Re: [Cfrg] Revive of draft-agl-ckdf?

Aloha!

Relevant links that I (of course) forgot.

https://www.ietf.org/archive/id/draft-agl-ckdf-01.txt
https://tools.ietf.org/html/rfc5869

BR
JoachimS

Joachim Strömbergson wrote:
> Aloha!
> 
> draft-agl-ckdf is a draft by Adam Langley specifying a block cipher
> based version of the hash based HKDF in RFC 5869. More specifically,
> CKDF use AES in CMAC mode to implement the extract and expand stages of
> HKDF.
> 
> The 01-draft expired Feb 25, 2016. I've had a brief contact with Langley
> who stated that he had no further interest in it.
> 
> But I think the premise in the introduction of the draft still stands.
> 
> For many IoT devices with really constrained MCUs, if there is
> cryptographic support in HW, it is an AES-128 core. CKDF would allow
> these devices to use the same core for key derivation and session
> protection.
> 
> In pure SW solutions, having just one primitive makes the code size
> smaller too. Performance-wise. the number of iterations and thus total
> cycles will be much smaller for CKDF compared to HKDF, reducing the time
> to establish sessions.
> 
> For these reasons, I believe CKDF would provide use case advantages
> compared to HKDF.
> 
> Would it be possible to revive the draft?
> 
> BR
> Joachim Strömbergson
> 
> _______________________________________________
> Cfrg mailing list
> Cfrg@irtf.org
> https://www.irtf.org/mailman/listinfo/cfrg