Re: [Lake] 🔔 WG Last Call for draft-ietf-lake-edhoc-17

[Felix Günther <[e-mail]>]

Hi all,

While we do not have any explicit comments on the document, we thought 
it is maybe still worthwhile to share the following analysis confirmation.

We updated our computational analysis of the SIG-SIG mode, of which Marc 
presented an earlier version at IETF 114, to draft 17. We could confirm that
  * with some of the later cryptographic suggestions (PR #276, #318) 
included,
  * EDHOC SIG-SIG achieves key exchange security (key secrecy and 
explicit authentication) in a strong model capturing potentially 
colliding credential identifiers,
  * assuming, among others, an "exclusive ownership" property of the 
signature scheme (established for Ed25519, conjectured for the way ECDSA 
is used in EDHOC SIG-SIG).

Our updated analysis is not publicly available yet at this point. Let us 
know if a public reference would be helpful for the draft RFC; we can 
also share the document individually upon request.


The last point actually maybe does lead to a comment on the document: 
Given the various security analyses EDHOC has seen and their insights 
being discussed in Section 8, would it make sense to add informative 
references to those (as done, e.g., for TLS 1.3, RFC 8446 Appendix E)?

Kind regards,
Felix Günther (with Marc Ilunga)


On 2022-10-14 12:24 +0200, Mališa Vučinić <[e-mail]> wrote:
> Hi all,
> 
> As discussed during the interim on 5 October 2022, this email triggers 
> the working group last call for the version 17 of the EDHOC draft, the 
> main item on the agenda of the LAKE working group.
> 
> The draft can be found at: 
> https://datatracker.ietf.org/doc/draft-ietf-lake-edhoc/ 
> <https://datatracker.ietf.org/doc/draft-ietf-lake-edhoc/>
> 
> Please state your position and comments to the list by 4 November 2022 
> so we can discuss them during the IETF 115 meeting in London.
> 
> Thanks,
> Mališa, for the chairs
> 
>