Lightweight Authenticated Key Exchange with EDHOC: Design Overview
Résumé
The Internet Engineering Task Force (IETF) and its Lightweight Authenticated Key Exchange (LAKE) working group have produced a key exchange solution that enables public-key -based key exchange over the most constrained Internet of Things (IoT) radio communication technologies. The EDHOC protocol, a deliverable of this standardization effort, prioritizes small message size to minimize the number of radio frames. As an example, one instance of the protocol completes the authenticated key exchange of two peers with three messages of 37, 45 and 19 bytes. The protocol will be submitted for publication as an Internet Standard (RFC) and expects a wide deployment on constrained devices, with 7 independent implementations already available. It is substantial that the expected security properties hold. We invite the formal analysis community to study the protocol and contribute the results in both the symbolic and the computational model. The feedback from the community will be incorporated into the specification before it is published. The goal of this document is to summarize the EDHOC design, the expected properties and to outline the open research questions, in order to facilitate the analysis.
Origine | Fichiers produits par l'(les) auteur(s) |
---|