[Lake] EDHOC-PSK is ready for formal analysis

[Mališa Vučinić <[e-mail]>]

Dear all,

As you know, Ephemeral Diffie-Hellman over COSE (EDHOC, RFC 9528) specifies a lightweight authenticated key exchange protocol between two peers. EDHOC is especially suited for constrained environments such as NB-IoT, 6TiSCH, LoRaWAN and BLE. The authentication in RFC 9528 is limited to asymmetric credentials, signature or static Diffie-Hellman (DH) keys. The working group’s next milestone is to produce an EDHOC method that provides authentication based on pre-shared symmetric keys. In January 2025, we adopted draft-ietf-lake-edhoc-psk [1] as a solution document specifying a protocol that can be used both during a key update and a first-time key exchange.

This email triggers the call for analysis of draft-ietf-lake-edhoc-psk in its -06 version. In its Security Considerations section (Section 9), the draft summarizes the claimed security properties. We are calling for analysis whether the claimed security properties hold in the symbolic and computational security models.

In order to allow enough time for the analyses to happen, we are freezing the draft from any changes until 15 February 2026. The tentative timeline is as follows:

- October 2025: start of the analysis phase
- November 2025 - February 2026: interested teams work on different analyses
- by 15 February 2026: interested teams notify the working group and the document author team of vulnerabilities found
- by 2 March 2026 (IIETF 125 I-D cutoff): document authors submit a new version of the draft integrating the (proposed) mitigations
- 16-20 March 2026 (LAKE @ IETF 125 meeting): formal analysis teams present their findings to the working group; in parallel; document authors present mitigations to the different vulnerabilities found.

If you are interested in contributing to the analysis of the next EDHOC method, do reach out to [e-mail] <mailto:[e-mail]>. 

Best,
Mališa and Renzo, your LAKE chairs

[1] https://datatracker.ietf.org/doc/draft-ietf-lake-edhoc-psk