Mandatory-to-Implement Algorithms for Creators and Consumers of Software Update for the Internet of Things manifests
Arm Limited
Brendan.Moran@arm.com
Security
SUIT
Internet-Draft
This document specifies algorithm profiles for SUIT manifest parsers and authors to ensure better interoperability.
Introduction
Mandatory algorithms may change over time due to an evolving threat landscape. As a result these are grouped into profiles that a device should use.
the mandatory-to implement algorithms for SUIT are described in this draft in order to provide flexibility in the definition of algorithm profiles.
An authentication algorithm is REQUIRED for ALL SUIT manifests. Encryption algorithms MAY be provided.
Algorithms
The algorithms that form a part of the profiles defined in this document are grouped into:
Digest Algorithms
Authentication Algorithms
Key Exchange Algorithms
Encryption Algorithms
Digest Algorithms
SHA-256 (-16)
SHAKE128 (-18)
SHA-384 (-43)
SHA-512 (-44)
SHAKE256 (-45)
Authentication Algorithms
Authentication Algorithms are divided into three categories:
Symmetric Authentication Algorithm
HMAC-256 (5)
HMAC-384 (6)
HMAC-512 (7)
Asymmetric Classical Authentication Algorithms
ES256 (-7)
EdDSA (-8)
ES384 (-35)
ES512 (-36)
Asymmetric Post-Quantum Authentication Algorithms
HSS-LMS (-46)
XMSS (TBD)
Falcon-512 (TBD)
SPHINCS+ (TBD)
Crystals-Dilithium (TBD)
Key Exchange Algorithms
Key Exchange Algorithms are divided into two three groups: Symmetric, Classical Asymmetric, and Post-Quantum Asymmetric
Symmetric
A128 (-3)
A192 (-4)
A256 (-5)
Classical Asymmetric
HPKE (TBD)
ECDH-ES + HKDF-256 (-25)
ECDH-ES + HKDF-512 (-26)
ECDH-ES + A128KW (-29)
ECDH-ES + A192KW (-30)
ECDH-ES + A256KW (-31)
Post-Quantum Asymmetric
CRYSTALS-KYBER (TBD)
Encryption Algorithms
A128GCM (1)
A192GCM (2)
A256GCM (3)
ChaCha20/Poly1305 (24)
AES-MAC 128/128 (25)
AES-MAC 256/128 (26)
AES-CCM-16-128-128 (30)
AES-CCM-16-128-256 (31)
AES-CCM-64-128-128 (32)
AES-CCM-64-128-256 (33)
Profiles
The following profiles are defined by this draft:
suit-sha256-es256-hpke-a128gcm
SHA-256
ES256
HPKE
AES-128-GCM
suit-sha256-hmac-a128-ccm
SHA-256
HMAC-256
A128W Key Wrap
AES-CCM-16-128-128
suit-sha256-eddsa-ecdh-es-chacha-poly
SHA-256
EdDSA
ECDH-ES + HKDF-256
ChaCha20 + Poly1305
suit-sha256-hsslms-hpke-a128gcm
SHA-256
HSS-LMS
HPKE
AES-128-GCM
suit-sha256-falcon512-hpke-a128gcm
SHA-256
HSS-LMS
HPKE
AES-128-GCM
suit-shake256-dilithium-kyber-a128gcm
SHAKE256
Crystals-Dilithium
Crystal-Kyber
AES-128GCM
Security Considerations
TODO
CBOR Object Signing and Encryption (COSE)
Concise Binary Object Representation (CBOR) is a data format designed for small code size and small message size. There is a need for the ability to have basic security services defined for this data format. This document defines the CBOR Object Signing and Encryption (COSE) protocol. This specification describes how to create and process signatures, message authentication codes, and encryption using CBOR for serialization. This specification additionally describes how to represent cryptographic keys using CBOR.
Use of the HSS/LMS Hash-Based Signature Algorithm with CBOR Object Signing and Encryption (COSE)
This document specifies the conventions for using the Hierarchical Signature System (HSS) / Leighton-Micali Signature (LMS) hash-based signature algorithm with the CBOR Object Signing and Encryption (COSE) syntax. The HSS/LMS algorithm is one form of hash-based digital signature; it is described in RFC 8554.
A Concise Binary Object Representation (CBOR)-based Serialization Format for the Software Updates for Internet of Things (SUIT) Manifest
Arm Limited
Arm Limited
Fraunhofer SIT
Inria
This specification describes the format of a manifest. A manifest is
a bundle of metadata about code/data obtained by a recipient (chiefly
the firmware for an IoT device), where to find the that code/data,
the devices to which it applies, and cryptographic information
protecting the manifest. Software updates and Trusted Invocation
both tend to use sequences of common operations, so the manifest
encodes those sequences of operations, rather than declaring the
metadata.