Question about required sequences.

[stoprocent]

Hi

I work for ASSA ABLOY, and we've been utilizing SUIT since draft 4 in a straightforward manner. I'm now exploring ways to expand our implementation to support additional sub-specifications and make broader use of sequences and directives. I have a few questions, but I'll start with one that's been puzzling me the most.

I'm interested in adding support for dependency manifests, the multi-trust domains specification, and the firmware encryption specification. According to the main SUIT specification, the only required command sequence is suit-validate.

However, when I look at the example in the Firmware Encryption specification here, it only includes the suit-install command, which is optional, and does not mention the required suit-validate.

Am I missing something?

[bremoran]

Yes, there is a subtlety here:

• When used in a secure boot scenario the suit-validate command sequence is required.
• When used in a firmware update scenario, suit-fetch is required.

This could be expressed better in the manifest spec.