[COSE] COSE in the network: Secure Wake-on-Radio (SWORN)

Carsten Bormann <cabo@tzi.org> Wed, 05 July 2017 14:13 UTC

Return-Path: <cabo@tzi.org>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75C23131D1B; Wed, 5 Jul 2017 07:13:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.199
X-Spam-Level:
X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NzpTWf1oGdcJ; Wed, 5 Jul 2017 07:13:23 -0700 (PDT)
Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B4BC012762F; Wed, 5 Jul 2017 07:13:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de
Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id v65EDIQj023371; Wed, 5 Jul 2017 16:13:18 +0200 (CEST)
Received: from [IPv6:2001:638:708:18::55] (unknown [IPv6:2001:638:708:18::55]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3x2jWy1vklz3b5t; Wed, 5 Jul 2017 16:13:18 +0200 (CEST)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 10.3 \(3273\))
From: Carsten Bormann <cabo@tzi.org>
Date: Wed, 05 Jul 2017 16:13:17 +0200
Cc: cose <cose@ietf.org>
X-Mao-Original-Outgoing-Id: 520956797.778528-2bf8ae63a734369d9a130a1cb175f567
Content-Transfer-Encoding: quoted-printable
Message-Id: <ED222966-B68C-4C07-8521-4B823E3591D2@tzi.org>
To: hackathon@ietf.org
X-Mailer: Apple Mail (2.3273)
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/5Ff0ORF7HsFHD0Wf9f7cwphz-ko>
Subject: [COSE] COSE in the network: Secure Wake-on-Radio (SWORN)
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 05 Jul 2017 14:13:24 -0000

At the IETF99 Hackathon, we plan to do some work on using COSE in the network.  See below.

Grüße, Carsten


# COSE in the network: Secure Wake-on-Radio (SWORN)

## Champions

* Olaf Bergmann
* Benjamin Piepiora

## Background

COSE is the CBOR object signing and encryption specification, RFC 8152-to-be.

COSE is mostly thought as a component for application protocols, but
it can be used in the network as well.

Wake-on-Radio can save a lot of power for battery-operated devices by
having them wake up and consume power only when there is actually
something to do.  But Wake-on-Radio provides a too easy DoS vector for
a battery depletion attack.  Secure Wake-on-Radio Nudging (SWORN)
enables a last-hop router to find out if the correspondent node was
authorized to wake up the device with a packet.

## Project

* Implement SWORN in an actual IoT scenario with Wake-on-Radio
* Demonstrate the power savings achievable
* Demonstrate the workflow for getting a correspondent node authorized
* Cooperate with other COSE connoisseurs and IoT power savers

* Specification: <https://tools.ietf.org/html/draft-bormann-t2trg-sworn>