Requirements for a Lightweight AKE for OSCORE
draft-ietf-lake-reqs-00
Network Working Group M. Vucinic
Internet-Draft Inria
Intended status: Informational G. Selander
Expires: June 11, 2020 J. Mattsson
Ericsson AB
D. Garcia
Odin Solutions S.L.
December 09, 2019
Requirements for a Lightweight AKE for OSCORE
draft-ietf-lake-reqs-00
Abstract
This document compiles the requirements for a lightweight
authenticated key exchange protocol for OSCORE.
Status of This Memo
This Internet-Draft is submitted in full conformance with the
provisions of BCP 78 and BCP 79.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet-
Drafts is at https://datatracker.ietf.org/drafts/current/.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
This Internet-Draft will expire on June 11, 2020.
Copyright Notice
Copyright (c) 2019 IETF Trust and the persons identified as the
document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents
(https://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of
Vucinic, et al. Expires June 11, 2020 [Page 1]
Internet-Draft Reqs-LAKE-for-OSCORE December 2019
the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License.
Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2
2. Problem description . . . . . . . . . . . . . . . . . . . . . 3
2.1. AKE for OSCORE . . . . . . . . . . . . . . . . . . . . . 3
2.2. Credentials . . . . . . . . . . . . . . . . . . . . . . . 4
2.3. Mutual Authentication . . . . . . . . . . . . . . . . . . 5
2.4. Crypto Agility and Security Properties . . . . . . . . . 6
2.5. Identity Protection . . . . . . . . . . . . . . . . . . . 7
2.6. Application Data . . . . . . . . . . . . . . . . . . . . 8
2.7. Extensibility . . . . . . . . . . . . . . . . . . . . . . 8
2.8. Denial of Service . . . . . . . . . . . . . . . . . . . . 9
2.9. Lightweight . . . . . . . . . . . . . . . . . . . . . . . 9
3. Requirements Summary . . . . . . . . . . . . . . . . . . . . 16
4. Security Considerations . . . . . . . . . . . . . . . . . . . 17
5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 17
Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . . . 17
7. Informative References . . . . . . . . . . . . . . . . . . . 17
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 19
1. Introduction
OSCORE [RFC8613] is a lightweight communication security protocol
providing end-to-end security on application layer for constrained
IoT settings (cf. [RFC7228]). OSCORE lacks a matching authenticated
key exchange protocol (AKE). The intention with LAKE is to create a
simple yet secure AKE for implementation in embedded devices
supporting OSCORE.
To ensure that the AKE is efficient for the expected applications of
OSCORE, we list the relevant public specifications of technologies
where OSCORE is included:
o The IETF 6TiSCH WG charter (-02) identifies the need to "secur[e]
the join process and mak[e] that fit within the constraints of
high latency, low throughput and small frame sizes that
characterize IEEE802.15.4 TSCH". OSCORE protects the join
protocol as described in 6TiSCH Minimal Security
[I-D.ietf-6tisch-minimal-security].
o The IETF LPWAN WG charter (-01) identifies the need to improve the
transport capabilities of LPWA networks such as NB-IoT and LoRa
whose "common traits include ... frame sizes ... [on] the order of
tens of bytes transmitted a few times per day at ultra-low
Vucinic, et al. Expires June 11, 2020 [Page 2]
Internet-Draft Reqs-LAKE-for-OSCORE December 2019
Show full document text