Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
chrysn (chrysn@chaos.social)'s status on Thursday, 21-Mar-2024 19:43:48 JST chrysn

EDHOC, the lightweight key exchange for #IoT devices, is now published as #RFC 9528. It enables state of the art elliptic curve based security after exchanging 3 messages of only a bit over 100 bytes in total, thus fitting in even the lowest power networks such as #6LoWPAN and #LoRA.
Thanks and congratulations to Göran, John and Francesca for making security more affordable.
https://www.rfc-editor.org/rfc/rfc9528.html
In conversation about a year ago from chaos.social permalink
Attachments
1. No result found on File_thumbnail lookup.
  
  RFC 9528: Ephemeral Diffie-Hellman Over COSE (EDHOC)
  
  from Francesca Palombini
  
  This document specifies Ephemeral Diffie-Hellman Over COSE (EDHOC), a very compact and lightweight authenticated Diffie-Hellman key exchange with ephemeral keys. EDHOC provides mutual authentication, forward secrecy, and identity protection. EDHOC is intended for usage in constrained scenarios, and a main use case is to establish an Object Security for Constrained RESTful Environments (OSCORE) security context. By reusing CBOR Object Signing and Encryption (COSE) for cryptography, Concise Binary Object Representation (CBOR) for encoding, and Constrained Application Protocol (CoAP) for transport, the additional code size can be kept very low.

Feeds