From nobody Thu May 2 14:50:41 2019 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A6F7120608 for ; Thu, 2 May 2019 14:50:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=linaro.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KXg6hg6VA82Q for ; Thu, 2 May 2019 14:50:38 -0700 (PDT) Received: from mail-qt1-x831.google.com (mail-qt1-x831.google.com [IPv6:2607:f8b0:4864:20::831]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30194120277 for ; Thu, 2 May 2019 14:50:38 -0700 (PDT) Received: by mail-qt1-x831.google.com with SMTP id y42so4539462qtk.6 for ; Thu, 02 May 2019 14:50:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=jIOvGob7EN1hTJ05amzIM3q51w5azoTRzu3MWjNQUMM=; b=fkQZ2u3XbMNNpdxGGtGMIMQENdBAWuYnxv6Kbmh+U4KOv/b/XXfJSnmQoAmyRT6X/8 trcWqU1OfKpKD/HniTog5W6V9NnpTyG3Y41Wapve6pK4wIQ4VakltX0wXFpt4+nq5csu MHoLOeOoM/bV51j4KID0qVtizsGvFHOnr+LzE00rm+/Rxc9hwSMZsSfgsEyb9mKvcpXz PUq10tjGGT6L8lJgKLBIT6bz5H558HYH0/ypaJ2YT61Zi3qgu5rdSeue5HsqafP/0kWC QA19aex4adZUEWeP2ttzDc4kX8nR1W0qAJrUgIqtrJUfzxrHsO867Zh0zoSFPNnvgkXA E1Ng== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=jIOvGob7EN1hTJ05amzIM3q51w5azoTRzu3MWjNQUMM=; b=MbTSbIso3W3XzNrF4w8V/37RJTdnwWl+OkuZ7aFQ4hqptOhbCShFIp8bm+BrwnD3uV XVhxv66hzvM39/bkuRYQPfA+exDNjSzXzfxQtfSJz+R0BvfpBcsXfGHQ7hMEGeZMZoQZ qkh/3laHoFLhsMtuf8O2GsvOFkz7vklM8dcChtd4ls+DKzScHXgudshQU+8pOiJMVh6Z LsaKrdj88EJUnfrQMpnuCaej7cYaU98xwLvLLquIodN6WoUxGQbZ9qxTHhRBvq/1ui6+ zwt4cs4hEvoQ6BBBl/I7dUIXdT57ytLi2OpbeJiV39A3olt/IunzH1y7tjzYkayzuLIX dS0A== X-Gm-Message-State: APjAAAVbpf1WDv9hB6FMghu93XzjZpSMJKUuI1qrc7spC6+RE5OiUVem nuf6QLmaUpjNCDqP8T0ePSi5SfsGaGnHjA== X-Google-Smtp-Source: APXvYqztKGquc9nFByxP9N++qFKleMJmgE/KuxI2u0fEy5Saj3HC9daPW4IoqIKGP6w6TDDCBHDtDw== X-Received: by 2002:ac8:743:: with SMTP id k3mr2327327qth.207.1556833837221; Thu, 02 May 2019 14:50:37 -0700 (PDT) Received: from davidb.org (cn-co-b07400e8c3-142422-1.tingfiber.com. [64.98.48.55]) by smtp.gmail.com with ESMTPSA id 67sm181942qtc.29.2019.05.02.14.50.35 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 02 May 2019 14:50:36 -0700 (PDT) Date: Thu, 2 May 2019 15:50:33 -0600 From: David Brown To: Michael Richardson Cc: Brendan Moran , "suit@ietf.org" Message-ID: <20190502215033.GA15664@davidb.org> References: <16EC7DB9-1649-4A86-A370-F77CB03305AC@arm.com> <20190315163402.GA25574@davidb.org> <59F62162-578C-4975-A25B-EC261A7F4F7D@arm.com> <20190322173908.GA17361@davidb.org> <26593.1555003055@localhost> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline In-Reply-To: <26593.1555003055@localhost> User-Agent: Mutt/1.10.1 (2018-07-13) Archived-At: Subject: Re: [Suit] Introducing draft-moran-suit-manifest-04 X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 May 2019 21:50:40 -0000 On Thu, Apr 11, 2019 at 01:17:35PM -0400, Michael Richardson wrote: >Very nice animation. >It really seems like the swap operation does by MCUboot ought to be below the >level of the manifest instructions. > > > One difficulty I see following steps in the manifest is that the code > > currently maintains state out-of-band from the manifest. The current > > state is: > >That suggests to me that maybe we need to make the state explicit in the >information model associated with the manifest. Although, I think if the swap operation itself is "below" the scope of the manifest, perhaps the state it keeps is also below that. David From nobody Tue May 14 06:05:52 2019 Return-Path: X-Original-To: suit@ietfa.amsl.com Delivered-To: suit@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6777812004F; Tue, 14 May 2019 06:05:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.989 X-Spam-Level: X-Spam-Status: No, score=-1.989 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, T_SPF_PERMERROR=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ihtfp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kGjlaJhBi9-W; Tue, 14 May 2019 06:05:44 -0700 (PDT) Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D5E9412001B; Tue, 14 May 2019 06:05:43 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id 6517DE2042; Tue, 14 May 2019 09:05:42 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 28177-10; Tue, 14 May 2019 09:05:34 -0400 (EDT) Received: from securerf.ihtfp.org (99-46-190-172.lightspeed.tukrga.sbcglobal.net [99.46.190.172]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (not verified)) by mail2.ihtfp.org (Postfix) with ESMTPS id 36CDDE2040; Tue, 14 May 2019 09:05:34 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ihtfp.com; s=default; t=1557839134; bh=gvwSZr9k1o5ntUSoim6A1vN99ToGpu8MqSAuCx6io6o=; h=From:To:Cc:Subject:Date; b=GO10Dk1k9DC5jTsTR0z8WKn/OHuma9z0gieX8CvzlnQ3ZbOBlc7QU3wz16uPzIA8h nPJ7m8KJGFTtSAn7JUX0z0C5JvGO8h6Zz/zhrZviqChHDnRABam20twAPzS5fqMQRD BodMws0BvnI83ZhcfochANzDUSXvA1owR2jITWBU= Received: (from warlord@localhost) by securerf.ihtfp.org (8.15.2/8.15.2/Submit) id x4ED5TiP020941; Tue, 14 May 2019 09:05:29 -0400 From: Derek Atkins To: suit@ietf.org, cose@ietf.org Cc: kaduk@mit.edu Date: Tue, 14 May 2019 09:05:28 -0400 Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Subject: [Suit] draft-atkins-suit-cose-walnutdsa X-BeenThere: suit@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Software Updates for Internet of Things List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 May 2019 13:05:45 -0000 Hi everyone, I have submitted a new draft on how to use WalnutDSA in COSE, targeting SUIT as a viable use-case. WalnutDSA is in use for a secure boot solution now; specifying how to use it in a standard way would help others leverage the technology (or at least ensure there are no conflicts with others). I have tried to follow the framework of the Hash-based signature integration (with Russ' approval). -derek -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant