Security Analysis of Improved EDHOC Protocol - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year :

Security Analysis of Improved EDHOC Protocol


Ephemeral Diffie-Hellman Over COSE (EDHOC) aims at being a very compact and lightweight authenticated Diffie-Hellman key exchange with ephemeral keys. It is expected to provide mutual authentication, forward secrecy, and identity protection, with a 128-bit security level. A formal analysis has already been proposed at SECRYPT ’21, on a former version, leading to some improvements, in the ongoing evaluation process by IETF. Unfortunately, while formal analysis can detect some vulnerabilities in the protocol, it cannot evaluate the actual security level. In this paper, we study the protocol as it appeared in version 15. Without complete breaks, we anyway exhibit attacks in 2^64 operations, which contradict the expected 128-bit security level. We thereafter propose improvements, some of them being at no additional cost, to achieve 128-bit security for all the security properties (i.e. key privacy, mutual authentication, and identity-protection).
Fichier principal
Vignette du fichier
main.pdf (719.99 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03772082 , version 1 (07-09-2022)
hal-03772082 , version 2 (08-09-2022)
hal-03772082 , version 3 (23-11-2022)



Baptiste Cottier, David Pointcheval. Security Analysis of Improved EDHOC Protocol. 15th International Symposium on Foundations & Practice of Security (FPS – 2022)., Dec 2022, Ottawa, Canada. ⟨hal-03772082v3⟩
166 View
127 Download



Gmail Facebook Twitter LinkedIn More