mar 2019 23:27:39 -0700 (PDT)
Received: from davidb.org (cn-co-b07400e8c3-142422-1.tingfiber.com. [64.98.48.55]) by smtp.gmail.com with ESMTPSA id a43sm5106541qta.54.2019.03.16.23.27.37 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 16 Mar 2019 23:27:38 -0700 (PDT)
Date: Sun, 17 Mar 2019 00:27:35 -0600
From: David Brown <david.brown@linaro.org>
To: Martin Pagel <Martin.Pagel@microsoft.com>
Cc: Brendan Moran <Brendan.Moran@arm.com>, "suit@ietf.org" <suit@ietf.org>
Message-ID: <20190317062735.GA27734@davidb.org>
References: <16EC7DB9-1649-4A86-A370-F77CB03305AC@arm.com> <20190315163402.GA25574@davidb.org> <BYAPR21MB1317D154B6AE48E33D8B237A9D440@BYAPR21MB1317.namprd21.prod.outlook.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
In-Reply-To: <BYAPR21MB1317D154B6AE48E33D8B237A9D440@BYAPR21MB1317.namprd21.prod.outlook.com>
User-Agent: Mutt/1.10.1 (2018-07-13)
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/RLhgXYBg8AIjElV0yIiorrDGqfc>
Subject: Re: [Suit] Introducing draft-moran-suit-manifest-04
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 17 Mar 2019 06:27:43 -0000

On Fri, Mar 15, 2019 at 11:24:19PM +0000, Martin Pagel wrote:

>I don't think that copying to RAM is mandatory or even recommended.
>Example 1 should be all you need.

As far as booting, yes.  But, the "install image" instructions don't
seem to cover how images are typically installed on these systems.

David

>
>-----Original Message-----
>From: Suit <suit-bounces@ietf.org> On Behalf Of David Brown
>Sent: Friday, March 15, 2019 9:34 AM
>To: Brendan Moran <Brendan.Moran@arm.com>
>Cc: suit@ietf.org
>Subject: Re: [Suit] Introducing draft-moran-suit-manifest-04
>
>On Tue, Mar 12, 2019 at 10:34:44AM +0000, Brendan Moran wrote:
>>draft-moran-suit-manifest-04 has now been published.
>>
>>https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftools
>>.ietf.org%2Fhtml%2Fdraft-moran-suit-manifest-04&amp;data=02%7C01%7Cmart
>>in.pagel%40microsoft.com%7Ccfe120c246fd48faecff08d6a9641143%7C72f988bf8
>>6f141af91ab2d7cd011db47%7C1%7C0%7C636882644594352532&amp;sdata=eWHvkKwY
>>sXddzBMjbNpDlT9%2FQwshteFLmbU3bIiKwk4%3D&amp;reserved=0
>
>One point I wanted to bring up on-list was that this draft seems to have a bit of a bias toward devices that execute programs by copying them from flash to RAM and executing them out of RAM.
>
>Given the class of devices that we are targeting, I would suggest that this is actually fairly uncommon, and most of these types of devices will generally be set up to execute directly out of flash, so called XIP or eXecute In Place.  For these kinds of devices, the directives in the draft are a little bit of a mismatch with how upgrades happen on these kinds of devices.
>
>To clarify, I will explain how upgrades currently work for devices targeted by MCUboot (and by extension TF-M):
>
>  - The flash is divided into a series of slots.  For a device with a
>    single process and image, it will be something like:
>
>    +------------+
>    | bootloader |
>    +------------+
>    | Primary    |
>    +------------+
>    | Secondary  |
>    +------------+
>    | Scratch    |
>    +------------+
>    | Storage    |
>    +------------+
>
>    For a multi-CPU/image device, there will be a pair of primary and
>    secondary slots.  To simplify, I will make this example just for a
>    single-image device.
>
>  - For normal execution, the bootloader validates the image in the
>    "primary" slot, and if it is valid, jumps directly to its start
>    address within flash.
>
>  - The download part of an upgrade happens while the application is
>    running, and this code is contained within the code currently
>    running in the primary image.  It downloads the upgrade into the
>    "secondary" slot.  This new code cannot execute at this address,
>    but is placed here as the image is downloaded.  The assumption is
>    that their isn't sufficient RAM to hold the entire image, and that
>    a download may be interrupted.
>
>  - Once the application has finished downloading the new image, it
>    writes a special marker to the end of the "secondary" slot and
>    causes a reboot.
>
>  - The bootloader detects this upgrade request in the secondary slot
>    and begins a series of steps:
>
>    - Verify the image in the secondary slot.
>
>    - Using the scratch area exchange the images in the primary and
>      secondary slot
>
>    - Verify the new primary slot.
>
>    - Jump to the new primary image
>
>    This is designed in such a way that it can resume after any
>    untimely interruption.
>
>  - If the new image boots successfully, it writes a marker at the end
>    of the "primary" slot to indicate that the image is correct.
>    Otherwise, if the bootloader boots without seeing this marker, it
>    will exchange the primary and secondary images again to undo the
>    upgrade.
>
>Within either the primary or secondary slot, the image has a format similar to:
>
>    +------------+
>    | Header     |
>    +------------+
>    | Executable |
>    +------------+
>    | Manifest   |
>    +------------+
>
>there is no real separate place to store the manifest.  This does mean that during an upgrade the manifest for both the old and the new image are present in flash.
>
>I'm curious what thoughts people have on how to apply the draft 4 manifest to the above scenario.  Operations such as "load" aren't really meaningful, but apply-image would certainly make sense.
>However, the installation of a new image is partially initiated by a different piece of code than the bootloader which is responsible for actually installing the image.  This state has to be managed carefully in a way that works with NOR flash, and therefore will probably live outside of the manifest.
>
>Thanks,
>David
>
>_______________________________________________
>Suit mailing list
>Suit@ietf.org
>https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fsuit&amp;data=02%7C01%7Cmartin.pagel%40microsoft.com%7Ccfe120c246fd48faecff08d6a9641143%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636882644594352532&amp;sdata=271MhUpRnQbktJs5CgZfjLBYPbVkMXnPE80wSZL%2BrDY%3D&amp;reserved=0


From nobody Thu Mar 21 09:19:02 2019
Return-Path: <Brendan.Moran@arm.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DE4813145E for <suit@ietfa.amsl.com>; Thu, 21 Mar 2019 09:18:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0sVxsYjp4S8U for <suit@ietfa.amsl.com>; Thu, 21 Mar 2019 09:18:53 -0700 (PDT)
Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-eopbgr130070.outbound.protection.outlook.com [40.107.13.70]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30C51131441 for <suit@ietf.org>; Thu, 21 Mar 2019 09:18:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com;  s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Fhgb2JWYLSeVLk/dJBcALg52HC3rPRpQSXasWi4Me28=; b=gtiMwMagm1bflBbgZA88s3UI8ZJ8MGHRA7doi481aIuFUP60X0QVbbwaka+P4GwfljEOnkX4LiBzitSIauJ5UuZ88Y9LrF/7tUbqZgwunrDrqiTjPG4UbwavFvyAL5ITBDdsM3ZBfeE0XhXub7sjHeubpbmtg2dsY28TrFQVBRk=
Received: from DB6PR0801MB1879.eurprd08.prod.outlook.com (10.168.84.137) by DB6PR0801MB2006.eurprd08.prod.outlook.com (10.168.87.141) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1709.14; Thu, 21 Mar 2019 16:18:48 +0000
Received: from DB6PR0801MB1879.eurprd08.prod.outlook.com ([fe80::180:d5be:c56c:c222]) by DB6PR0801MB1879.eurprd08.prod.outlook.com ([fe80::180:d5be:c56c:c222%4]) with mapi id 15.20.1730.013; Thu, 21 Mar 2019 16:18:48 +0000
From: Brendan Moran <Brendan.Moran@arm.com>
To: Martin Pagel <Martin.Pagel@microsoft.com>
CC: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: draft-moran-suit-manifest-04 - prescriptive
Thread-Index: AdTbfYV7dO45RdMkQRKtZzBYR1IzsAEhD4AA
Date: Thu, 21 Mar 2019 16:18:48 +0000
Message-ID: <ED57D130-8835-4069-AF77-B0D3EAF43FF2@arm.com>
References: <BYAPR21MB1317CA992FE49959A00AB19E9D440@BYAPR21MB1317.namprd21.prod.outlook.com>
In-Reply-To: <BYAPR21MB1317CA992FE49959A00AB19E9D440@BYAPR21MB1317.namprd21.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-mailer: Apple Mail (2.3445.102.3)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brendan.Moran@arm.com; 
x-originating-ip: [217.140.106.55]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 001651b9-d821-4ff4-4436-08d6ae18e675
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7153060)(7193020); SRVR:DB6PR0801MB2006; 
x-ms-traffictypediagnostic: DB6PR0801MB2006:
x-ms-exchange-purlcount: 2
x-microsoft-antispam-prvs: <DB6PR0801MB2006BF55F1A987621AD5734EEA420@DB6PR0801MB2006.eurprd08.prod.outlook.com>
x-forefront-prvs: 0983EAD6B2
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(366004)(136003)(346002)(396003)(376002)(51444003)(13464003)(40434004)(199004)(189003)(2906002)(99286004)(14444005)(8936002)(8676002)(1511001)(5024004)(86362001)(229853002)(256004)(57306001)(6916009)(6506007)(71200400001)(6306002)(305945005)(36756003)(72206003)(26005)(45080400002)(966005)(71190400001)(53936002)(478600001)(6486002)(83716004)(76176011)(33656002)(7736002)(6436002)(102836004)(53546011)(4326008)(82746002)(446003)(476003)(14454004)(66066001)(6246003)(6512007)(105586002)(50226002)(68736007)(2616005)(5660300002)(186003)(486006)(81166006)(316002)(11346002)(3846002)(81156014)(25786009)(97736004)(106356001)(6116002); DIR:OUT; SFP:1101; SCL:1; SRVR:DB6PR0801MB2006; H:DB6PR0801MB1879.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; 
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: Wqgzq0pF+WLrConLTiy6pkCALq1fXVrdcJOPz/YAONL7+lE6Q5uFcDwCpH/i7N4HEkFrYsB0GFpiKUiAiM9BB4+vhZPKWKzYTjAmzWxb6vUnHCgKg6yuj595s3n0u6mlpv5uVUX/sAR9YF4fhu1T7BALvT7wZ6youYkji+9+7mrwOBqnjk8lNfYg6eROXlNEglROBogEMo+6/E1sJmV4Zs2Cjxos4m1WoWEpb3mSbsfSyCVcBweQEbkmuV8faOHYlG+o1ooafDDYV0zKYF3dPgzyquHC30nMm9w54te9RptiJ3L//pEpS7fXdpQMfQbnSdfNO++UyRhosdl5MY8HkWc/iP6j3IQVwZg54dahUX2WAFIkBXnAipgq/Dn8fb0OSb3Vl/gwGD8haaAnzzPJeOKA1HIdR786l4zP5u998g4=
Content-Type: text/plain; charset="utf-8"
Content-ID: <0EE4B28DB658D04982F683968D3E3DB0@eurprd08.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 001651b9-d821-4ff4-4436-08d6ae18e675
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Mar 2019 16:18:48.7696 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0801MB2006
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/jIH4kc2HVyyZiPEKq3Idq0T0rRg>
Subject: Re: [Suit] draft-moran-suit-manifest-04 - prescriptive
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Mar 2019 16:19:01 -0000
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From nobody Thu Mar 21 09:31:02 2019
Return-Path: <Brendan.Moran@arm.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A7DE1313D5 for <suit@ietfa.amsl.com>; Thu, 21 Mar 2019 09:31:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IYFVpKdC7ULM for <suit@ietfa.amsl.com>; Thu, 21 Mar 2019 09:30:57 -0700 (PDT)
Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40046.outbound.protection.outlook.com [40.107.4.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C3F0D131403 for <suit@ietf.org>; Thu, 21 Mar 2019 09:30:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com;  s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=T3BGzkb0rzGIpiC1Qh92wNDNwOiFIUMEg9hbCB5SJe4=; b=q2uaJsZmBn1iqs8x/Y5eKzx5iqXh4I5/qMbe09+AdPS9vy0zaJ5vCu/VJknpA8IxsJlmItDRIZymrzSh3RJspr2QKYjmGB/DPHNP0wldnmlI1+ToRDhU3XnFTncbTirPZZZgssTF7rH05gyqZmduXrGfIoiw65eSAQCQGYdDRCk=
Received: from DB6PR0801MB1879.eurprd08.prod.outlook.com (10.168.84.137) by DB6PR0801MB2119.eurprd08.prod.outlook.com (10.169.223.137) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1730.16; Thu, 21 Mar 2019 16:30:54 +0000
Received: from DB6PR0801MB1879.eurprd08.prod.outlook.com ([fe80::180:d5be:c56c:c222]) by DB6PR0801MB1879.eurprd08.prod.outlook.com ([fe80::180:d5be:c56c:c222%4]) with mapi id 15.20.1730.013; Thu, 21 Mar 2019 16:30:54 +0000
From: Brendan Moran <Brendan.Moran@arm.com>
To: David Brown <david.brown@linaro.org>
CC: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: [Suit] Introducing draft-moran-suit-manifest-04
Thread-Index: AQHU2L81a2mzuoq9DkiQC46t4fwGyKYM6E0AgAltG4A=
Date: Thu, 21 Mar 2019 16:30:53 +0000
Message-ID: <59F62162-578C-4975-A25B-EC261A7F4F7D@arm.com>
References: <16EC7DB9-1649-4A86-A370-F77CB03305AC@arm.com> <20190315163402.GA25574@davidb.org>
In-Reply-To: <20190315163402.GA25574@davidb.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-mailer: Apple Mail (2.3445.102.3)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brendan.Moran@arm.com; 
x-originating-ip: [217.140.106.55]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 9283eaaf-978e-4b40-50d3-08d6ae1a96ba
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7153060)(7193020); SRVR:DB6PR0801MB2119; 
x-ms-traffictypediagnostic: DB6PR0801MB2119:
x-ms-exchange-purlcount: 2
x-microsoft-antispam-prvs: <DB6PR0801MB21194BF2CC77010A5F641CB2EA420@DB6PR0801MB2119.eurprd08.prod.outlook.com>
x-forefront-prvs: 0983EAD6B2
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(136003)(396003)(346002)(366004)(376002)(40434004)(189003)(199004)(256004)(2616005)(14444005)(5024004)(476003)(229853002)(105586002)(6486002)(6436002)(50226002)(106356001)(71190400001)(83716004)(71200400001)(57306001)(66066001)(6116002)(97736004)(3846002)(446003)(11346002)(486006)(186003)(5660300002)(102836004)(76176011)(53546011)(86362001)(6506007)(26005)(14454004)(305945005)(2906002)(99286004)(316002)(25786009)(36756003)(6306002)(6512007)(7736002)(53936002)(478600001)(8936002)(72206003)(966005)(33656002)(8676002)(81156014)(4326008)(68736007)(82746002)(6916009)(6246003)(81166006); DIR:OUT; SFP:1101; SCL:1; SRVR:DB6PR0801MB2119; H:DB6PR0801MB1879.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; 
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: K1GSFKpjtQ3IaqLC37ilM6PNLJ0z5sfK0fuoemhH3sHGPQyVIPQdLmte/BSx1RlMr5q5mylbrKDJFzgg093Yz7luyRZhcCEEJgwUMtpx6aak8RtTSUaClIUHHk7o0ek4dzw+lOsWkzz01fV9yyEqDJNvscUqYnFmCU+z4jzktpi25a3wiI4oMJrPsYVooHzAGdlavCZgOPmcEpR7nuooND++54Mjk98k9eDqr9XYkqARu33lU+F02Bhc6Weo2b80fCF/5tRx7dE/liBWn+BfO1LJUcGR70j/lrhRL3H1xqXRs0I3PyVCWYUEIGelHhGI/udj+LUA/J3sEn11AUSsdJOiuJnAMxcT5CEtrcjhvlGAsvDuUT/s8ctWhUZjOLeefYsPnI/ItM/ZpYTH+bAOdaVhY0AB/NUbXNLTqpZ+fqk=
Content-Type: text/plain; charset="utf-8"
Content-ID: <D63E6F6E114DF04C834294A0D2D287C1@eurprd08.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 9283eaaf-978e-4b40-50d3-08d6ae1a96ba
X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Mar 2019 16:30:53.9708 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0801MB2119
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/hWRnNTcchlWi_0VILHU2_qG6HHE>
Subject: Re: [Suit] Introducing draft-moran-suit-manifest-04
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Mar 2019 16:31:01 -0000
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From nobody Fri Mar 22 10:39:17 2019
Return-Path: <david.brown@linaro.org>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A0F0131376 for <suit@ietfa.amsl.com>; Fri, 22 Mar 2019 10:39:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=linaro.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EIBLSReyBM-n for <suit@ietfa.amsl.com>; Fri, 22 Mar 2019 10:39:13 -0700 (PDT)
Received: from mail-qt1-x830.google.com (mail-qt1-x830.google.com [IPv6:2607:f8b0:4864:20::830]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 333F4131381 for <suit@ietf.org>; Fri, 22 Mar 2019 10:39:13 -0700 (PDT)
Received: by mail-qt1-x830.google.com with SMTP id t28so3435503qte.6 for <suit@ietf.org>; Fri, 22 Mar 2019 10:39:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google;  h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to :user-agent; bh=NCy4tMod9JyH3GbLZCxAAB8s6ESIQyU2eVPTo0JVc1o=; b=M3onU8MZF2wE09nFCYZM2TLrdk8DvQ+S3u2BKEHKk2rJeoFBhl0oYpMC/d3SxVn+mo vjo3cinnsmiExnnuJrnwqko4QWAHmAZIv19f+0v+bcwBJfN8Qz+OXmKu+KG25i28kljA U/TnPCzshnBYLx2e3OM3cs4Qg5f1zoFYzBWNsFZeGQs+xbPs+at/5dB+jCnCtGZOcSXP EYH344hw+NoNAwGvdpujFDL4KuNOmZMNrMO3un8wM83GftW0YjKqCpvPYi70/3+XSrmp GYps4OCfhVUXHIC8nIwD6uhyMqn21FKzJOB4YF1r5cT5L/Mmpgvy5lBu49krXS/KuNOC 8ZZQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to:user-agent; bh=NCy4tMod9JyH3GbLZCxAAB8s6ESIQyU2eVPTo0JVc1o=; b=JkV2o8iWjTkHPm9g/n7zKobpDE8byadLywXwgi7BZoXVHBwyWmONDNy//kWQ8kD3cx k581A/2NQMhEdJcWj5HGALifPdT8mAApa/VPlmST9IIlHYOfXreDfgK8+lIgG8O6BT6U pGny8JPwO0KCeLWknqq6wr2eq8B9mhsoKJ6JU/kH8caN5DDGpU+EG0Ag+4heTgV4Jzf0 ovgKAzRcFhwCgYP2NPD4FtlmurAgw4fec51X2L93pLl7RTz2C0l+2jLHsIRTk2EcsHyL /11WCHbJoz6K3I1AiRdf5biREnLy/wJUdPeQ9OSQfJCv4lIij0PRTlm5uT594oF8Y5Bt PkAw==
X-Gm-Message-State: APjAAAXQJrCoiNntkC8ezmxW3/BXJZrmJHpVPy3giaLHFar9Vj2dm6er wVJyWSGDarD1bmmeBhCzlUGGuQ==
X-Google-Smtp-Source: APXvYqy2bfeGfIuQN+bH0y+zNoOBlzoulc9RHNHNGCps1dnhI3gOrvAyYAv8uoyyutIfz+7/NrGF8A==
X-Received: by 2002:ac8:24f2:: with SMTP id t47mr9122125qtt.192.1553276351995;  Fri, 22 Mar 2019 10:39:11 -0700 (PDT)
Received: from davidb.org (cn-co-b07400e8c3-142422-1.tingfiber.com. [64.98.48.55]) by smtp.gmail.com with ESMTPSA id u16sm8732002qtc.84.2019.03.22.10.39.10 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Mar 2019 10:39:11 -0700 (PDT)
Date: Fri, 22 Mar 2019 11:39:08 -0600
From: David Brown <david.brown@linaro.org>
To: Brendan Moran <Brendan.Moran@arm.com>
Cc: "suit@ietf.org" <suit@ietf.org>
Message-ID: <20190322173908.GA17361@davidb.org>
References: <16EC7DB9-1649-4A86-A370-F77CB03305AC@arm.com> <20190315163402.GA25574@davidb.org> <59F62162-578C-4975-A25B-EC261A7F4F7D@arm.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <59F62162-578C-4975-A25B-EC261A7F4F7D@arm.com>
User-Agent: Mutt/1.10.1 (2018-07-13)
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/omoqnqAutb-iWyVj24RVqEWIAYE>
Subject: Re: [Suit] Introducing draft-moran-suit-manifest-04
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Mar 2019 17:39:16 -0000

On Thu, Mar 21, 2019 at 04:30:53PM +0000, Brendan Moran wrote:

>Reboot resilience for “swap” is probably outside the scope of this draft.
>Adding a condition to check the success marker might be useful.

I'm not sure it really even makes sense to describe the reboot
resilience in the manifest.  At least for swap, it is a large number
of steps that have to be done carefully, along with a lot of extra
state that is written every step.  I would think this intermediate
state is beyond the scape of the manifest.

For those interested, I've thrown together a bit of an amination
describing how the swap operation works in MCUboot, including at least
part of its state.

   https://www.youtube.com/watch?v=TvXjw2l0Cd0

I'm not actually sure it is even going to make very much sense for
MCUboot to follow steps in the manifest, rather than just verifying
that they are present.  The steps make sense for the download
application.

Some of the modes I envision ultimately supporting in MCUboot:

  - swap: The current mode.  This is initiated by a "trailer" being
    written to the secondary image, and the bootloader verifying that
    the manifest is correct.  It might make sense for it to follow the
    "swap" instruction, but it would only look at this secondary
    manifest after being instructed to, out of band.

  - overwrite: The other current possible mode.  Also initialized by
    the "trailer" being written at the end of the second image, and
    the bootloader verifying that the manifest is correct.  The second
    image is copied to the primary image slot.  This is easier to make
    resilient, since the entire operation can be restarted.

  - Boot best: not implemented.  The upgrade would download an image
    in the slot that is not being used.  There would be two images
    built, one linked to each slot.

Right now, upon boot, MCUboot checks the manifest of the primary slot,
and will boot that image if it is valid.  Before this, it will check
the trailer of the second slot to see if an upgrade is requested, and
if so, check that manifest, and possibly swap/overwrite depending on
how it is built.

One difficulty I see following steps in the manifest is that the code
currently maintains state out-of-band from the manifest.  The current
state is:

  - copy done: indicates that a copy/swap has finished and the primary
    image can be checked (avoids having to check the secondary
    partition manifest on every boot).

  - image ok: after a new image boots, and decides it is functional,
    it writes this marker.  Without this marker being written, a
    subsequent reboot will cause the swap operation to be repeated to
    revert the image.

  - swap state: a series of markers to track the state of a swap, so
    that it can be resumed if necessary.

Any thoughts on what is appropriate to even represent in the manifest?
The two instructions that the bootloader would follow would be "swap"
or "apply" (depending on configuration), and "run".  Right now, we
distinguish swap vs copy by whether the new image contains the "image
ok" marker, but having two instructions could distinguish this as
well.

There is some concern within the MCUboot community about semantic
differences between how the existing manifest is processed and how
SUIT will be processed.

Thanks,
David


From nobody Fri Mar 22 10:44:47 2019
Return-Path: <david.brown@linaro.org>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBC151313A5 for <suit@ietfa.amsl.com>; Fri, 22 Mar 2019 10:44:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=linaro.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v3YgmyVt82S6 for <suit@ietfa.amsl.com>; Fri, 22 Mar 2019 10:44:44 -0700 (PDT)
Received: from mail-qk1-x72b.google.com (mail-qk1-x72b.google.com [IPv6:2607:f8b0:4864:20::72b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00EFB13139B for <suit@ietf.org>; Fri, 22 Mar 2019 10:44:43 -0700 (PDT)
Received: by mail-qk1-x72b.google.com with SMTP id w20so1707443qka.7 for <suit@ietf.org>; Fri, 22 Mar 2019 10:44:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google;  h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=RKH8v/ectdBCSbfqubAdPmzhHVNc6L3xyjmbDulQdB0=; b=ezXcAtihlzlmRU9yyUifa54gwExN4g/sBfsdERGinoGlgOk6zaIoMkjW6Ar6LR/jXr Ghfdh6QE77vvW1lCL6Sg/1Rht8lHPFwbkdrxoZCwKj6+bhE4F+xitgHL9yjg7QLxHdxM AEp70+wL4HG7ltDEGHg0jPR4lKSMn+kZxf2JpuqkUv4wSwbd2grr/yq78aTPCxI4/NuL gXwPMfYsMHB/R4GN4OXq3OBQWT8arQS/mYyWFPF69euaEtfegEEZfoDAX3imf1BAU9s3 J0dvAMTVDqUCoDAZvxhyUUCG9IrermukHLpF8ohDEgQed6H1MjFWt3Lryjmkn/c7vcAf 7HVQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=RKH8v/ectdBCSbfqubAdPmzhHVNc6L3xyjmbDulQdB0=; b=e9TxBICV6wPIvmbtSmQILLWNcIw0EHK/TmOBGi1WRBpl5Tvcd6me4eNPLmOCHDTY8s KnKSTH5lw7IwES6PU+D8kfiaf2kVd++nGLfbq016zmIUQJz/l3DkkzRLni9ed9NyeE7i J6Zkzc4BiLzJB3YpeIxk5VrLWFzngtwIZ8UPaXq+VhJ35ycI8vUZUhiz5uU32j17BdD0 Nptl+fekA7YxmWL4nAETKl9dEpW2yZAq/haxm9rui4D4/JUv9erHvjTj38WVxG2NXxrZ qP7nHqFTE6ThvrCH4tS35K/rV1FucFQIdWeziKKAgw3CkC2vBXShQP4xCh8sjA4vpZ+4 s9Ww==
X-Gm-Message-State: APjAAAV9GPVWq/M3uj/GIVmx+xw+iV4HLigfU0vQ2E25H9tYA77ZxhtJ KXd2pe3mj0+7gEJYcs7/bgX54A==
X-Google-Smtp-Source: APXvYqzf7gpwd4gxbk15fy93YS64mc1XHI0EdFijtaH+0evHjqe1nVgeeDTs2QvPc8wZm6UEfkTHLQ==
X-Received: by 2002:a37:e315:: with SMTP id y21mr8843393qki.233.1553276682904;  Fri, 22 Mar 2019 10:44:42 -0700 (PDT)
Received: from davidb.org (cn-co-b07400e8c3-142422-1.tingfiber.com. [64.98.48.55]) by smtp.gmail.com with ESMTPSA id l129sm4716846qkb.44.2019.03.22.10.44.41 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Fri, 22 Mar 2019 10:44:42 -0700 (PDT)
Date: Fri, 22 Mar 2019 11:44:39 -0600
From: David Brown <david.brown@linaro.org>
To: Brendan Moran <Brendan.Moran@arm.com>
Cc: "suit@ietf.org" <suit@ietf.org>
Message-ID: <20190322174439.GB17361@davidb.org>
References: <16EC7DB9-1649-4A86-A370-F77CB03305AC@arm.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Disposition: inline
In-Reply-To: <16EC7DB9-1649-4A86-A370-F77CB03305AC@arm.com>
User-Agent: Mutt/1.10.1 (2018-07-13)
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/rSR0rFc6PourUBXniXNDDDwVriM>
Subject: Re: [Suit] Introducing draft-moran-suit-manifest-04
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 22 Mar 2019 17:44:46 -0000

In regards to encrypting images.  I wanted to explain a little how
this works in MCUboot.

The basic process is similar to the swap described in:
https://www.youtube.com/watch?v=TvXjw2l0Cd0

However, the image in the secondary slot is always encrypted, and the
image in the primary slot is always unencrypted.  This makes an
assumption that the primary slot is more difficult to access (usually
an internal device), and that the secondary slot lives in an external
device.

The manifest is not changed when the image is moved between the slots
(and decrypted/encrypted).  Right now this logic is hard-coded into
MCUboot.  It would certainly be possible to keep it hard-coded, and
have the manifest describe both the encrypted and unencrypted payload
that MCUboot would then just know which one to use.

Note also that the primary image is re-encrypted when the swap
happens.  It uses the same IV for the encryption, which bothers me,
since it makes it slightly vulnerable to the plaintext being modified
(although if the plain text can be modified, many other attacks are
possible).

Any other thoughts on how to handle this?  BTW, this is not really
talking about encrypted payloads that are downloaded and decrypted
before being written to flash.  This is where there are two images in
flash, the executable one being unencrypted.


From nobody Mon Mar 25 05:24:15 2019
Return-Path: <dthaler@microsoft.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23F6F1203C3 for <suit@ietfa.amsl.com>; Mon, 25 Mar 2019 05:24:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oet2cSjEFp1f for <suit@ietfa.amsl.com>; Mon, 25 Mar 2019 05:24:11 -0700 (PDT)
Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-co1nam03on0718.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe48::718]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21F89120390 for <suit@ietf.org>; Mon, 25 Mar 2019 05:24:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=HoSs7xzWoydXPg4+C+c1hS7eWcKNukiML6uAOb85rNc=; b=dSeZNFPySi/M5C30AL6hp32YnIGIItLFRZlb6Q76TShCXXktyBs7PAvp9hnO+qlLerN5AWQl06Iuv5LVqxBlRCiYeNVvQpm9QtauAqqqd3tfadRRB0cDeJqlwAbR6AFH/MWKhFfcMXD4qxu7E1X532Bnf3LVAhiWrCNHbIEi/uo=
Received: from CY4PR21MB0168.namprd21.prod.outlook.com (10.173.192.150) by CY4PR21MB0854.namprd21.prod.outlook.com (10.173.192.143) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1750.4; Mon, 25 Mar 2019 12:24:09 +0000
Received: from CY4PR21MB0168.namprd21.prod.outlook.com ([fe80::e4d9:80f9:fab1:345c]) by CY4PR21MB0168.namprd21.prod.outlook.com ([fe80::e4d9:80f9:fab1:345c%10]) with mapi id 15.20.1771.002; Mon, 25 Mar 2019 12:24:09 +0000
From: Dave Thaler <dthaler@microsoft.com>
To: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: Trust Anchor Store definition in arch doc
Thread-Index: AdTjBNd6xSglwDJFQCWGvNTd/DgAqA==
Date: Mon, 25 Mar 2019 12:24:08 +0000
Message-ID: <CY4PR21MB01682507A61342DBCDFDD134A35E0@CY4PR21MB0168.namprd21.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-03-25T08:12:04.6201210Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=35848b81-54e7-440d-89cc-a06b23ddec14; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic
x-originating-ip: [2001:67c:1232:144:59f:8af1:1157:c36a]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 63e2ed76-9998-48b7-f962-08d6b11cc819
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7193020); SRVR:CY4PR21MB0854; 
x-ms-traffictypediagnostic: CY4PR21MB0854:
x-ms-exchange-purlcount: 4
x-microsoft-antispam-prvs: <CY4PR21MB0854B77C4E604A786B2C09DAA35E0@CY4PR21MB0854.namprd21.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:9508;
x-forefront-prvs: 0987ACA2E2
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(396003)(346002)(39860400002)(376002)(366004)(189003)(199004)(6436002)(8676002)(86612001)(5640700003)(81156014)(33656002)(54896002)(6916009)(7736002)(81166006)(8936002)(1730700003)(790700001)(5660300002)(6346003)(8990500004)(606006)(53936002)(68736007)(53546011)(2501003)(9686003)(6116002)(74316002)(2906002)(97736004)(10090500001)(6306002)(256004)(236005)(22452003)(71200400001)(55016002)(52536014)(14444005)(10290500003)(99286004)(86362001)(6506007)(478600001)(46003)(71190400001)(476003)(105586002)(7696005)(106356001)(486006)(25786009)(186003)(316002)(2351001)(966005)(102836004)(14454004); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR21MB0854; H:CY4PR21MB0168.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; 
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: 0JwP5l7sSqhnFkOI/9T9MTI8cRlvw3PYZENluxZJ/7R4VP6GP+S2wthH2mgYNmAULlyDss1Fm8AZvGFErUkfdZEZEtjedqazfqrCe0EmZeZVunTOfObB1/d1DlxKYBV5muvioaEoeL0dkhSggr3lW84XDCPtHnRIMpr1Ho4vPWPZvPBsN4OmHAdF1pOsX0UhjvRXoE8fUpTztOXm8pX1gvsIOVLqFxEOsQRWf8FVBpQq5mJcLcHtGnMYv6/SCEt+NcmUZcfCWW8erxKqehVsrd6qWDqFS/NGh6otV44kKyxslqU0Z2R8sj2pMLb0DEiwxrtVszCtMw979+T7gfI2fqehZS1gH2r4/jV6saNanvQqj9A5ENf0KbVeOPi5qlnIoiRh3aWd70b5xoooihKCsH4RaCjIuQE1nXkDsb2cUFk=
Content-Type: multipart/alternative; boundary="_000_CY4PR21MB01682507A61342DBCDFDD134A35E0CY4PR21MB0168namp_"
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 63e2ed76-9998-48b7-f962-08d6b11cc819
X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Mar 2019 12:24:09.2358 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR21MB0854
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/BiuwYIQIs5WZUHyyoDDEVyZ_Ulw>
Subject: [Suit] Trust Anchor Store definition in arch doc
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 25 Mar 2019 12:24:14 -0000

--_000_CY4PR21MB01682507A61342DBCDFDD134A35E0CY4PR21MB0168namp_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_CY4PR21MB01682507A61342DBCDFDD134A35E0CY4PR21MB0168namp_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_CY4PR21MB01682507A61342DBCDFDD134A35E0CY4PR21MB0168namp_--


From nobody Mon Mar 25 19:07:07 2019
Return-Path: <c-addison@ti.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6EE7A1201DB for <suit@ietfa.amsl.com>; Mon, 25 Mar 2019 19:07:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.301
X-Spam-Level: 
X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ti.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gEycEwFktGqy for <suit@ietfa.amsl.com>; Mon, 25 Mar 2019 19:07:03 -0700 (PDT)
Received: from fllv0015.ext.ti.com (fllv0015.ext.ti.com [198.47.19.141]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EAAF81201D0 for <suit@ietf.org>; Mon, 25 Mar 2019 19:07:02 -0700 (PDT)
Received: from fllv0035.itg.ti.com ([10.64.41.0]) by fllv0015.ext.ti.com (8.15.2/8.15.2) with ESMTP id x2Q26xfU000979; Mon, 25 Mar 2019 21:06:59 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ti.com; s=ti-com-17Q1; t=1553566019; bh=x+UvhoyUgz8Fvb/xTYIj18IP3oFSZDbiKo8somv+f8U=; h=References:From:To:CC:Subject:In-Reply-To:Date; b=nbd16ajIJjpeb6xFk/23GwpDsEiha0s4aV/PDTWGaW5afDeQxbyXUNsdbNdsL8bor clAt1qhJBTSIlToQI9i7uxTpw6aXMsl+TRxwMH+0jPIuJq76EgExSubjb3lgBERXht 8bs3+pK0d6cA9GjBM7YVdnsdy8qvWvvSwo/qAzTo=
Received: from DFLE103.ent.ti.com (dfle103.ent.ti.com [10.64.6.24]) by fllv0035.itg.ti.com (8.15.2/8.15.2) with ESMTPS id x2Q26xxm063036 (version=TLSv1.2 cipher=AES256-GCM-SHA384 bits=256 verify=FAIL); Mon, 25 Mar 2019 21:06:59 -0500
Received: from DFLE109.ent.ti.com (10.64.6.30) by DFLE103.ent.ti.com (10.64.6.24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1713.5; Mon, 25 Mar 2019 21:06:59 -0500
Received: from lelv0327.itg.ti.com (10.180.67.183) by DFLE109.ent.ti.com (10.64.6.30) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1713.5 via Frontend Transport; Mon, 25 Mar 2019 21:06:59 -0500
Received: from LC02T30BGGTFM (ileax41-snat.itg.ti.com [10.172.224.153]) by lelv0327.itg.ti.com (8.15.2/8.15.2) with ESMTPS id x2Q26qaQ063689 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Mon, 25 Mar 2019 21:06:59 -0500
References: <16EC7DB9-1649-4A86-A370-F77CB03305AC@arm.com> <20190315163402.GA25574@davidb.org> <59F62162-578C-4975-A25B-EC261A7F4F7D@arm.com> <20190322173908.GA17361@davidb.org>
User-agent: mu4e 1.1.0; emacs 26.1
From: Cody Addison <c-addison@ti.com>
To: <suit@ietf.org>
CC: Brendan Moran <Brendan.Moran@arm.com>
Message-ID: <m1o95yie6z.fsf@ti.com>
In-Reply-To: <20190322173908.GA17361@davidb.org>
Date: Mon, 25 Mar 2019 21:06:52 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-EXCLAIMER-MD-CONFIG: e1e8a2fd-e40a-4ac6-ac9b-f7e9cc9ee180
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/Vu_oqIFE1QsWx3bZ7c3tsCFjNPY>
Subject: Re: [Suit] [EXTERNAL] Re: Introducing draft-moran-suit-manifest-04
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Mar 2019 02:07:05 -0000

David, Brendan,

> Any thoughts on what is appropriate to even represent in the manifest?
> The two instructions that the bootloader would follow would be "swap"
> or "apply" (depending on configuration), and "run".  Right now, we
> distinguish swap vs copy by whether the new image contains the "image
> ok" marker, but having two instructions could distinguish this as
> well.

Was there ever a consensus on how to represent this operation in the manife=
st? The copy instruction seems like the appropriate instruction to use in t=
he install phase, but I'm not sure what component identifier to use for the=
 source. My working assumption has been that a tool will create a single fi=
le which contains the manifest and payload data. Take a simple example of a=
 dual core MCU:

+--------------+
+ Manifest +
+--------------+
+ FW1        +
+--------------+
+ FW2        +
+--------------+

That file would then be streamed to the device and installed either on the =
fly or in separate download and install stages where the download includes =
the manifest and payloads. In more complicated scenarios there may be multi=
ple payloads that are optionally fetched. I see how to use the SUIT_Conditi=
on element to control which payloads get installed, but not how to referenc=
e payloads within the file. Maybe my working model is incorrect and this is=
 not how the manifest is intended to be used?

David Brown writes:

> On Thu, Mar 21, 2019 at 04:30:53PM +0000, Brendan Moran wrote:
>
>>Reboot resilience for =E2=80=9Cswap=E2=80=9D is probably outside the scop=
e of this draft.
>>Adding a condition to check the success marker might be useful.
>
> I'm not sure it really even makes sense to describe the reboot
> resilience in the manifest.  At least for swap, it is a large number
> of steps that have to be done carefully, along with a lot of extra
> state that is written every step.  I would think this intermediate
> state is beyond the scape of the manifest.
>
> For those interested, I've thrown together a bit of an amination
> describing how the swap operation works in MCUboot, including at least
> part of its state.
>
>   https://www.youtube.com/watch?v=3DTvXjw2l0Cd0
>
> I'm not actually sure it is even going to make very much sense for
> MCUboot to follow steps in the manifest, rather than just verifying
> that they are present.  The steps make sense for the download
> application.
>
> Some of the modes I envision ultimately supporting in MCUboot:
>
>  - swap: The current mode.  This is initiated by a "trailer" being
>    written to the secondary image, and the bootloader verifying that
>    the manifest is correct.  It might make sense for it to follow the
>    "swap" instruction, but it would only look at this secondary
>    manifest after being instructed to, out of band.
>
>  - overwrite: The other current possible mode.  Also initialized by
>    the "trailer" being written at the end of the second image, and
>    the bootloader verifying that the manifest is correct.  The second
>    image is copied to the primary image slot.  This is easier to make
>    resilient, since the entire operation can be restarted.
>
>  - Boot best: not implemented.  The upgrade would download an image
>    in the slot that is not being used.  There would be two images
>    built, one linked to each slot.
>
> Right now, upon boot, MCUboot checks the manifest of the primary slot,
> and will boot that image if it is valid.  Before this, it will check
> the trailer of the second slot to see if an upgrade is requested, and
> if so, check that manifest, and possibly swap/overwrite depending on
> how it is built.
>
> One difficulty I see following steps in the manifest is that the code
> currently maintains state out-of-band from the manifest.  The current
> state is:
>
>  - copy done: indicates that a copy/swap has finished and the primary
>    image can be checked (avoids having to check the secondary
>    partition manifest on every boot).
>
>  - image ok: after a new image boots, and decides it is functional,
>    it writes this marker.  Without this marker being written, a
>    subsequent reboot will cause the swap operation to be repeated to
>    revert the image.
>
>  - swap state: a series of markers to track the state of a swap, so
>    that it can be resumed if necessary.
>
> Any thoughts on what is appropriate to even represent in the manifest?
> The two instructions that the bootloader would follow would be "swap"
> or "apply" (depending on configuration), and "run".  Right now, we
> distinguish swap vs copy by whether the new image contains the "image
> ok" marker, but having two instructions could distinguish this as
> well.
>
> There is some concern within the MCUboot community about semantic
> differences between how the existing manifest is processed and how
> SUIT will be processed.
>
> Thanks,
> David
>
> _______________________________________________
> Suit mailing list
> Suit@ietf.org
> https://www.ietf.org/mailman/listinfo/suit


From nobody Mon Mar 25 21:04:56 2019
Return-Path: <Martin.Pagel@microsoft.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 46DA012023C for <suit@ietfa.amsl.com>; Mon, 25 Mar 2019 21:04:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rzVhtlijo3NX for <suit@ietfa.amsl.com>; Mon, 25 Mar 2019 21:04:51 -0700 (PDT)
Received: from NAM02-CY1-obe.outbound.protection.outlook.com (mail-eopbgr760111.outbound.protection.outlook.com [40.107.76.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0E2CA120241 for <suit@ietf.org>; Mon, 25 Mar 2019 21:04:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=XL5GYqRtoJ5alYk/M9Yhe2u3kLh2o3kKY37xouZqizk=; b=FEKXMWN2CkVm1Ta8Igb8VnvCagHsCutMNINUgENqOcRwQJ9K1pdXrbHXnH8v6trQ43nlyZKonjGdPOGoRk1LbEdeOeq/OkGQLkbj6u0XDVhR8R3xSMc4jAG22Vnta+5cjazT+5H0mFycFz0Icz3xxb7jfuD9cArYrfmWVftu+Ds=
Received: from BYAPR21MB1317.namprd21.prod.outlook.com (20.179.60.199) by BYAPR21MB1336.namprd21.prod.outlook.com (20.179.60.210) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1750.11; Tue, 26 Mar 2019 04:04:48 +0000
Received: from BYAPR21MB1317.namprd21.prod.outlook.com ([fe80::a89a:5b8a:e27c:ec15]) by BYAPR21MB1317.namprd21.prod.outlook.com ([fe80::a89a:5b8a:e27c:ec15%8]) with mapi id 15.20.1750.006; Tue, 26 Mar 2019 04:04:48 +0000
From: Martin Pagel <Martin.Pagel@microsoft.com>
To: Brendan Moran <Brendan.Moran@arm.com>
CC: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: draft-moran-suit-manifest-04 - prescriptive
Thread-Index: AdTbfYV7dO45RdMkQRKtZzBYR1IzsAEhD4AAAOFr4uA=
Date: Tue, 26 Mar 2019 04:04:48 +0000
Message-ID: <BYAPR21MB13176E50E6EA1150411018689D5F0@BYAPR21MB1317.namprd21.prod.outlook.com>
References: <BYAPR21MB1317CA992FE49959A00AB19E9D440@BYAPR21MB1317.namprd21.prod.outlook.com> <ED57D130-8835-4069-AF77-B0D3EAF43FF2@arm.com>
In-Reply-To: <ED57D130-8835-4069-AF77-B0D3EAF43FF2@arm.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mapagel@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-03-26T04:04:46.8267661Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=5c2d5a37-b73e-42ad-8fd4-086316b147ad; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic
x-originating-ip: [97.113.77.118]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 3405eac4-7d76-486b-6253-08d6b1a03077
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7193020); SRVR:BYAPR21MB1336; 
x-ms-traffictypediagnostic: BYAPR21MB1336:
x-ms-exchange-purlcount: 2
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Martin.Pagel@microsoft.com; 
x-microsoft-antispam-prvs: <BYAPR21MB1336FFE43DD93DFB7CC58FA29D5F0@BYAPR21MB1336.namprd21.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 09888BC01D
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(376002)(346002)(39860400002)(136003)(396003)(40434004)(199004)(189003)(51914003)(13464003)(51444003)(68736007)(6246003)(33656002)(52536014)(14454004)(476003)(53546011)(8676002)(76176011)(102836004)(81166006)(10090500001)(6506007)(86612001)(486006)(86362001)(99286004)(305945005)(7696005)(105586002)(6916009)(6436002)(72206003)(26005)(7736002)(966005)(74316002)(8936002)(478600001)(8990500004)(5660300002)(66066001)(446003)(229853002)(316002)(10290500003)(256004)(71190400001)(71200400001)(6116002)(3846002)(106356001)(97736004)(53936002)(4326008)(14444005)(5024004)(81156014)(11346002)(2906002)(22452003)(25786009)(6306002)(9686003)(55016002)(186003); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR21MB1336; H:BYAPR21MB1317.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: +O98VuALN3dsQkWd/Ub24scs0M0wHyivatFtvTjd30i/C0A+2uEX6bg1jthgXYNKLaReq4QEPPFjJhgB8n4eoiN0n32alAxbACHOOUjbEXBZWAOfE9BIltc+he4NRMihXjAvHkPfm5bkjLI/9ANjH1zqzEHXAMZXcApfKPb50skeG/HRZ7J+dMsajCEI2iOfRH7BrgrJmGo0GiIVqMrnuR0v4aPS87K/opS8BfZ0imYdaHj/SBpwjsVSsSyidn83H4peoQxz3K9jH9htC/eul8WVz+rbfEXfGd1A5g0guooQCS2Yp9uJBT8kJhUI8ir1jBhQQgnOeov5cSR5Ucx57cURX48Z9zfkGhk5y9rU5cyIIsEVa3gnEpIsne08nYM3CU2l4wn4A4VL8OGto1+foVcfc1b1USkpRADDJVvElrI=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 3405eac4-7d76-486b-6253-08d6b1a03077
X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Mar 2019 04:04:48.4233 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR21MB1336
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/u9GRf4y3OP1idB7xJ3fACVltKpQ>
Subject: Re: [Suit] draft-moran-suit-manifest-04 - prescriptive
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Mar 2019 04:04:54 -0000

SGkgQnJlbmRhbiwgDQpBIHF1aWNrIHJlcGx5Og0KLSBubyBzY3JpcHQgb3B0aW9uOiBFdmVuIGlm
IHRoYXQncyBub3QgeW91ciBpbnRlbnRpb24sIHdoeSBub3QgbGVhdmUgaXQgYXMgYW4gb3B0aW9u
IGZvciBjb25zdHJhaW5lZCBkZXZpY2VzIHdoaWNoIHJhdGhlciBoYXJkY29kZSB0aGUgaW5zdGFs
bGF0aW9uIHByb2Nlc3MgKGJhc2VkIG9uIGNvbXBvbmVudCBpZCBmb3IgZXhhbXBsZSkgcmF0aGVy
IHRoYW4gaW1wbGVtZW50aW5nIGFuIGludGVycHJldGVyPw0KLSBjb21wb25lbnQgaWQ6IHRoYW5r
cyBmb3IgdGhlIGV4cGxhbmF0aW9uLCB5b3VyIHByb3Bvc2FscyBpcyB2ZXJ5IGZsZXhpYmxlLg0K
LSBVUklzOiBUaGUgZnVsbCAocHJpb3JpdGl6ZWQpIGxpc3Qgd291bGQgbmVlZCB0byBsaXN0IHJl
bGF0aXZlIGluc3RlYWQgb2YgZnVsbCBwYXRocy4gSSBiZXQgdGhhdCdzIGJldHRlciB0aGFuIGNv
bXByZXNzaW9uLg0KTG9va2luZyBmb3J3YXJkIHRvIGZ1cnRoZXIgZGlzY3Vzc2lvbnMgdG9tb3Jy
b3cuDQpNYXJ0aW4NCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEJyZW5kYW4g
TW9yYW4gPEJyZW5kYW4uTW9yYW5AYXJtLmNvbT4gDQpTZW50OiBUaHVyc2RheSwgTWFyY2ggMjEs
IDIwMTkgOToxOSBBTQ0KVG86IE1hcnRpbiBQYWdlbCA8TWFydGluLlBhZ2VsQG1pY3Jvc29mdC5j
b20+DQpDYzogc3VpdEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IGRyYWZ0LW1vcmFuLXN1aXQtbWFu
aWZlc3QtMDQgLSBwcmVzY3JpcHRpdmUNCg0KSGkgTWFydGluLA0KDQpNeSBpbnRlbnQgaXMgdG8g
cHJvZHVjZSBhIGdlbmVyaWMgaW50ZXJwcmV0ZXIuIE15IGhvcGUgaXMgdG8gbWFrZSBpdCBzbWFs
bCBlbm91Z2ggdGhhdCBpdCBpcyByZWFzb25hYmxlIHRvIGluY2x1ZGUgb24gdmVyeSBjb25zdHJh
aW5lZCBwbGF0Zm9ybXMuIEl04oCZcyBub3QgcmVhbGx5IGludGVuZGVkIGZvciB1c2Ugd2l0aCBu
b25lIG9mIHRoZSBzY3JpcHRzIHBvcHVsYXRlZC4NCg0KDQpDb21wb25lbnQgSURzOg0KSSBkb27i
gJl0IHRoaW5rIEnigJl2ZSBleHBsYWluZWQgY29tcG9uZW50IElEIHdlbGwgZW5vdWdoLiBJdOKA
mXMgc3VwcG9zZWQgdG8gYmUgYSBtYWNoaW5lLXJlYWRhYmxlIHBhdGguIFRvIHRoYXQgZW5kLCBp
dOKAmXMgYW4gYXJyYXkgb2YgYmluYXJ5IHN0cmluZ3MsIHdoaWNoIG1ha2VzIGl0IHNpbXBsZSBm
b3IgZGV2aWNlcyB0byBwYXJzZS4gVGhlIGV4YW1wbGUgSSBnYXZlIHdhcyBodW1hbiByZWFkYWJs
ZSB0byBtYWtlIGl0IGVhc2llciB0byBpbGx1c3RyYXRlIHRoZSBwb2ludC4gSG93ZXZlciwgd2hl
biBhIGRldmljZSBoYXMgdHdvIHBsYWNlcyB0aGF0IGl0IGNhbiBzdG9yZSBhIHBheWxvYWQsIGl0
IHdvdWxkIGJlIHBvc3NpYmxlIHRvIHVzZSBjb21wb25lbnQgSURzIFto4oCZMDDigJldIGFuZCBb
aOKAmTAxXS4gSWYgeW91IHdhbnQgYSBjb21wb25lbnQgSUQgdGhhdCBsZXRzIHlvdSB1c2UgYW4g
YXJiaXRyYXJ5IG9mZnNldCBpbnRvIGZsYXNoLCB0aGVuIHlvdSBjb3VsZCBoYXZlIGEgc3lzdGVt
IGFzIGZvbGxvd3M6DQoxLiBUaGUgZmlyc3QgZWxlbWVudCBvZiB0aGUgQ29tcG9uZW50IElEIGlu
ZGljYXRlcyB3aGljaCBzdG9yYWdlIHN1YnN5c3RlbSB0byB1c2UgKGludGVybmFsIGZsYXNoLCBv
ciBleHRlcm5hbCBTUEkgZmxhc2gsIGZvciBleGFtcGxlKSAyLiBGb3IgaW50ZXJuYWwgZmxhc2gs
IHRoZSBzZWNvbmQgZWxlbWVudCBjb3VsZCByZXByZXNlbnQgYW4gb2Zmc2V0Lg0KMy4gRm9yIGV4
dGVybmFsIFNQSSBmbGFzaCwgdGhlIHNlY29uZCBlbGVtZW50IGNvdWxkIGluZGljYXRlIHRoZSBm
aWxlIG5hbWUgb3IgZGlyZWN0b3J5IHRvIHVzZS4NCg0KSWYgaW50ZXJuYWwgZmxhc2ggaXMgcmVw
cmVzZW50ZWQgYXMgaOKAmTAw4oCZIHRoZW4gdGhlIGNvbXBvbmVudCBJRCBmb3IgYW4gaW50ZXJu
YWwgZmxhc2ggdGFyZ2V0IHdpdGggb2Zmc2V0IDAgd291bGQgYmU6IFto4oCZMDDigJksaOKAmTAw
4oCZXSBXaXRoIGFuIG9mZnNldCBvZiAweDQwMCwgdGhlIGNvbXBvbmVudCBJRCB3b3VsZCBiZTog
W2jigJkwMOKAmSxo4oCZMDQwMOKAmV0gKGluIGJpZy1lbmRpYW4gbm90YXRpb24pIElmIGV4dGVy
bmFsIGZsYXNoIGlzIHJlcHJlc2VudGVkIGFzIGjigJkwMeKAmSB0aGVuIHRoZSBjb21wb25lbnQg
SUQgZm9yIGEgdGVtcCBmaWxlIG9uIGV4dGVybmFsIGZsYXNoIHdpdGggcGF0aCDigJwvdG1wL2V4
YW1wbGXigJ0gY291bGQgYmUgcmVwcmVzZW50ZWQgYXMgZWl0aGVyOg0KDQpbaOKAmTAx4oCZLCAi
L3RtcC9leGFtcGxl4oCdXQ0KT3INClto4oCZMDHigJksIOKAnHRtcOKAnSwg4oCcZXhhbXBsZeKA
nV0NCg0KQmVjYXVzZSDigJxwYXRoc+KAnSBhcmUgZXh0cmVtZWx5IGFwcGxpY2F0aW9uIGRlcGVu
ZGVudCwgd2UgaGF2ZSB0cmllZCB0byBhdm9pZCBzcGVjaWZ5aW5nIHRoaXMgYmVoYXZpb3VyIG11
Y2guIFBlcmhhcHMgaXQgd291bGQgYmUgaGVscGZ1bCB0byBhZGQgYSBmZXcgbW9yZSBleGFtcGxl
cy4NCg0KVVJJczoNClVzaW5nIGEgbWVjaGFuaXNtIHRvIHNwZWNpZnkgYSBVUkkgcmVsYXRpdmUg
cGF0aCBpcyBpbnRlcmVzdGluZy4gSG93IGRvIHlvdSBzZWUgdGhhdCBpbnRlcmFjdGluZyB3aXRo
IHRoZSBwcmlvcml0aXNlZCBsaXN0IG9mIFVSSXM/IEFub3RoZXIgb3B0aW9uIHdvdWxkIGJlIHRv
IHNpbXBseSBjb21wcmVzcyB0aGUgbWFuaWZlc3QuIFRoaXMgaXMgbm90IGFuIG9wdGlvbiBvbiBz
bWFsbCBkZXZpY2VzLCBidXQgYSBkZXZpY2UgdGhhdCBjYW4gYWNjZXB0IDEwIGltYWdlcyBpcyBu
b3QgYSBzbWFsbCBkZXZpY2UsIHNvIGEgbWluaW1hbCBjb21wcmVzc2lvbiBsaWJyYXJ5IG1heSBi
ZSBhIHZpYWJsZSBvcHRpb24uDQoNCkkgdGhpbmsgd2Ugc2hvdWxkIGNvbnNpZGVyIGFkZGluZyBp
biBzb21lIG1lY2hhbmlzbSB0byBkZWFsIHdpdGggdGhpcywgYnV0IEkgdGhpbmsgd2Ugc2hvdWxk
IGZpcnN0IHN0dWR5IHdoZXRoZXIgY29tcHJlc3Npb24gaXMgdGhlIHJpZ2h0IGFuc3dlci4NCg0K
RGVwZW5kZW5jaWVzLCBVbnBhY2tpbmc6DQpZb3XigJlyZSByaWdodCwgdGhlcmUgYXJlbuKAmXQg
ZXhhbXBsZXMgb2YgYWxsIGZlYXR1cmVzLiBUaGF04oCZcyBjZXJ0YWlubHkgc29tZXRoaW5nIHdl
IHdhbnQgdG8gd29yayB0b3dhcmRzIQ0KDQpCZXN0IFJlZ2FyZHMsDQpCcmVuZGFuDQoNCj4gT24g
MTUgTWFyIDIwMTksIGF0IDIzOjIwLCBNYXJ0aW4gUGFnZWwgPE1hcnRpbi5QYWdlbEBtaWNyb3Nv
ZnQuY29tPiB3cm90ZToNCj4NCj4gSGkgQnJlbmRhbiwNCj4gVGhpcyBhbiBpbXByZXNzaXZlIHJl
LWRyYWZ0LCBpdCdzIGFsbW9zdCBhIG5ldy9zZXBhcmF0ZSBtYW5pZmVzdCBhcHByb2FjaCBhbGwg
dG9nZXRoZXIuIEkgbGlrZSB0aGUgc3dpdGNoIGZyb20gYSBkZXNjcmlwdGl2ZSBhcHByb2FjaCB0
byBhIHByZXNjcmlwdGl2ZSBvbmUgYW5kIHRoZSBmYWN0IHRoYXQgdGhlIG1hbmlmZXN0IGlzIHF1
aXRlIHNtYWxsIGZvciB0aGUgYmFzaWMgY2FzZXMuDQo+DQo+IElzIHlvdXIgZ29hbCB0byBkZXZl
bG9wIGEgZ2VuZXJpYyBpbnN0YWxsZXIgd2hpY2ggY291bGQgaW50ZXJwcmV0IHRoZSAic2NyaXB0
IiAoYXBwbHktaW1hZ2UgYW5kIHJ1bi1pbWFnZSBzZWN0aW9ucykgYW5kIGFwcGx5IGFueSBudW1i
ZXIgb2YgaW1hZ2VzIG9uIGEgZmFpcmx5IGNvbXBsaWNhdGVkIE1DVSBjb25maWd1cmF0aW9uPyAo
SXQgcmVtaW5kcyBtZSBhIGJpdCBvZiB0aGUgc2V0dXAuaW5mIHNjcmlwdGluZyBjYXBhYmlsaXRp
ZXMgSSBhZGRlZCBpbiBXaW5kb3dzIDIuMCkgSSB0aGluayB0aGF0IHdvdWxkIGJlIHF1aXRlIGlu
dHJpZ3VpbmcgZm9yIG1vcmUgc29waGlzdGljYXRlZCBNQ1VzLCBidXQgSSB3b3VsZCBleHBlY3Qg
dmVyeSBjb25zdHJhaW5lZCBNQ1VzIChsaWtlIHRoZSBvbmUgdGFyZ2V0ZWQgYnkgTUNVQm9vdCkg
dG8gdXNlIGEgc3BlY2lhbCBwdXJwb3NlIGluc3RhbGxlci4gQnV0IGJlY2F1c2UgdGhlICJzY3Jp
cHQiIHBvcnRpb25zIG9mIHRoZSBtYW5pZmVzdCBhcmUgb3B0aW9uYWwsIG5vbmUgd291bGQgbmVl
ZCB0byBiZSBwcmVzZW50IGZvciB0aG9zZSBjYXNlcywgY29ycmVjdD8NCj4NCj4gSGVyZSBhcmUg
YSBmZXcgc3BlY2lmaWMgY29tbWVudHMgYW5kIHF1ZXN0aW9uczoNCj4NCj4gKiBDb21wb25lbnQg
SWQNCj4gSSB1bmRlcnN0YW5kIHRoZSBmaXJzdCBwYXJhbWV0ZXIgaXMgYSBic3RyIGZvciBuYW1l
LCBidXQgd2hhdCdzIHRoZSBzZWNvbmQgKG51bWVyaWMpIHBhcmFtZXRlcj8gSXMgdGhhdCBzb21l
IHR5cGUgb2Ygb2Zmc2V0PyBEaWQgSSBtaXNzIHRoZSBleHBsYW5hdGlvbiBmb3IgdGhpcyBwYXJh
bWV0ZXI/DQo+DQo+ICogVVJJcw0KPiBJZiB5b3UgbmVlZCB0byBpbnN0YWxsIDEwIGltYWdlcywg
dGhlIFVSSXMgdGFrZSB1cCBhIGxvdCBvZiBzcGFjZSBhbmQgdGhlcmUgaXMgYSBnb29kIGNoYW5j
ZSB0aGV5IGFsbCBoYXZlIHRoZSBzYW1lIGJhc2UgVVJMLiBIb3cgYWJvdXQgYWxsb3dpbmcgdG8g
c3BlY2lmeSB0aGUgYmFzZSBVUkwgYW5kIGFwcGVuZCB0aGUgY29tcG9uZW50IG5hbWUgdG8gdGhh
dCBVUkw/DQo+DQo+ICogRGVwZW5kZW5jeSwgVW5wYWNraW5nLi4uDQo+IFRoZSBleGFtcGxlcyBh
cmUgdmVyeSB1c2VmdWwsIGJ1dCBvbmx5IGNvdmVyIGEgZmV3IG1hbmlmZXN0IG9wdGlvbnMuIENh
biB5b3UgcHJvdmlkZSBzb21lIG1vcmUgZXhhbXBsZXMgdG8gY292ZXIgZGVwZW5kZW5jeSBibG9j
a3MsIHVucGFja2luZywgcnVuX3NlcXVlbmNlIGV0Yz8NCj4NCj4gVGhhbmtzDQo+IE1hcnRpbg0K
Pg0KPg0KPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBTdWl0IDxzdWl0LWJv
dW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBCcmVuZGFuIE1vcmFuDQo+IFNlbnQ6IFR1ZXNk
YXksIE1hcmNoIDEyLCAyMDE5IDM6MzUgQU0NCj4gVG86IHN1aXRAaWV0Zi5vcmcNCj4gU3ViamVj
dDogW1N1aXRdIEludHJvZHVjaW5nIGRyYWZ0LW1vcmFuLXN1aXQtbWFuaWZlc3QtMDQNCj4NCj4g
ZHJhZnQtbW9yYW4tc3VpdC1tYW5pZmVzdC0wNCBoYXMgbm93IGJlZW4gcHVibGlzaGVkLg0KPg0K
PiBodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0
cHMlM0ElMkYlMkZ0b29sDQo+IHMuaWV0Zi5vcmclMkZodG1sJTJGZHJhZnQtbW9yYW4tc3VpdC1t
YW5pZmVzdC0wNCZhbXA7ZGF0YT0wMiU3QzAxJTdDTWENCj4gcnRpbi5QYWdlbCU0MG1pY3Jvc29m
dC5jb20lN0NiN2Q2YzhjOGRjMTc0MWNjYTFiYTA4ZDZhZTE4ZTc5YiU3QzcyZjk4OA0KPiBiZjg2
ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM2ODg3ODE5MzI0NTM1MDk4JmFtcDtz
ZGF0YT10TWpvDQo+IDVMVW1XN1dEb0slMkJ4SzBYZWlZTkE0djVBUjBRUkVPYzk1U3pmWlVFJTNE
JmFtcDtyZXNlcnZlZD0wDQo+DQo+IFRoaXMgZHJhZnQgaXMgdGhlIHJlc3VsdCBvZiBjb21iaW5p
bmcgdGhlIGluZm9ybWF0aW9uIG1vZGVsIGluIGRyYWZ0LW1vcmFuLXN1aXQtYmVoYXZpb3VyYWwt
bWFuaWZlc3RzLTAwICh0aGUgMDEgdmVyc2lvbiBmaXhlcyBleGFtcGxlIGZvcm1hdHRpbmcgb25s
eSkgd2l0aCB0aGF0IGluIGRyYWZ0LWlldGYtc3VpdC1pbmZvcm1hdGlvbi1tb2RlbCwgdGhlbiBz
ZXJpYWxpc2luZyB0aGUgcmVzdWx0IGluIENCT1IuIFRoaXMgaXMgYSBzaWduaWZpY2FudCBkZXBh
cnR1cmUgZnJvbSBwcmV2aW91cyBkcmFmdHMuIEl0IGF0dGVtcHRzIHRvIHByZXNlcnZlIGZsZXhp
YmlsaXR5LCBmdWxseSBkZWZpbmUgdGhlIGJlaGF2aW91ciBvZiByZWNpcGllbnQsIHNpbXBsaWZ5
IHRoZSBtYW5pZmVzdCBzdHJ1Y3R1cmUsIHJlZHVjZSBjb2RlLXNpemUgb2YgdGhlIHJlY2lwaWVu
dCwgYW5kIHJlZHVjZSB0aGUgc2l6ZSBvZiB0aGUgbWFuaWZlc3QuIFRoaXMgYW1iaXRpb3VzIHNl
dCBvZiBnb2FscyByZXF1aXJlZCBhIHNpZ25pZmljYW50IGNoYW5nZSBpbiBhcHByb2FjaCBhcyBj
b21wYXJlZCB0byBkcmFmdC1tb3Jhbi1zdWl0LW1hbmlmZXN0LTAzIGFuZCBiZWZvcmUuIEluIG9y
ZGVyIHRvIG91dGxpbmUgdGhlIGFwcHJvYWNoIGNsZWFybHksIHdlIGhhdmUgc2VwYXJhdGVseSBw
dWJsaXNoZWQgZHJhZnQtbW9yYW4tc3VpdC1iZWhhdmlvdXJhbC1tYW5pZmVzdHMtMDAuIGRyYWZ0
LW1vcmFuLXN1aXQtbWFuaWZlc3QtMDQgZm9jdXNlcyBtb3JlIG9uIHRoZSBzZXJpYWxpc2F0aW9u
IG9mIHRoZSBtYW5pZmVzdC4NCj4NCj4gSSBsb29rIGZvcndhcmQgdG8gZGlzY3Vzc2luZyB0aGlz
IGRyYWZ0IGluIG1vcmUgZGV0YWlsLg0KPg0KPiBCZXN0IFJlZ2FyZHMsDQo+IEJyZW5kYW4NCj4g
SU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRh
Y2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5
b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5k
ZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90
aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUg
aW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPg0KPiBfX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBTdWl0IG1haWxpbmcgbGlzdA0K
PiBTdWl0QGlldGYub3JnDQo+IGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0
bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy4NCj4gaWV0Zi5vcmclMkZtYWlsbWFuJTJG
bGlzdGluZm8lMkZzdWl0JmFtcDtkYXRhPTAyJTdDMDElN0NNYXJ0aW4uUGFnZWwlNA0KPiAwbWlj
cm9zb2Z0LmNvbSU3Q2I3ZDZjOGM4ZGMxNzQxY2NhMWJhMDhkNmFlMThlNzliJTdDNzJmOTg4YmY4
NmYxNDFhZjkxDQo+IGFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzY4ODc4MTkzMjQ1MzUwOTgm
YW1wO3NkYXRhPWdZVE5WJTJGNWNzdllkUGYNCj4gT1ljYWNvNEc1QVVMMlN5WlZhU1JhdGFYeFE5
NjAlM0QmYW1wO3Jlc2VydmVkPTANCg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9m
IHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkg
YWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50
LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9z
ZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9z
ZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsg
eW91Lg0K


From nobody Tue Mar 26 13:26:19 2019
Return-Path: <rdd@cert.org>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1722120B00 for <suit@ietfa.amsl.com>; Tue, 26 Mar 2019 13:26:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JlqaJV00hdI4 for <suit@ietfa.amsl.com>; Tue, 26 Mar 2019 13:26:16 -0700 (PDT)
Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F02C7120AFE for <suit@ietf.org>; Tue, 26 Mar 2019 13:26:15 -0700 (PDT)
Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x2QKQEHI035648 for <suit@ietf.org>; Tue, 26 Mar 2019 16:26:14 -0400
DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu x2QKQEHI035648
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1553631974; bh=PgkzvuKTdptx5+oEvJcRFJtrbhjrvwFqi7fdvDweKns=; h=From:To:Subject:Date:From; b=eH3/5xJby4KGI7r7h0uzSa8Z7+ShXH1I7nqhDE+7/KNYSfHIIW6IYNJVN41YFPsOU DffHsep3KUQXUgMkqb18Rfh1m5XtebBUDfSyYO8DI1fBWrlziPKYLRiRAjoBgMUkh8 U9T5pgA04DQ+a3U1TU5LCqKDu1YiN9gmZyVgWHeY=
Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x2QKQA1E022522 for <suit@ietf.org>; Tue, 26 Mar 2019 16:26:10 -0400
Received: from MARCHAND.ad.sei.cmu.edu ([10.64.28.251]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0435.000; Tue, 26 Mar 2019 16:26:10 -0400
From: Roman Danyliw <rdd@cert.org>
To: "suit@ietf.org" <suit@ietf.org>
Thread-Topic: UUID reference in draft-ietf-suit-information-model
Thread-Index: AdTkD9FaUxHv5dzrT7W8AUtGdbPwrw==
Date: Tue, 26 Mar 2019 20:26:09 +0000
Message-ID: <359EC4B99E040048A7131E0F4E113AFC01B330D634@marchand>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.64.22.6]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/zIb8toFs4XPFfu6iN-mSwZ6vFjQ>
Subject: [Suit] UUID reference in draft-ietf-suit-information-model
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Mar 2019 20:26:18 -0000

Hi!

Sections 3.3 and 3.4 of draft-ietf-suit-information-model makes reference t=
o different types of UUID formats and generation schemes without citation o=
r explanation.  [RFC4122] is included in the references section.  Assuming =
RFC4112 UUIDs are the formats in question, RFC4112 should be cited in these=
 sections. =20

There is also asymmetry in terminology, RFC4112 describes "versions" UUIDs,=
 but this draft uses the term "types".  Is it accepted practice that these =
terms are interchangeable?=20

Finally, it seems like RFC4112 should be a normative reference because it i=
s needed to explain how to make the UUIDs in Sections 3.3 and 3.4.

Roman  =20


From nobody Wed Mar 27 02:02:38 2019
Return-Path: <internet-drafts@ietf.org>
X-Original-To: suit@ietf.org
Delivered-To: suit@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 67B03120277; Wed, 27 Mar 2019 02:02:24 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
From: internet-drafts@ietf.org
To: <i-d-announce@ietf.org>
Cc: suit@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 6.94.1
Auto-Submitted: auto-generated
Precedence: bulk
Reply-To: suit@ietf.org
Message-ID: <155367734433.10345.6290920980817997505@ietfa.amsl.com>
Date: Wed, 27 Mar 2019 02:02:24 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/0hht3VMFSwr8v5PlxC3o5z6bzPA>
Subject: [Suit] I-D Action: draft-ietf-suit-architecture-04.txt
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Mar 2019 09:02:36 -0000

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Software Updates for Internet of Things WG of the IETF.

        Title           : A Firmware Update Architecture for Internet of Things Devices
        Authors         : Brendan Moran
                          Milosch Meriac
                          Hannes Tschofenig
                          David Brown
	Filename        : draft-ietf-suit-architecture-04.txt
	Pages           : 25
	Date            : 2019-03-27

Abstract:
   Vulnerabilities with Internet of Things (IoT) devices have raised the
   need for a solid and secure firmware update mechanism that is also
   suitable for constrained devices.  Incorporating such update
   mechanism to fix vulnerabilities, to update configuration settings as
   well as adding new functionality is recommended by security experts.

   This document lists requirements and describes an architecture for a
   firmware update mechanism suitable for IoT devices.  The architecture
   is agnostic to the transport of the firmware images and associated
   meta-data.

   This version of the document assumes asymmetric cryptography and a
   public key infrastructure.  Future versions may also describe a
   symmetric key approach for very constrained devices.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-suit-architecture/

There are also htmlized versions available at:
https://tools.ietf.org/html/draft-ietf-suit-architecture-04
https://datatracker.ietf.org/doc/html/draft-ietf-suit-architecture-04

A diff from the previous version is available at:
https://www.ietf.org/rfcdiff?url2=draft-ietf-suit-architecture-04


Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From nobody Wed Mar 27 02:03:42 2019
Return-Path: <housley@vigilsec.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0CE351204D8 for <suit@ietfa.amsl.com>; Wed, 27 Mar 2019 02:03:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.899
X-Spam-Level: 
X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RvvxAhk6DyxD for <suit@ietfa.amsl.com>; Wed, 27 Mar 2019 02:03:31 -0700 (PDT)
Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B62B6120498 for <suit@ietf.org>; Wed, 27 Mar 2019 02:03:27 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 462D2300AA4 for <suit@ietf.org>; Wed, 27 Mar 2019 04:45:09 -0400 (EDT)
X-Virus-Scanned: amavisd-new at mail.smeinc.net
Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 4mN6W7uN9nOx for <suit@ietf.org>; Wed, 27 Mar 2019 04:45:08 -0400 (EDT)
Received: from dhcp-8a9b.meeting.ietf.org (dhcp-8a9b.meeting.ietf.org [31.133.138.155]) by mail.smeinc.net (Postfix) with ESMTPSA id D8250300465 for <suit@ietf.org>; Wed, 27 Mar 2019 04:45:07 -0400 (EDT)
From: Russ Housley <housley@vigilsec.com>
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 12.2 \(3445.102.3\))
Message-Id: <5D5FB80B-10A5-4DDE-B030-C9F667E8229C@vigilsec.com>
Date: Wed, 27 Mar 2019 05:03:23 -0400
To: suit <suit@ietf.org>
X-Mailer: Apple Mail (2.3445.102.3)
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/cu0ZbkISdgImNEdzTC-Wi1y6TEw>
Subject: [Suit] WG Last Call for draft-ietf-suit-architecture-04
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Mar 2019 09:03:42 -0000

This is the SUIT WG Last Call for "A Firmware Update Architecture for =
Internet of Things Devices=E2=80=9D <draft-ietf-suit-architecture-04>.  =
Please review the document and send your comments to the list by 13 =
April 2019.

The datatracker page for the document is =
https://datatracker.ietf.org/doc/draft-ietf-suit-architecture/

Thanks,
Russ & Dave & Dave


From nobody Wed Mar 27 06:04:48 2019
Return-Path: <mcr@sandelman.ca>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED8A41202AD for <suit@ietfa.amsl.com>; Wed, 27 Mar 2019 06:04:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E6pIVMbIfPDl for <suit@ietfa.amsl.com>; Wed, 27 Mar 2019 06:04:45 -0700 (PDT)
Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E1DD0120285 for <suit@ietf.org>; Wed, 27 Mar 2019 06:04:44 -0700 (PDT)
Received: from dooku.sandelman.ca (unknown [IPv6:2001:67c:1232:144:6e88:14ff:fe34:93bc]) by relay.sandelman.ca (Postfix) with ESMTPS id C99DE1F45B for <suit@ietf.org>; Wed, 27 Mar 2019 13:04:42 +0000 (UTC)
Received: by dooku.sandelman.ca (Postfix, from userid 179) id 662D92825; Wed, 27 Mar 2019 14:04:44 +0100 (CET)
From: Michael Richardson <mcr@sandelman.ca>
To: suit@ietf.org
In-reply-to: <155367734433.10345.6290920980817997505@ietfa.amsl.com>
References: <155367734433.10345.6290920980817997505@ietfa.amsl.com>
Comments: In-reply-to internet-drafts@ietf.org message dated "Wed, 27 Mar 2019 02:02:24 -0700."
X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <29292.1553691884.1@dooku.sandelman.ca>
Date: Wed, 27 Mar 2019 14:04:44 +0100
Message-ID: <29293.1553691884@dooku.sandelman.ca>
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/CN1jATDFUfSAXYTVnPI1uERq1iU>
Subject: Re: [Suit] I-D Action: draft-ietf-suit-architecture-04.txt
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Mar 2019 13:04:47 -0000

internet-drafts@ietf.org wrote:
    >         Title : A Firmware Update Architecture for Internet of Things

I wonder if the title should be changed to be more "SUIT"...
So Firmware -> Software ?

--
]               Never tell me the odds!                 | ipv6 mesh networks [
]   Michael Richardson, Sandelman Software Works        | network architect  [
]     mcr@sandelman.ca  http://www.sandelman.ca/        |   ruby on rails    [


From nobody Wed Mar 27 06:42:39 2019
Return-Path: <dthaler@microsoft.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD7E7120275 for <suit@ietfa.amsl.com>; Wed, 27 Mar 2019 06:42:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PRZxF9wriwyt for <suit@ietfa.amsl.com>; Wed, 27 Mar 2019 06:42:35 -0700 (PDT)
Received: from NAM03-BY2-obe.outbound.protection.outlook.com (mail-eopbgr780129.outbound.protection.outlook.com [40.107.78.129]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 932F212001E for <suit@ietf.org>; Wed, 27 Mar 2019 06:42:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=CxFG0UPYi8qtx1LlTwNL+a1LV4ZyD+3XG4xUTJIFpsk=; b=g124hKUOCV+AM4q1Na/a0c7KK2J9x4RwwxxJuffaKokikdZr9DcZ7V9MEjGKjKE036x83HnfSquPuCyOA4XJDvITNxgDDJ3BZwCTs//mSmb3nxJJ0CBUbGCGrXeRbggbp1cicPsLzPbboC8iFF9ZQ3317Bv/P/ZoO2QrZU8VIXc=
Received: from CY4PR21MB0168.namprd21.prod.outlook.com (10.173.192.150) by CY4PR21MB0838.namprd21.prod.outlook.com (10.173.192.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1771.3; Wed, 27 Mar 2019 13:42:34 +0000
Received: from CY4PR21MB0168.namprd21.prod.outlook.com ([fe80::e4d9:80f9:fab1:345c]) by CY4PR21MB0168.namprd21.prod.outlook.com ([fe80::e4d9:80f9:fab1:345c%10]) with mapi id 15.20.1771.002; Wed, 27 Mar 2019 13:42:33 +0000
From: Dave Thaler <dthaler@microsoft.com>
To: Michael Richardson <mcr@sandelman.ca>, "suit@ietf.org" <suit@ietf.org>
Thread-Topic: [Suit] I-D Action: draft-ietf-suit-architecture-04.txt
Thread-Index: AQHU5HvcicW4vY7XJkCD1dyD8FXIsaYfclMAgAAKNCA=
Date: Wed, 27 Mar 2019 13:42:33 +0000
Message-ID: <CY4PR21MB0168B1CAAF69C932C5B8FB61A3580@CY4PR21MB0168.namprd21.prod.outlook.com>
References: <155367734433.10345.6290920980817997505@ietfa.amsl.com> <29293.1553691884@dooku.sandelman.ca>
In-Reply-To: <29293.1553691884@dooku.sandelman.ca>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-03-27T13:42:33.8010608Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=6cbf664a-be66-440d-adbc-c01c343e6bf6; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic
x-originating-ip: [2001:67c:1232:144:90aa:beb4:b6da:435f]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: e463d2ac-99d6-46cf-8b71-08d6b2ba1115
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7193020); SRVR:CY4PR21MB0838; 
x-ms-traffictypediagnostic: CY4PR21MB0838:
x-ms-exchange-purlcount: 2
authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; 
x-microsoft-antispam-prvs: <CY4PR21MB0838B01B6228E93FA655555BA3580@CY4PR21MB0838.namprd21.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:8882;
x-forefront-prvs: 0989A7979C
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(366004)(376002)(396003)(346002)(136003)(13464003)(189003)(199004)(54094003)(11346002)(256004)(71190400001)(102836004)(71200400001)(186003)(5660300002)(81156014)(81166006)(105586002)(52536014)(74316002)(478600001)(8676002)(10290500003)(966005)(33656002)(7736002)(14444005)(99286004)(8990500004)(305945005)(55016002)(9686003)(6306002)(10090500001)(68736007)(7696005)(6246003)(486006)(110136005)(53936002)(316002)(86612001)(25786009)(446003)(14454004)(229853002)(76176011)(53546011)(22452003)(6116002)(97736004)(2906002)(8936002)(476003)(66574012)(86362001)(2501003)(6506007)(6436002)(46003)(106356001); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR21MB0838; H:CY4PR21MB0168.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: AORR3MSXVt0BgjqnevGduV3DIXYvDs9pdmD1WwJ0dDwMuM+W3GZreeqPywqezUVrkHxEzbfoNZBNh1E9RJcHi7Eu1ynyn4Rls3GbUyetB05pAq3nDSzMv3zEWgjHRRgiE2ztxQMhFxUXqBWj+Gl6pW15nl6ry+kS9N1blHyXJXA/iJEWwcEiK18Qzh56iMo1o4mlz3nRgocckmy4tYsqtdBM8s59M/ruUJWzatzAtLBoPf3Up+IdWXoyTGYdHHX31+oZGrwfKtRg0l/eSV6fjZm6RilxA9dXfeCc9CXyJIUtubOBeTpfHY/1PeovqZVZbT8s2w9JhWAm5fHBPXwYW+jJsc5yv78sKaV3jqOk1VBkTn9OQFbVnh0oe4O1IfKhZMVQlFK3OofpwQdei1b1564panGekeBG7gcY+LsoOA8=
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: e463d2ac-99d6-46cf-8b71-08d6b2ba1115
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Mar 2019 13:42:33.8188 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR21MB0838
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/Q176LjXr1X7atzHWMwNFWkYwSdE>
Subject: Re: [Suit] I-D Action: draft-ietf-suit-architecture-04.txt
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Mar 2019 13:42:38 -0000

As I recall, this came up at the time the WG was first chartered... at that=
 time, the WG
agreed that Firmware was more accurate, but didn't want to change the WG
name.

Dave

-----Original Message-----
From: Suit <suit-bounces@ietf.org> On Behalf Of Michael Richardson
Sent: Wednesday, March 27, 2019 2:05 PM
To: suit@ietf.org
Subject: Re: [Suit] I-D Action: draft-ietf-suit-architecture-04.txt

internet-drafts@ietf.org wrote:
    >         Title : A Firmware Update Architecture for Internet of Things

I wonder if the title should be changed to be more "SUIT"...
So Firmware -> Software ?

--
]               Never tell me the odds!                 | ipv6 mesh network=
s [
]   Michael Richardson, Sandelman Software Works        | network architect=
  [
]     mcr@sandelman.ca  https://nam06.safelinks.protection.outlook.com/?url=
=3Dhttp%3A%2F%2Fwww.sandelman.ca%2F&amp;data=3D02%7C01%7Cdthaler%40microsof=
t.com%7C5aeb9685d28d469f9e1908d6b2b4ce1a%7C72f988bf86f141af91ab2d7cd011db47=
%7C1%7C0%7C636892886963612313&amp;sdata=3Db7lQnzlN2cV2%2F68jSp6eL91YcP1ZISC=
cs53ZGRypD1k%3D&amp;reserved=3D0        |   ruby on rails    [

_______________________________________________
Suit mailing list
Suit@ietf.org
https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet=
f.org%2Fmailman%2Flistinfo%2Fsuit&amp;data=3D02%7C01%7Cdthaler%40microsoft.=
com%7C5aeb9685d28d469f9e1908d6b2b4ce1a%7C72f988bf86f141af91ab2d7cd011db47%7=
C1%7C0%7C636892886963612313&amp;sdata=3Dn6vyzkYbjCGAGVSZmyx9rgsMjh2CkPC6Z04=
y8wy6%2FCw%3D&amp;reserved=3D0


From nobody Wed Mar 27 06:55:29 2019
Return-Path: <Brendan.Moran@arm.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A9FD412003E for <suit@ietfa.amsl.com>; Wed, 27 Mar 2019 06:55:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level: 
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cwLzAu7o1kG7 for <suit@ietfa.amsl.com>; Wed, 27 Mar 2019 06:55:24 -0700 (PDT)
Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20069.outbound.protection.outlook.com [40.107.2.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E802A12004C for <suit@ietf.org>; Wed, 27 Mar 2019 06:55:23 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com;  s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=mueNn+ZBk/2PVmdzGJ3fkCkbsxgVM22PGjilFPRoE2Y=; b=q8M5r2i7Q1iZuexwNrSneWAw+vcBo1i/y8w/nx+bb7rsuOmC7+gp+CpbRhhmpAJ+m9PVat+XgiXiLSDlCOmtwckgX8E8kNypprQFKPPi+o5KCgNLVPgp3L6Rjp7j/cntg2Y+TlCKS6+k1F1oMOG1BjatZMMzf0ygmrURCeP2IxY=
Received: from DB6PR0801MB1879.eurprd08.prod.outlook.com (10.168.84.137) by DB6PR0801MB1735.eurprd08.prod.outlook.com (10.169.226.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1750.15; Wed, 27 Mar 2019 13:55:21 +0000
Received: from DB6PR0801MB1879.eurprd08.prod.outlook.com ([fe80::180:d5be:c56c:c222]) by DB6PR0801MB1879.eurprd08.prod.outlook.com ([fe80::180:d5be:c56c:c222%5]) with mapi id 15.20.1750.014; Wed, 27 Mar 2019 13:55:21 +0000
From: Brendan Moran <Brendan.Moran@arm.com>
To: Dave Thaler <dthaler=40microsoft.com@dmarc.ietf.org>
CC: Michael Richardson <mcr@sandelman.ca>, "suit@ietf.org" <suit@ietf.org>
Thread-Topic: [Suit] I-D Action: draft-ietf-suit-architecture-04.txt
Thread-Index: AQHU5HvcE09vHQ4BaEa3F1SZhgwrcaYfclMAgAAKkYCAAAOSAA==
Date: Wed, 27 Mar 2019 13:55:21 +0000
Message-ID: <3CE961A1-47CD-4468-9029-61E50F1364B7@arm.com>
References: <155367734433.10345.6290920980817997505@ietfa.amsl.com> <29293.1553691884@dooku.sandelman.ca> <CY4PR21MB0168B1CAAF69C932C5B8FB61A3580@CY4PR21MB0168.namprd21.prod.outlook.com>
In-Reply-To: <CY4PR21MB0168B1CAAF69C932C5B8FB61A3580@CY4PR21MB0168.namprd21.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-mailer: Apple Mail (2.3445.102.3)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Brendan.Moran@arm.com; 
x-originating-ip: [2001:67c:370:128:acfa:f5d6:dae8:7c61]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 24831a1e-cc64-4138-6488-08d6b2bbda6f
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600127)(711020)(4605104)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:DB6PR0801MB1735; 
x-ms-traffictypediagnostic: DB6PR0801MB1735:
x-ms-exchange-purlcount: 2
x-microsoft-antispam-prvs: <DB6PR0801MB173521BC000334F382107E5CEA580@DB6PR0801MB1735.eurprd08.prod.outlook.com>
x-forefront-prvs: 0989A7979C
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(39860400002)(136003)(366004)(376002)(396003)(40434004)(54094003)(13464003)(199004)(189003)(186003)(6246003)(486006)(33656002)(72206003)(105586002)(46003)(99286004)(2616005)(6116002)(53936002)(71190400001)(6306002)(478600001)(6486002)(14454004)(6512007)(71200400001)(66574012)(83716004)(102836004)(6506007)(76176011)(11346002)(966005)(53546011)(446003)(6436002)(316002)(97736004)(25786009)(36756003)(45080400002)(256004)(7736002)(229853002)(2906002)(54906003)(8936002)(4326008)(57306001)(14444005)(8676002)(305945005)(106356001)(476003)(5660300002)(82746002)(68736007)(50226002)(86362001)(81166006)(81156014)(5024004); DIR:OUT; SFP:1101; SCL:1; SRVR:DB6PR0801MB1735; H:DB6PR0801MB1879.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; 
received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: qlSMpxg2BSKuD3R52sXmYz9KKJek0QKIYcNQDePqb57gR7szdi6AcaV2hDsyaX4vc5Q0xyx1lRTs9ZvR8fOVE8JaBL+ck7THRXuf7GGcBxmg28RqTUUuSrYHfpf4LcMEwTs2wgX1IgGP9YO/neN6Dgvu314z7Vz8CnXTUlmRW9NoeV6eTKi1wOU9CSo3Xu634lnGvTf3pHXLuiZ4ztcugEb1SsQfu34uT59Cj+CXOFvE2FFoQ0TSJgCy7Z3QnNk/E9JoxFn47wnRKL7TsaXlNPnbQaVF1t9rbo3HGqPS9Oe1DY4106gFHpArR0SdO5fXwmKDkan9iS8J6MDDZp20ETfTWuKhveDLlXMJnQt4g6dpBDFGJPiEt+LEtj9qSPrjHzgK92ubq79bgVX2aaqWcjIhRTCV01DJnTxWERcC8Xs=
Content-Type: text/plain; charset="utf-8"
Content-ID: <733DB4A99046544C9BCDAC3373761909@eurprd08.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: arm.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 24831a1e-cc64-4138-6488-08d6b2bbda6f
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Mar 2019 13:55:21.1954 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR0801MB1735
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/Z6rc9ToGKUxcy_QsSiGIi7mlBvk>
Subject: Re: [Suit] I-D Action: draft-ietf-suit-architecture-04.txt
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Mar 2019 13:55:28 -0000
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==


From nobody Wed Mar 27 08:16:31 2019
Return-Path: <dthaler@microsoft.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 117C6120275 for <suit@ietfa.amsl.com>; Wed, 27 Mar 2019 08:16:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y3_c2LODyMEr for <suit@ietfa.amsl.com>; Wed, 27 Mar 2019 08:16:26 -0700 (PDT)
Received: from NAM01-SN1-obe.outbound.protection.outlook.com (mail-eopbgr820134.outbound.protection.outlook.com [40.107.82.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F357F120073 for <suit@ietf.org>; Wed, 27 Mar 2019 08:16:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=kmvNN9Zi6kJEJxkOvVCNH+wm0XUbe2wX+JEkxSUvnoo=; b=QkQGPm8Qy8blYlk06QGgXULyLQldLb5iVZZ47P5KdRcNIj7KIaIvE1z79cr7TRUdo61c70dyIZ53wYxEDfvHIaN5oqiuyLQ/e1QT6rHkKvri7m3IL1XLxrDjeVywddNYqrO2MrFQoAR7Z83CWoLOyX802e5JqC/uprDprq5TCJ4=
Received: from CY4PR21MB0168.namprd21.prod.outlook.com (10.173.192.150) by CY4PR21MB0856.namprd21.prod.outlook.com (10.173.192.145) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1771.5; Wed, 27 Mar 2019 15:16:24 +0000
Received: from CY4PR21MB0168.namprd21.prod.outlook.com ([fe80::e4d9:80f9:fab1:345c]) by CY4PR21MB0168.namprd21.prod.outlook.com ([fe80::e4d9:80f9:fab1:345c%10]) with mapi id 15.20.1771.002; Wed, 27 Mar 2019 15:16:24 +0000
From: Dave Thaler <dthaler@microsoft.com>
To: Brendan Moran <Brendan.Moran@arm.com>
CC: Michael Richardson <mcr@sandelman.ca>, "suit@ietf.org" <suit@ietf.org>
Thread-Topic: [Suit] I-D Action: draft-ietf-suit-architecture-04.txt
Thread-Index: AQHU5HvcicW4vY7XJkCD1dyD8FXIsaYfclMAgAAKNCCAAAPwgIAAFpKg
Date: Wed, 27 Mar 2019 15:16:24 +0000
Message-ID: <CY4PR21MB0168060D717EBA0AC83162C1A3580@CY4PR21MB0168.namprd21.prod.outlook.com>
References: <155367734433.10345.6290920980817997505@ietfa.amsl.com> <29293.1553691884@dooku.sandelman.ca> <CY4PR21MB0168B1CAAF69C932C5B8FB61A3580@CY4PR21MB0168.namprd21.prod.outlook.com> <3CE961A1-47CD-4468-9029-61E50F1364B7@arm.com>
In-Reply-To: <3CE961A1-47CD-4468-9029-61E50F1364B7@arm.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=dthaler@ntdev.microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-03-27T15:16:24.6390188Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=c34879f4-2809-4e6a-acc7-f236f040e956; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic
x-originating-ip: [2001:67c:1232:144:90aa:beb4:b6da:435f]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 8652a507-a10b-4b7b-ab15-08d6b2c72d3a
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(5600127)(711020)(4605104)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:CY4PR21MB0856; 
x-ms-traffictypediagnostic: CY4PR21MB0856:
x-ms-exchange-purlcount: 2
authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; 
x-microsoft-antispam-prvs: <CY4PR21MB0856A651ABF04BB1DE3967D4A3580@CY4PR21MB0856.namprd21.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 0989A7979C
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(376002)(396003)(136003)(346002)(39860400002)(54094003)(199004)(189003)(40434004)(13464003)(53936002)(8676002)(81166006)(8990500004)(966005)(81156014)(68736007)(305945005)(9686003)(10090500001)(8936002)(7736002)(14454004)(478600001)(229853002)(5024004)(256004)(6436002)(186003)(14444005)(74316002)(105586002)(106356001)(99286004)(7696005)(486006)(71200400001)(71190400001)(53546011)(6916009)(102836004)(97736004)(76176011)(33656002)(6506007)(11346002)(93886005)(52536014)(316002)(446003)(46003)(25786009)(476003)(66574012)(4326008)(22452003)(86612001)(6246003)(10290500003)(86362001)(54906003)(2906002)(55016002)(6116002)(6306002)(5660300002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY4PR21MB0856; H:CY4PR21MB0168.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: ETeyo4hrvimMsy8NXzMgqoCLJGpU7oNO97Ma5qrmfAAjhhQJGjqrslGFif3LetO4n897e/JpAiHqF/4GJqD8F1s8Az07jqcOSig5IVH5N2xm25Kkd5ab8Wz1SihpaLEYo9/lyOJgvd6L7YFfvtt5wkgRlB2t1CbgdEx2t+MkLAtMyMcPCJI8Ol5+n7nRGZ5IOHLwJI6OL3g9ndFTZtjYegAt67o9dyizyiEtisZJT8j45x5lk44KVDcSlCk5WWfrWQAhtCQHYC2dDWigrHAHi8CifpAcSvo9QgpyfIKAx3Nb/RkrUoTVHtAieb35Ti9hesmWBMx6lv0cdNT/nl1YJMAQFAcox+o03DPvHYSlkpnwNYOI8WRL2sYnxQ7fNso+qSi6ddzbSKWS3p5eWnSxR7AWqqx8weXcA+WJim6fwhg=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 8652a507-a10b-4b7b-ab15-08d6b2c72d3a
X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Mar 2019 15:16:24.4637 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR21MB0856
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/zo0RxjBsW5DM1jhkmCY756xH2FE>
Subject: Re: [Suit] I-D Action: draft-ietf-suit-architecture-04.txt
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Mar 2019 15:16:29 -0000

TG9va3Mgb2sgdG8gbWUuDQoNCkRhdmUNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZy
b206IEJyZW5kYW4gTW9yYW4gPEJyZW5kYW4uTW9yYW5AYXJtLmNvbT4gDQpTZW50OiBXZWRuZXNk
YXksIE1hcmNoIDI3LCAyMDE5IDI6NTUgUE0NClRvOiBEYXZlIFRoYWxlciA8ZHRoYWxlckBtaWNy
b3NvZnQuY29tPg0KQ2M6IE1pY2hhZWwgUmljaGFyZHNvbiA8bWNyQHNhbmRlbG1hbi5jYT47IHN1
aXRAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbU3VpdF0gSS1EIEFjdGlvbjogZHJhZnQtaWV0Zi1z
dWl0LWFyY2hpdGVjdHVyZS0wNC50eHQNCg0KQ291bGQgd2UgYWRkIHNvbWV0aGluZyBsaWtlIHRo
aXMgdG8gdGhlIGRyYWZ0Pw0KDQo+IFRoZSBhcmNoaXRlY3R1cmUgaW4gdGhpcyBkb2N1bWVudCBp
cyBpbmZvcm1lZCBieSB0aGUgcmVxdWlyZW1lbnRzIG9mIENsYXNzIDEgYW5kIENsYXNzIDIgZGV2
aWNlcyAoUkZDNzIyOCksIGFuZCBiZWNhdXNlIG9mIHRoYXQsIHRoZSB0ZXJtIEZpcm13YXJlIGlz
IHVzZWQgcmF0aGVyIHRoYW4gU29mdHdhcmUuIFRoZXJlIGFyZSBubyByZXN0cmljdGlvbnMgcHJl
c2VudCB0aGF0IHByZXZlbnQgZGlzdHJpYnV0aW9uIG9mIGxhcmdlciBjb2RlIHBhY2thZ2VzICji
gJxzb2Z0d2FyZeKAnSkgb3Igb3RoZXIgbWFjaGluZSBjb25zdW1hYmxlIHJlc291cmNlcyB2aWEg
dGhpcyBhcmNoaXRlY3R1cmUuDQoNCkJlc3QgUmVnYXJkcywNCkJyZW5kYW4NCg0KDQo+IE9uIDI3
IE1hciAyMDE5LCBhdCAxNDo0MiwgRGF2ZSBUaGFsZXIgPGR0aGFsZXI9NDBtaWNyb3NvZnQuY29t
QGRtYXJjLmlldGYub3JnPiB3cm90ZToNCj4NCj4gQXMgSSByZWNhbGwsIHRoaXMgY2FtZSB1cCBh
dCB0aGUgdGltZSB0aGUgV0cgd2FzIGZpcnN0IGNoYXJ0ZXJlZC4uLiBhdCANCj4gdGhhdCB0aW1l
LCB0aGUgV0cgYWdyZWVkIHRoYXQgRmlybXdhcmUgd2FzIG1vcmUgYWNjdXJhdGUsIGJ1dCBkaWRu
J3QgDQo+IHdhbnQgdG8gY2hhbmdlIHRoZSBXRyBuYW1lLg0KPg0KPiBEYXZlDQo+DQo+IC0tLS0t
T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IFN1aXQgPHN1aXQtYm91bmNlc0BpZXRmLm9y
Zz4gT24gQmVoYWxmIE9mIE1pY2hhZWwgUmljaGFyZHNvbg0KPiBTZW50OiBXZWRuZXNkYXksIE1h
cmNoIDI3LCAyMDE5IDI6MDUgUE0NCj4gVG86IHN1aXRAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6
IFtTdWl0XSBJLUQgQWN0aW9uOiBkcmFmdC1pZXRmLXN1aXQtYXJjaGl0ZWN0dXJlLTA0LnR4dA0K
Pg0KPiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmcgd3JvdGU6DQo+PiAgICAgICAgVGl0bGUgOiBB
IEZpcm13YXJlIFVwZGF0ZSBBcmNoaXRlY3R1cmUgZm9yIEludGVybmV0IG9mIFRoaW5ncw0KPg0K
PiBJIHdvbmRlciBpZiB0aGUgdGl0bGUgc2hvdWxkIGJlIGNoYW5nZWQgdG8gYmUgbW9yZSAiU1VJ
VCIuLi4NCj4gU28gRmlybXdhcmUgLT4gU29mdHdhcmUgPw0KPg0KPiAtLQ0KPiBdICAgICAgICAg
ICAgICAgTmV2ZXIgdGVsbCBtZSB0aGUgb2RkcyEgICAgICAgICAgICAgICAgIHwgaXB2NiBtZXNo
IG5ldHdvcmtzIFsNCj4gXSAgIE1pY2hhZWwgUmljaGFyZHNvbiwgU2FuZGVsbWFuIFNvZnR3YXJl
IFdvcmtzICAgICAgICB8IG5ldHdvcmsgYXJjaGl0ZWN0ICBbDQo+IF0gICAgIG1jckBzYW5kZWxt
YW4uY2EgIGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3Vy
bD1odHRwJTNBJTJGJTJGd3d3LnNhbmRlbG1hbi5jYSUyRiZhbXA7ZGF0YT0wMiU3QzAxJTdDZHRo
YWxlciU0MG1pY3Jvc29mdC5jb20lN0NmNzBjYTc1NWYxNTM0ZDEwZmE5ODA4ZDZiMmJiZGY5MSU3
QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzY4OTI5MTczMjI3
MDc4MjcmYW1wO3NkYXRhPTFjdWs3azRtSmo5VTElMkZ2b0xIUUtNbThQNjBwRmhJMFRSV0lIVEFv
RU9iZyUzRCZhbXA7cmVzZXJ2ZWQ9MCAgICAgICAgfCAgIHJ1Ynkgb24gcmFpbHMgICAgWw0KPg0K
PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBTdWl0
IG1haWxpbmcgbGlzdA0KPiBTdWl0QGlldGYub3JnDQo+IGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtz
LnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy4NCj4gaWV0Zi5v
cmclMkZtYWlsbWFuJTJGbGlzdGluZm8lMkZzdWl0JmFtcDtkYXRhPTAyJTdDMDElN0NkdGhhbGVy
JTQwbWljcg0KPiBvc29mdC5jb20lN0NmNzBjYTc1NWYxNTM0ZDEwZmE5ODA4ZDZiMmJiZGY5MSU3
QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3DQo+IGNkMDExZGI0NyU3QzElN0MwJTdDNjM2ODkyOTE3
MzIyNzA3ODI3JmFtcDtzZGF0YT1mQmlLbE9kRkpMNW5WbWt2S3VneUINCj4gcUF5Nk5pRWlKUlgl
MkJReTNnUlFTVHhRJTNEJmFtcDtyZXNlcnZlZD0wDQo+DQo+IF9fX19fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IFN1aXQgbWFpbGluZyBsaXN0DQo+IFN1aXRA
aWV0Zi5vcmcNCj4gaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNv
bS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3Lg0KPiBpZXRmLm9yZyUyRm1haWxtYW4lMkZsaXN0aW5m
byUyRnN1aXQmYW1wO2RhdGE9MDIlN0MwMSU3Q2R0aGFsZXIlNDBtaWNyDQo+IG9zb2Z0LmNvbSU3
Q2Y3MGNhNzU1ZjE1MzRkMTBmYTk4MDhkNmIyYmJkZjkxJTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIy
ZDcNCj4gY2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzY4OTI5MTczMjI3MDc4MjcmYW1wO3NkYXRhPWZC
aUtsT2RGSkw1blZta3ZLdWd5Qg0KPiBxQXk2TmlFaUpSWCUyQlF5M2dSUVNUeFElM0QmYW1wO3Jl
c2VydmVkPTANCg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwg
YW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2
aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90
aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVu
dHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUg
b3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K


From nobody Wed Mar 27 20:14:06 2019
Return-Path: <Martin.Pagel@microsoft.com>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 575921201A3 for <suit@ietfa.amsl.com>; Wed, 27 Mar 2019 20:14:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level: 
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G1TBbfs0d1tl for <suit@ietfa.amsl.com>; Wed, 27 Mar 2019 20:14:01 -0700 (PDT)
Received: from NAM05-DM3-obe.outbound.protection.outlook.com (mail-eopbgr730099.outbound.protection.outlook.com [40.107.73.99]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 371BC1201A7 for <suit@ietf.org>; Wed, 27 Mar 2019 20:14:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=naUGzk07O+LRuQ3QhQPTKr2d+06k25HBqSOocss3oec=; b=RyGhgCLreoX6HGY2jey7ElwjcQtNfKsLV/zgtnndCDHApUOPMO4Py50EUN6qErkmlFXtzvm4OCHi+mgY+BPe9n9YtNQUIz92DZmN06Yu89EmyD9Z53lKk4WDT/LzB1T+8aUuG9KSNmHjTqBI6xEkbNBnhFQdt8bb7n4YzPBu4C8=
ARC-Seal: i=1; a=rsa-sha256; s=testarcselector01; d=microsoft.com; cv=none; b=xUuxK6eX5djfktGKNVPxCe9V8NHSFJ/dSC9GIbCAHBHJuBLxsY0EaBWa7XQK6YtmDcFB8PqPTAzhSthY4zNm97wgUMCs4Vnl7HO01KGtemnFw8tFS7MVvsvMV8BywORamH3H7i2sCVmJDJOdD/pPi1EJbYvJH3udCMy+Odz/Fk4=
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;  s=testarcselector01; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=naUGzk07O+LRuQ3QhQPTKr2d+06k25HBqSOocss3oec=; b=xZcBCjiuA+ea78z+XgvCEK4X6IOvMsd7v88faewJb7Oi//Tz5eUnzWL+IE3U6z1TmglKf8WbSPeUDhU38p0iliqBdCNQsnxT2tZuWUSO/ImlVbWD+EhHvwopWgzj62oA/afPakLVk0hMojEr41djXLdrexRyloqbBKVXjBAx7u4=
ARC-Authentication-Results: =?utf-8?B?aT0xOyB0ZXN0Lm9mZmljZTM2NS5jb20gMTsNCgkJZG1hcmM9bm9uZSBhY3Rp?= =?utf-8?B?b249bm9uZSBoZWFkZXIuZnJvbT1taWNyb3NvZnQuY29tOw0KCQlhcmM9bm9u?= =?utf-8?Q?e?=
Received: from BYAPR21MB1317.namprd21.prod.outlook.com (20.179.60.199) by BYAPR21MB1254.namprd21.prod.outlook.com (20.179.57.158) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1771.3; Thu, 28 Mar 2019 03:13:58 +0000
Received: from BYAPR21MB1317.namprd21.prod.outlook.com ([fe80::a89a:5b8a:e27c:ec15]) by BYAPR21MB1317.namprd21.prod.outlook.com ([fe80::a89a:5b8a:e27c:ec15%8]) with mapi id 15.20.1750.006; Thu, 28 Mar 2019 03:13:58 +0000
From: Martin Pagel <Martin.Pagel@microsoft.com>
To: Brendan Moran <Brendan.Moran@arm.com>, "suit@ietf.org" <suit@ietf.org>
Thread-Topic: draft-moran-suit-manifest-04 - prescriptive
Thread-Index: AdTbfYV7dO45RdMkQRKtZzBYR1IzsAEhD4AAAOFr4uAAYjhKQA==
Date: Thu, 28 Mar 2019 03:13:58 +0000
Message-ID: <BYAPR21MB1317944DCEC63BF8234CBA8F9D590@BYAPR21MB1317.namprd21.prod.outlook.com>
References: <BYAPR21MB1317CA992FE49959A00AB19E9D440@BYAPR21MB1317.namprd21.prod.outlook.com> <ED57D130-8835-4069-AF77-B0D3EAF43FF2@arm.com> <BYAPR21MB13176E50E6EA1150411018689D5F0@BYAPR21MB1317.namprd21.prod.outlook.com>
In-Reply-To: <BYAPR21MB13176E50E6EA1150411018689D5F0@BYAPR21MB1317.namprd21.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mapagel@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-03-26T04:04:46.8267661Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=5c2d5a37-b73e-42ad-8fd4-086316b147ad; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic
x-originating-ip: [97.113.153.108]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: e5bc1ae8-81ac-4c37-13db-08d6b32b6b54
x-ms-office365-filtering-ht: Tenant
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600127)(711020)(4605104)(4618075)(2017052603328)(7193020); SRVR:BYAPR21MB1254; 
x-ms-traffictypediagnostic: BYAPR21MB1254:
x-ms-exchange-purlcount: 2
x-microsoft-antispam-prvs: <BYAPR21MB12541252E9F7D1C71EB4C41D9D590@BYAPR21MB1254.namprd21.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 0990C54589
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(346002)(39860400002)(396003)(376002)(366004)(51444003)(51914003)(13464003)(189003)(199004)(40434004)(7696005)(446003)(10090500001)(229853002)(52536014)(11346002)(316002)(76176011)(97736004)(53546011)(6506007)(110136005)(478600001)(53936002)(6436002)(6246003)(305945005)(68736007)(74316002)(22452003)(3846002)(6116002)(8936002)(71200400001)(71190400001)(99286004)(7736002)(33656002)(186003)(9686003)(86362001)(486006)(10290500003)(26005)(66066001)(25786009)(86612001)(106356001)(256004)(2501003)(2906002)(72206003)(14454004)(55016002)(14444005)(5024004)(6306002)(8990500004)(81156014)(81166006)(476003)(105586002)(966005)(8676002)(102836004)(6346003)(5660300002)(8770500001); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR21MB1254; H:BYAPR21MB1317.namprd21.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; 
received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts)
authentication-results: spf=none (sender IP is ) smtp.mailfrom=Martin.Pagel@microsoft.com; 
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: 5DjdbvKpq/Ut4tuN/MGig0bKYcO0nUXhR8uzuNIIJ4ThB/4PQEIkP5+JlqezDjZrfGhB5gX32/Ll1tmN9r7ycHjOr+AP3CX+pwUrq6NP/aTmh0ifdtpwns2fzJmrkuR8BEBNvx30xIGq3VUM3tmp5zd9eN+fyGEbd2FDB1iqkBnkBhtdyMrV9ndaQr2/XN4eItWRabgEooPkUoqor1WGgtgpjiTJlhZIAOZo1EWGwavXP/YDUpz8600OeuHWo5DhxIwqyp82Y/2df2KAzN5apSPoyFpWvO+fcxPLCqiOTbvrd1KGpRCAfG4DPKkrlB5nNIfxOnjaDHqsTz2i+mcExaFd2BDkM1P9z8kxy6b9kwS9jiE9CKDD35goY08+aBNnBMC5RQqk3hiyYFHQ53n5O4O6J2rAyodgAb/zVzpkU3I=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: microsoft.com
X-MS-Exchange-CrossTenant-Network-Message-Id: e5bc1ae8-81ac-4c37-13db-08d6b32b6b54
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Mar 2019 03:13:58.3269 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR21MB1254
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/YpUZS1IOQ4p0GVXf7CkGjWtTWFQ>
Subject: Re: [Suit] draft-moran-suit-manifest-04 - prescriptive
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 28 Mar 2019 03:14:05 -0000
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From nobody Sat Mar 30 03:36:30 2019
Return-Path: <mcr+ietf@sandelman.ca>
X-Original-To: suit@ietfa.amsl.com
Delivered-To: suit@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2B8A1200FB for <suit@ietfa.amsl.com>; Sat, 30 Mar 2019 03:36:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.302
X-Spam-Level: 
X-Spam-Status: No, score=-2.302 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ef4pnp54SMF7 for <suit@ietfa.amsl.com>; Sat, 30 Mar 2019 03:36:28 -0700 (PDT)
Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04D27120026 for <suit@ietf.org>; Sat, 30 Mar 2019 03:36:28 -0700 (PDT)
Received: from sandelman.ca (unknown [IPv6:2607:f0b0:f:2:56b2:3ff:fe0b:d84]) by tuna.sandelman.ca (Postfix) with ESMTP id 098A6380BE for <suit@ietf.org>; Sat, 30 Mar 2019 06:35:44 -0400 (EDT)
Received: from [IPv6:::1] (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 03AA9440 for <suit@ietf.org>; Sat, 30 Mar 2019 06:36:25 -0400 (EDT)
To: suit@ietf.org
References: <5D5FB80B-10A5-4DDE-B030-C9F667E8229C@vigilsec.com>
From: Michael Richardson <mcr+ietf@sandelman.ca>
Message-ID: <fdd53e50-4131-79fa-d813-70bf131b116e@sandelman.ca>
Date: Sat, 30 Mar 2019 06:36:25 -0400
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.4.0
MIME-Version: 1.0
In-Reply-To: <5D5FB80B-10A5-4DDE-B030-C9F667E8229C@vigilsec.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/suit/dQtCLfiL4Uw2KlEKZH34gB_Gdok>
Subject: Re: [Suit] WG Last Call for draft-ietf-suit-architecture-04
X-BeenThere: suit@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Software Updates for Internet of Things <suit.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/suit>, <mailto:suit-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/suit/>
List-Post: <mailto:suit@ietf.org>
List-Help: <mailto:suit-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/suit>, <mailto:suit-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 30 Mar 2019 10:36:30 -0000

I have read suit-architecture-04 from scratch on the airplane home.
I found it well written and it had a nice number of diagrams.
I don't think I've read it from beginning to end since it was adopted.
Good job, it's ready.

(I found some weirdness that parts of some diagrams were missing lines, 
but I've since confirm it's a problem with my offline reader, getpocket)

