Lightweight Authenticated Key Exchange with EDHOC: Design Overview

Mališa Vučinić (1) , Göran Selander (2) , John Preuss Mattsson (2)

1 EVA - Wireless Networking for Evolving & Adaptive Applications
2 Ericsson Research

The Internet Engineering Task Force (IETF) and its Lightweight Authenticated Key Exchange (LAKE) standardization group have worked on a key exchange solution that enables public-key-based key exchange over the most constrained Internet of Things (IoT) radio communication technologies. The EDHOC protocol, an output of this standardization effort, prioritizes small message size to minimize the number of radio frames. As an example, one instance of the protocol completes the authenticated key exchange of two peers with three messages of 37, 45 and 19 bytes. The protocol will be published as an Internet Standard (RFC) and expects a wide deployment on constrained devices, with 7 independent implementations already available. It is substantial that the expected security properties hold. We invite the formal analysis community to study the protocol and contribute the results in both the symbolic and the computational model. The feedback from the community will be incorporated into the specification before it is published. The goal of this document is to summarize the EDHOC design and the expected properties, as well as to outline the open research questions, in order to facilitate the analysis.

Domaines: Cryptographie et sécurité [cs.CR]; Réseaux et télécommunications [cs.NI]

Mališa Vučinić, Göran Selander, John Preuss Mattsson. Lightweight Authenticated Key Exchange with EDHOC: Design Overview. 2021. ⟨hal-03434293v1⟩