[Cfrg] Revive of draft-agl-ckdf?

[Joachim Strömbergson <[e-mail]>]

Aloha!

draft-agl-ckdf is a draft by Adam Langley specifying a block cipher
based version of the hash based HKDF in RFC 5869. More specifically,
CKDF use AES in CMAC mode to implement the extract and expand stages of
HKDF.

The 01-draft expired Feb 25, 2016. I've had a brief contact with Langley
who stated that he had no further interest in it.

But I think the premise in the introduction of the draft still stands.

For many IoT devices with really constrained MCUs, if there is
cryptographic support in HW, it is an AES-128 core. CKDF would allow
these devices to use the same core for key derivation and session
protection.

In pure SW solutions, having just one primitive makes the code size
smaller too. Performance-wise. the number of iterations and thus total
cycles will be much smaller for CKDF compared to HKDF, reducing the time
to establish sessions.

For these reasons, I believe CKDF would provide use case advantages
compared to HKDF.

Would it be possible to revive the draft?

BR
Joachim Strömbergson