Transport Layer Security (TLS) / Datagram Transport Layer Security (DTLS) Profiles for the Internet of Things
RFC 7925

Document Type RFC - Proposed Standard (July 2016; No errata)
Last updated 2016-07-19
Replaces draft-hartke-dice-profile
Stream IETF
Formats plain text pdf html bibtex
Stream WG state Submitted to IESG for Publication
Document shepherd Zach Shelby
Shepherd write-up Show (last changed 2015-07-01)
IESG IESG state RFC 7925 (Proposed Standard)
Consensus Boilerplate Yes
Telechat date
Responsible AD Stephen Farrell
Send notices to (None)
IANA IANA review state Version Changed - Review Needed
IANA action state No IC
Internet Engineering Task Force (IETF)                H. Tschofenig, Ed.
Request for Comments: 7925                                      ARM Ltd.
Category: Standards Track                                     T. Fossati
ISSN: 2070-1721                                                    Nokia
                                                               July 2016

                    Transport Layer Security (TLS) /
                Datagram Transport Layer Security (DTLS)
                  Profiles for the Internet of Things

Abstract

   A common design pattern in Internet of Things (IoT) deployments is
   the use of a constrained device that collects data via sensors or
   controls actuators for use in home automation, industrial control
   systems, smart cities, and other IoT deployments.

   This document defines a Transport Layer Security (TLS) and Datagram
   Transport Layer Security (DTLS) 1.2 profile that offers
   communications security for this data exchange thereby preventing
   eavesdropping, tampering, and message forgery.  The lack of
   communication security is a common vulnerability in IoT products that
   can easily be solved by using these well-researched and widely
   deployed Internet security protocols.

Status of This Memo

   This is an Internet Standards Track document.

   This document is a product of the Internet Engineering Task Force
   (IETF).  It represents the consensus of the IETF community.  It has
   received public review and has been approved for publication by the
   Internet Engineering Steering Group (IESG).  Further information on
   Internet Standards is available in Section 2 of RFC 7841.

   Information about the current status of this document, any errata,
   and how to provide feedback on it may be obtained at
   http://www.rfc-editor.org/info/rfc7925.

Tschofenig & Fossati         Standards Track                    [Page 1]
RFC 7925                  TLS/DTLS IoT Profiles                July 2016

Copyright Notice

   Copyright (c) 2016 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.  Code Components extracted from this document must
   include Simplified BSD License text as described in Section 4.e of
   the Trust Legal Provisions and are provided without warranty as
   described in the Simplified BSD License.

Tschofenig & Fossati         Standards Track                    [Page 2]
RFC 7925                  TLS/DTLS IoT Profiles                July 2016

Table of Contents

   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   4
   2.  Terminology . . . . . . . . . . . . . . . . . . . . . . . . .   4
   3.  Overview  . . . . . . . . . . . . . . . . . . . . . . . . . .   5
     3.1.  TLS and DTLS  . . . . . . . . . . . . . . . . . . . . . .   5
     3.2.  Communication Models  . . . . . . . . . . . . . . . . . .   6
     3.3.  The Ciphersuite Concept . . . . . . . . . . . . . . . . .  20
   4.  Credential Types  . . . . . . . . . . . . . . . . . . . . . .  21
     4.1.  Preconditions . . . . . . . . . . . . . . . . . . . . . .  21
     4.2.  Pre-Shared Secret . . . . . . . . . . . . . . . . . . . .  23
     4.3.  Raw Public Key  . . . . . . . . . . . . . . . . . . . . .  25
     4.4.  Certificates  . . . . . . . . . . . . . . . . . . . . . .  27
   5.  Signature Algorithm Extension . . . . . . . . . . . . . . . .  32
   6.  Error Handling  . . . . . . . . . . . . . . . . . . . . . . .  32
   7.  Session Resumption  . . . . . . . . . . . . . . . . . . . . .  34
   8.  Compression . . . . . . . . . . . . . . . . . . . . . . . . .  35
   9.  Perfect Forward Secrecy . . . . . . . . . . . . . . . . . . .  35
   10. Keep-Alive  . . . . . . . . . . . . . . . . . . . . . . . . .  36
   11. Timeouts  . . . . . . . . . . . . . . . . . . . . . . . . . .  38
   12. Random Number Generation  . . . . . . . . . . . . . . . . . .  39
   13. Truncated MAC and Encrypt-then-MAC Extension  . . . . . . . .  40
   14. Server Name Indication (SNI)  . . . . . . . . . . . . . . . .  40
   15. Maximum Fragment Length Negotiation . . . . . . . . . . . . .  41
   16. Session Hash  . . . . . . . . . . . . . . . . . . . . . . . .  41
   17. Renegotiation Attacks . . . . . . . . . . . . . . . . . . . .  42
   18. Downgrading Attacks . . . . . . . . . . . . . . . . . . . . .  42
   19. Crypto Agility  . . . . . . . . . . . . . . . . . . . . . . .  43
   20. Key Length Recommendations  . . . . . . . . . . . . . . . . .  44
Show full document text