Message-ID: <198ac6e8-9e1c-43d4-ba22-a05f10489a6c@ri.se>
Date: Mon, 17 Mar 2025 08:50:18 +0100
User-Agent: Mozilla Thunderbird
Content-Language: en-US
To: "lake@ietf.org" <lake@ietf.org>
From: Marco Tiloca <marco.tiloca@ri.se>
Autocrypt: addr=marco.tiloca@ri.se; keydata=
 xsBNBFSNeRUBCAC44iazWzj/PE3TiAlBsaWna0JbdIAJFHB8PLrqthI0ZG7GnCLNR8ZhDz6Z
 aRDPC4FR3UcMhPgZpJIqa6Zi8yWYCqF7A7QhT7E1WdQR1G0+6xUEd0ZD+QBdf29pQadrVZAt
 0G4CkUnq5H+Sm05aw2Cpv3JfsATVaemWmujnMTvZ3dFudCGNdsY6kPSVzMRyedX7ArLXyF+0
 Kh1T4WUW6NHfEWltnzkcqRhn2NcZtADsxWrMBgZXkLE/dP67SnyFjWYpz7aNpxxA+mb5WBT+
 NrSetJlljT0QOXrXMGh98GLfNnLAl6gJryE6MZazN5oxkJgkAep8SevFXzglj7CAsh4PABEB
 AAHNNk1hcmNvIFRpbG9jYSAobWFyY28udGlsb2NhQHJpLnNlKSA8bWFyY28udGlsb2NhQHJp
 LnNlPsLAdwQTAQgAIQUCWkAnkAIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRDuJmS0
 DljaQwEvCACJKPJIPGH0oGnLJY4G1I2DgNiyVKt1H4kkc/eT8Bz9OSbAxgZo3Jky382e4Dba
 ayWrQRFen0aLSFuzbU4BX4O/YRSaIqUO3KwUNO1iTC65OHz0XirGohPUOsc0SEMtpm+4zfYG
 7G8p35MK0h9gpwgGMG0j0mZX4RDjuywC88i1VxCwMWGaZRlUrPXkC3nqDDRcPtuEGpncWhAV
 Qt2ZqeyITv9KCUmDntmXLPe6vEXtOfI9Z3HeqeI8OkGwXpotVobgLa/mVmFj6EALDzj7HC2u
 tfgxECBJddmcDInrvGgTkZtXEVbyLQuiK20lJmYnmPWN8DXaVVaQ4XP/lXUrzoEzzsBNBFSN
 eRUBCACWmp+k6LkY4/ey7eA7umYVc22iyVqAEXmywDYzEjewYwRcjTrH/Nx1EqwjIDuW+BBE
 oMLRZOHCgmjo6HRmWIutcYVCt9ieokultkor9BBoQVPiI+Tp51Op02ifkGcrEQNZi7q3fmOt
 hFZwZ6NJnUbA2bycaKZ8oClvDCQj6AjEydBPnS73UaEoDsqsGVjZwChfOMg5OyFm90QjpIw8
 m0uDVcCzKKfxq3T/z7tyRgucIUe84EzBuuJBESEjK/hF0nR2LDh1ShD29FWrFZSNVVCVu1UY
 ZLAayf8oKKHHpM+whfjEYO4XsDpV4zQ15A+D15HRiHR6Adf4PDtPM1DCwggjABEBAAHCwF8E
 GAECAAkFAlSNeRUCGwwACgkQ7iZktA5Y2kPGEwf/WNjTy3z74vLmHycVsFXXoQ8W1+858mRy
 Ad0a8JYzY3xB7CVtqI3Hy894Qcw4H6G799A1OL9B1EeA8Yj3aOz0NbUyf5GW+iotr3h8+KIC
 OYZ34/BQaOLzdvDNmRoGHn+NeTzhF7eSeiPKi2jex+NVodhjOVGXw8EhYGkeZLvynHEboiLM
 4TbyPbVR9HsdVqKGVTDxKSE3namo3kvtY6syRFIiUz5WzJfYAuqbt6m3TxDEb8sA9pzaLuhm
 fnJRc12H5NVZEZmE/EkJFTlkP4wnZyOSf/r2/Vd0iHauBwv57cpY6HFFMe7rvK4s7ME5zctO
 Ely5C6NCu1ZaNtdUuqDSPA==
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="------------8NTgA1Ax6pxvwC7vr50zmXIJ"
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: 
	=?utf-8?B?c1ZPZmZBVnhoVWYvTnRwR2h1SlpiYUl5YUlWWUVTcm05dVRQQWVCUlhNSFFw?=
 =?utf-8?B?c08yaFd6K0x0SEU1WExvSjd1bTd0Qk12a2RZV0xSS1BtYmVXSFFiS2ppRU8y?=
 =?utf-8?B?d1VWYWw2NDZtVGF0cHNmNkg1NTFrbFFvcGxMMVZWMXFWTytlVTVsN0FMTGJn?=
 =?utf-8?B?SEhTOEpKKzJpaDg1L3VWSVpleTdpTExUYnNxWU9RY0pVQ2duSWcvcy9CU1FL?=
 =?utf-8?B?djhLbDBDL3Y1bG0zQ1N2UkJTMkJ4czRaeTJHNW13OWtXUjF1T1U2U1RPNHcz?=
 =?utf-8?B?K2pwY04xa3E4U0s1cHRKSmxuNUZtWUUwc3lneDc1YitWRWhDeGo0S3h2cHNB?=
 =?utf-8?B?Ui9NU3FJZ3FCWElmOTA4Z3QySDUvaXZCdnZUdHJDbXM1Z01lVjNoZjdKQzI1?=
 =?utf-8?B?RjB3OHJXNHhOVDAvcjFRa2RSQTlQTHB0NVZ1WkRFcmoyTXRLMUVseUk3bm9Y?=
 =?utf-8?B?aWh2Zzdra1JLMEwxdmppZFpuSlpaOHVQUUxVNGV6MEcvaTdnclovdGFxTU9P?=
 =?utf-8?B?TGtqZGNnMlFJMXhBYUcwa21Mbjhsd0hjNS9majNjS2IrYWl3bk9JbkJQclRZ?=
 =?utf-8?B?eGlLem16ZWlwelpaVGpMMG5vL2FibjNpT1hlVWw3L0tTbEZTTXpUaHp2ellV?=
 =?utf-8?B?d2VZMU9YUDk5SW0wWU5GcUw4Y25jazlrMFJSam0zR1JTV1E3TmsvS0ZVSDcz?=
 =?utf-8?B?ZUJWRVRoU01yeGZwWmhuZzQrWjIzU3dIbW1nYXZMRWZRMGNTOUFMYWVjRWJP?=
 =?utf-8?B?ZVVjRHZTVTdqNmRlMzZWZ29yN3BjQzFFWjlUQWRoNSttTUd1L0MyN3RkQmk0?=
 =?utf-8?B?ZWlYUStBOTRVUnlzZFJLWnNFL2o5bnNmYjg5S3Q3cmxjNFNRL3Z0ZGU4Q3Iv?=
 =?utf-8?B?UDJuTnZjRnBuNHdHN2tuZ0E4Nnp5UWpZUllFMkhRclJhS3BBbXRRb3FtbEFY?=
 =?utf-8?B?YjdrL2xtRFlxZFA0dkNUemM2b2QwUXMyU09XdXdyRDFJejI5NlMyVU1JUW50?=
 =?utf-8?B?YWFvQ09SYklkWnY1cG9JTXhKUFVxVHAzVkJrVW0rUDFLcXowSDNvR1QwOTJB?=
 =?utf-8?B?dnVnd1dpc09zQ2NVOHk5Rk8rcG9Ybm5JbUNpYVUxQUdydGpzL3RoWHNzVjFZ?=
 =?utf-8?B?dXNmUW96bHJaTVlkcDhSWUFrWWdrbXFpK1ZqcWx2KzVUTFcrYXM4dXdybHd6?=
 =?utf-8?B?SFdoZnBiNmphcUVDRWdvRUdlZlQxbTNVWW1DLzhCTEJRZUpFK0pLblZpUzF0?=
 =?utf-8?B?aldrcjRzWjlNamJIaVdpdlBBdFpnVzZFdW9yQlYwYmM3RjBCSFJqeVhBMjVT?=
 =?utf-8?B?WlpMSHJzU3VDVEhnRi9JejNHTzJIOWE2OEx2YXJOUFNCV2Z1bHVDVmhBOUdY?=
 =?utf-8?B?YzZVK2czZGxEbUJyaWU0QXRNZGh3eVh6QWdWSk1ITU1LMU9uMi9LRE5ma25Y?=
 =?utf-8?B?VzF3bmpya0VCRm84aXh2SEgydkdwbnlXdmk3a0R0RTBQeG1nQ05acW5KdjF6?=
 =?utf-8?B?cXRCL0t3VVliSnA3MzRpV3hza0UrRzdBckQ0L1daNmVhclJnTzUya1Fsd20x?=
 =?utf-8?B?SkNLdHJIR3hRUmxWd0VwSUpQSVNIcytrWUZCMFFHcGVGdk53WDBSRTVrLzFJ?=
 =?utf-8?B?RWltNnBnMmNXOENGNmJHY0oveVQ1bFk2NERJSi8wVzdXNExpODVQWlk4bGtm?=
 =?utf-8?B?YktQSUtDSlFOWDdwUEdJVGFWNXFqK0VWRloxVXdrTUt5SmRnR1FXdTBQUlNj?=
 =?utf-8?B?WUNjc2k4N1ZaSVMxb3RxY2x2Y1MvT0Z3R0FGK0JSdmZnM2VZUmhYay9TMjdT?=
 =?utf-8?B?Zk13REJJRFZ3WWUwOFBPV3VrWGt1R2FLWHBENnRmWEMyS09JU2lEZjJZd3Ji?=
 =?utf-8?B?dm9yai9ON1R6YU53OC9LTjMvU1BVckZ6ZERIL2ZsUi9PMjFUeENvOEhGK1dJ?=
 =?utf-8?B?YnJuK21wWWNCQnYxZC9xaVArVU14YzkvZWpmd3FEN0ZOaFd3YjFxS0NMVmdy?=
 =?utf-8?B?bzF1UGx5Ykx2S2k4ZlZYRGgzRGhDeHZOTUNGV2hHaXlhc3REZjgrQzAydHF4?=
 =?utf-8?B?cTFCOS8vclh4ZXFpYncvL1J0cjB2MzZTTHM0S2JqS1JHREhXckhaUXM1SXhs?=
 =?utf-8?Q?I3i0Eergb2vznQh/zPdM40rya?=
X-OriginatorOrg: ri.se
X-MS-Exchange-CrossTenant-Network-Message-Id: 
 da4cb428-86b1-4d4c-8308-08dd652862cd
X-MS-Exchange-CrossTenant-AuthSource: GVYP280MB0464.SWEP280.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Mar 2025 07:50:28.8940
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 5a9809cf-0bcb-413a-838a-09ecc40cc9e8
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: 
 JyeEJu2/CoHxkrInEY2WOf9mkbgex1ir10PIFLoyoTe7cW1RAD7aKrsGB4OsFMKwnTbrCqRNrkzNWYoTFZGy1g==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MM0P280MB1927
Message-ID-Hash: XUVXP32UJFM3BTPHC6QOWJIIB7MQ7COI
X-Message-ID-Hash: XUVXP32UJFM3BTPHC6QOWJIIB7MQ7COI
X-MailFrom: marco.tiloca@ri.se
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation; nonmember-moderation; administrivia;
 implicit-dest; max-recipients; max-size; news-moderation; no-subject;
 digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: =?utf-8?q?=5BLake=5D_Comments_on_draft-ietf-lake-ra-01?=
List-Id: Lightweight Authenticated Key Exchange <lake.ietf.org>
Archived-At: 
 <https://mailarchive.ietf.org/arch/msg/lake/Q-gG9ueKKlAjqOKO0t8xiG2En2M>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lake>
List-Help: <mailto:lake-request@ietf.org?subject=help>
List-Owner: <mailto:lake-owner@ietf.org>
List-Post: <mailto:lake@ietf.org>
List-Subscribe: <mailto:lake-join@ietf.org>
List-Unsubscribe: <mailto:lake-leave@ietf.org>

--------------8NTgA1Ax6pxvwC7vr50zmXIJ
Content-Type: multipart/mixed; boundary="------------A6blk94AZ0iHJaGc2cFxgIC0";
 protected-headers="v1"
From: Marco Tiloca <marco.tiloca@ri.se>
To: "lake@ietf.org" <lake@ietf.org>
Message-ID: <198ac6e8-9e1c-43d4-ba22-a05f10489a6c@ri.se>
Subject: Comments on draft-ietf-lake-ra-01

--------------A6blk94AZ0iHJaGc2cFxgIC0
Content-Type: multipart/mixed; boundary="------------Mh5euqCe0wZxPI9FOvANi9j7"

--------------Mh5euqCe0wZxPI9FOvANi9j7
Content-Type: multipart/alternative;
 boundary="------------ET6z5rtXcdo4ysimTkpnZ7m0"

--------------ET6z5rtXcdo4ysimTkpnZ7m0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64

SGkgYWxsLA0KDQpQbGVhc2Ugc2VlIGJlbG93IGEgZmV3IGNvbW1lbnRzIG9uIGRyYWZ0LWll
dGYtbGFrZS1yYS4gSG9wZSBpdCBoZWxwcyENCg0KQmVzdCwNCi9NYXJjbw0KDQotLS0tLS0t
LS0tLS0tLS0NCg0KW1NlY3Rpb24gNS4yLjEuMS4yXQ0KDQpJdCBzYXlzOg0KDQogPiBJbiBj
YXNlIG5vbmUgb2YgdGhlIGV2aWRlbmNlIHR5cGVzIGlzIHN1cHBvcnRlZCwgdGhlIFJlbHlp
bmcgUGFydHkgDQpyZWplY3RzIHRoZSBmaXJzdCBtZXNzYWdlXzEgd2l0aCBhbiBlcnJvciBp
bmRpY2F0aW5nIHN1cHBvcnQgZm9yIGFub3RoZXIgDQpldmlkZW5jZSB0eXBlLg0KDQpUaGlz
IHJlcXVpcmVzIGEgc2VwYXJhdGUgZXJyb3IgdHlwZSwgaW4gYWRkaXRpb24gdG8gdGhlIG9u
ZSBkZWZpbmVkIGZvciANCmEgZGlmZmVyZW50IHJlYXNvbiBpbiBTZWN0aW9uIDguMS4NCg0K
DQpbU2VjdGlvbiA1LjIuMS4xLjNdDQoNCkFzIHRvIHRoZSBkZWZpbml0aW9uIG9mIHRoZSBt
ZWFzdXJlbWVudHMtZm9ybWF0IGFycmF5LCBzdWdnZXN0ZWQgY2hhbmdlczoNCg0KT0xEOg0K
bWVhc3VyZW1lbnRzLWZvcm1hdCA9IFsNCiDCoMKgwqDCoMKgIGNvbnRlbnQtdHlwZTogY29h
cC1jb250ZW50LWZvcm1hdCwNCiDCoMKgwqDCoMKgIGNvbnRlbnQtZm9ybWF0OiBieXRlcyAu
Y2JvciBtZWFzdXJlbWVudHMtYm9keS1jYm9yDQpdDQoNCk5FVzoNCm1lYXN1cmVtZW50cy1m
b3JtYXQgPSBbDQogwqDCoMKgwqDCoCBjb250ZW50LWZvcm1hdDogdWludCwNCiDCoMKgwqDC
oMKgIGNvbnRlbnQ6IGJ5dGVzIC5jYm9yIG1lYXN1cmVtZW50cy1ib2R5LWNib3INCl0NCg0K
VGhpcyBzdGlsbCByZXF1aXJlcyB0aGUgZGVmaXRpb24gb2YgbWVhc3VyZW1lbnRzLWJvZHkt
Y2JvciAuLi4NCg0KDQpbU2VjdGlvbiA1LjIuMS4xLjRdDQoNCkl0IHNheXM6DQoNCiA+IFRo
ZSByZWNlaXZlciBNVVNUIHJlcGx5IHdpdGggYW4gRUFEIGl0ZW0gY29ycmVzcG9uZGluZyB0
byB0aGUgDQpiYWNrZ3JvdW5kLWNoZWNrIG1vZGVsLg0KDQpJc24ndCBzdWNoIGFuIEVBRCBp
dGVtIGV4YWN0bHkgIkF0dGVzdGF0aW9uX3Byb3Bvc2FsIiBmcm9tIFNlY3Rpb24gDQo1LjIu
MS4xLjE/DQoNCg0KW1NlY3Rpb24gNS4yLjEuMS40XQ0KDQpJdCBzYXlzOg0KDQogPiBUaGUg
ZWFkX3ZhbHVlIGNhbiBiZSBlbXB0eSwgYXMgdGhlIGVhZF9sYWJlbCBzZXJ2ZXMgYXMgdGhl
IHRyaWdnZXIuDQoNCmFuZA0KDQogPiAqIGVhZF92YWx1ZSA9IG51bGwNCg0KVGhlIGludGVu
ZGVkIGFuZCByaWdodCB3YXkgaXMgdG8gaGF2ZSBlYWRfdmFsdWUgbm90IHByZXNlbnQuDQoN
Cg0KW1NlY3Rpb24gNS4yLjIuMS4yXQ0KDQpJdCBzYXlzOg0KDQogPiBSZWx5aW5nIFBhcnR5
IGdlbmVyYXRlcyBhIG5vbmNlIHRvIGVuc3VyZSB0aGUgZnJlc2huZXNzIG9mIHRoZSANCmF0
dGVzdGF0aW9uIHJlc3VsdCBmcm9tIHRoZSBWZXJpZmllci4NCg0KV2hlcmUgaXMgdGhpcyBu
b25jZSBpbmNsdWRlZD8gSXQgaXMgbm90IHNob3duIGluIHRoZSBSZXF1ZXN0X3N0cnVjdHVy
ZSANCmRlZmluZWQgYmVsb3cgb3IgaW4gdGhlIGV4YW1wbGUgaW4gRmlndXJlIDMuDQoNCg0K
W1NlY3Rpb24gNS4yLjIuMS40XQ0KDQpJdCBzYXlzOg0KDQogPiBUaGUgcmVjZWl2ZXIgTVVT
VCByZXBseSB3aXRoIGFuIEVBRCBpdGVtIGNvcnJlc3BvbmRpbmcgdG8gdGhlIA0KcGFzc3Bv
cnQgbW9kZWwuDQoNCklzbid0IHN1Y2ggYW4gRUFEIGl0ZW0gZXhhY3RseSAiUmVzdWx0X3By
b3Bvc2FsIiBmcm9tIFNlY3Rpb24gNS4yLjIuMS4xPw0KDQoNCltTZWN0aW9uIDUuMi4yLjEu
NF0NCg0KSXQgc2F5czoNCg0KID4gVGhlIGVhZF92YWx1ZSBjYW4gYmUgZW1wdHksIGFzIHRo
ZSBlYWRfbGFiZWwgc2VydmVzIGFzIHRoZSB0cmlnZ2VyLg0KDQphbmQNCg0KID4gKiBlYWRf
dmFsdWUgPSBudWxsDQoNClRoZSBpbnRlbmRlZCBhbmQgcmlnaHQgd2F5IGlzIHRvIGhhdmUg
ZWFkX3ZhbHVlIG5vdCBwcmVzZW50Lg0KDQoNCltTZWN0aW9uIDZdDQoNCkl0IHNheXM6DQoN
CiA+IEFsdGhvdWdoIHRoZXJlIGFyZSA4IGNhc2VzIChJb1QvTmV0LCBCRy9QUCwgRndkL1Jl
diksIC4uLg0KDQpJIHRoaW5rIHlvdSBhcmUgYWxzbyBzaWxlbnRseSBpbXBseWluZyB0aGF0
Og0KDQoqIEZvcndhcmQgTWVzc2FnZSBGbG93IG1lYW5zIHRoYXQgdGhlIElvVCBkZXZpY2Ug
aXMgdGhlIEVESE9DIEluaXRpYXRvciwgDQp3aGlsZSBpdCBzaG91bGQganVzdCBtZWFuIHRo
YXQgdGhlIEVESE9DIEluaXRpYXRvciBpcyBhIENvQVAgY2xpZW50Lg0KDQoqIFJldmVyc2Ug
TWVzc2FnZSBGbG93IG1lYW5zIHRoYXQgdGhlIElvVCBkZXZpY2UgaXMgdGhlIEVESE9DIFJl
c3BvbmRlciwgDQp3aGlsZSBpdCBzaG91bGQganVzdCBtZWFuIHRoYXQgdGhlIEVESE9DIElu
aXRpYXRvciBpcyBhIENvQVAgc2VydmVyLg0KDQpJZiB5b3UgYWN0dWFsbHkgbWVhbiB0aGF0
LCBpdCdzIGdvb2QgdG8gbWFrZSBpdCBleHBsaWNpdC4gT3RoZXJ3aXNlLCB0aGUgDQpjYXNl
cyBhcmUgbW9yZSwgYW5kIHRoZSB0dXBsZSBuZWVkcyB0byBhbHNvIGluZGljYXRlIHdoZXRo
ZXIgdGhlIA0KQXR0ZXN0ZXIgaXMgdGhlIEluaXRpYXRvciBvciB0aGUgUmVzcG9uZGVyLg0K
DQoNCltTZWN0aW9uIDYuMV0NCg0KVGhlIEVESE9DIGNvbm5lY3Rpb24gaWRlbnRpZmllciBD
X1IgYXBwZWFycyBmb3IgdGhlIGZpcnN0IHRpbWUgaGVyZSBpbiANCkZpZ3VyZSAxLCBidXQg
aXQgaXMgbmV2ZXIgbWVudGlvbmVkIGluIHRoZSB0ZXh0IGhlcmUgaW4gU2VjdGlvbiA2LjEg
b3IgDQplYXJsaWVyIGluIFNlY3Rpb24gNS4yLjEuDQoNCkkgZ3Vlc3MgdGhhdCB0aGUgaW50
ZW50IGlzIHRvIGFsbG93IHRoZSBWZXJpZmllciB0byBjb3JyZWxhdGUgYW4gDQpBdHRlc3Rh
dGlvbiBQcm9wb3NhbCB3aXRoIGEgbGF0ZXIgY29ycmVzcG9uZGluZyBFdmlkZW5jZS4gSWYg
c286DQoNCiogSXMgdGhhdCBjb3JyZWxhdGlvbiBhY3R1YWxseSByZXF1aXJlZD8gQWZ0ZXIg
YWxsLCBFdmlkZW5jZSBjb21lcyBiYWNrIA0KYXMgaW5jbHVkaW5nIHRoZSBOb25jZSB0aGF0
IHRoZSBWZXJpZmllciBvZmZlcmVkIHRvZ2V0aGVyIHdpdGggdGhlIA0KRXZpZGVuY2VUeXBl
KHMpLg0KDQoqIEEgVmVyaWZpZXIgbWlnaHQgYmUgY29udGFjdGVkIGJ5IG11bHRpcGxlIE5l
dHdvcmsgU2VydmljZXMgYWN0aW5nIGFzIA0KUmVseWluZyBQYXJ0eSwgd2hpY2ggbWlnaHQg
YWNjaWRlbnRhbGx5IGJlIHVzaW5nIHRoZSBzYW1lIEVESE9DIA0KQ29ubmVjdGlvbiBJZGVu
dGlmaWVyIENfUiBpbiB0aGVpciByZXNwZWN0aXZlIEVESE9DIHNlc3Npb25zIHdpdGggDQpk
aWZmZXJlbnQgSW9UIGRldmljZXMsIHRodXMgY3JlYXRpbmcgYW1iaWd1aXR5IGF0IHRoZSBW
ZXJpZmllci4NCg0KDQpbU2VjdGlvbiAxMC4xXQ0KDQpJdCBzYXlzOg0KDQogPiBUaGUgZWFk
X2xhYmVsID0gVEJEMSBjb3JyZXNwb25kcyB0byB0aGUgZWFkX3ZhbHVlIA0KQXR0ZXN0YXRp
b25fcHJvcG9zYWwgaW4gU2VjdGlvbiA1LjIuMS4xLjEsIEF0dGVzdGF0aW9uX3JlcXVlc3Qg
aW4gDQpTZWN0aW9uIDUuMi4xLjEuMiBhbmQgRXZpZGVuY2UgaW4gU2VjdGlvbiA1LjIuMS4x
LjMuDQoNCldoZW4gcmVjZWl2aW5nIGFuIEVESE9DIG1lc3NhZ2Ugd2l0aCB0aGUgRUFEIGl0
ZW0gd2l0aCBsYWJlbCAtVEJEMSwgaG93IA0KZG9lcyB0aGUgcmVjaXBpZW50IGRpc3Rpbmd1
aXNoIHdoZXRoZXIgaXQgaXMgZXhhY3RseSBhYm91dCANCkF0dGVzdGF0aW9uX3Byb3Bvc2Fs
LCBBdHRlc3RhdGlvbl9yZXF1ZXN0IG9yIEV2aWRlbmNlPw0KDQpUaGUgaW5jbHVzaW9uIGlu
IG9uZSBFREhPQyBtZXNzYWdlIG9yIG90aGVyIG1pZ2h0IHN0aWxsIGJlIGFtYmlndW91cywg
c28gDQppcyB0aGF0IGJhc2VkIG9uIHRoZSB1bmlxdWUgKD8pIHN0cnVjdHVyZSBvZiB0aGUg
ZWFkX3ZhbHVlPw0KDQpUaGUgc2FtZSBnb2VzIGZvciB0aGUgbGF0ZXIgZGVmaW5pdGlvbiBv
ZiB0aGUgZWFkX2xhYmVsIFRCRDMuDQoNCi0tIA0KTWFyY28gVGlsb2NhDQpQaC5ELiwgU2Vu
aW9yIFJlc2VhcmNoZXINCg0KUGhvbmU6ICs0NiAoMCk3MCA2MCA0NiA1MDENCg0KUklTRSBS
ZXNlYXJjaCBJbnN0aXR1dGVzIG9mIFN3ZWRlbiBBQg0KQm94IDEyNjMNCjE2NCAyOSBLaXN0
YSAoU3dlZGVuKQ0KDQpEaXZpc2lvbjogRGlnaXRhbCBTeXN0ZW1zDQpEZXBhcnRtZW50OiBD
b21wdXRlciBTY2llbmNlDQpVbml0OiBDeWJlcnNlY3VyaXR5DQoNCmh0dHBzOi8vd3d3LnJp
LnNlDQoNCg==
--------------ET6z5rtXcdo4ysimTkpnZ7m0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html>
<html>
  <head>

    <meta http-equiv=3D"content-type" content=3D"text/html; charset=3DUTF=
-8">
  </head>
  <body>
    <font size=3D"4">Hi all,<br>
      <br>
      Please see below a few comments on draft-ietf-lake-ra. Hope it
      helps!<br>
      <br>
      Best,<br>
      /Marco<br>
      <br>
      ---------------<br>
      <br>
      [Section 5.2.1.1.2]<br>
      <br>
      It says:<br>
      <br>
      &gt; In case none of the evidence types is supported, the Relying
      Party rejects the first message_1 with an error indicating support
      for another evidence type.<br>
      <br>
      This requires a separate error type, in addition to the one
      defined for a different reason in Section 8.1.<br>
      <br>
      <br>
      [Section 5.2.1.1.3]<br>
      <br>
      As to the definition of the measurements-format array, suggested
      changes:<br>
      <br>
      OLD:<br>
      measurements-format =3D [<br>
      =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 content-type: coap-content-format,<b=
r>
      =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 content-format: bytes .cbor measurem=
ents-body-cbor<br>
      ]<br>
      <br>
      NEW:<br>
      measurements-format =3D [<br>
      =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 content-format: uint,<br>
      =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 content: bytes .cbor measurements-bo=
dy-cbor<br>
      ]<br>
      <br>
      This still requires the defition of measurements-body-cbor ...<br>
      <br>
      <br>
      [Section 5.2.1.1.4]<br>
      <br>
      It says:<br>
      <br>
      &gt; The receiver MUST reply with an EAD item corresponding to the
      background-check model.<br>
      <br>
      Isn't such an EAD item exactly "Attestation_proposal" from Section
      5.2.1.1.1?<br>
      <br>
      =C2=A0<br>
      [Section 5.2.1.1.4]<br>
      <br>
      It says:<br>
      <br>
      &gt; The ead_value can be empty, as the ead_label serves as the
      trigger.<br>
      <br>
      and<br>
      <br>
      &gt; * ead_value =3D null<br>
      <br>
      The intended and right way is to have ead_value not present.<br>
      <br>
      <br>
      [Section 5.2.2.1.2]<br>
      <br>
      It says:<br>
      <br>
      &gt; Relying Party generates a nonce to ensure the freshness of
      the attestation result from the Verifier.<br>
      <br>
      Where is this nonce included? It is not shown in the
      Request_structure defined below or in the example in Figure 3.<br>
      <br>
      <br>
      [Section 5.2.2.1.4]<br>
      <br>
      It says:<br>
      <br>
      &gt; The receiver MUST reply with an EAD item corresponding to the
      passport model.<br>
      <br>
      Isn't such an EAD item exactly "Result_proposal" from Section
      5.2.2.1.1?<br>
      <br>
      <br>
      [Section 5.2.2.1.4]<br>
      <br>
      It says:<br>
      <br>
      &gt; The ead_value can be empty, as the ead_label serves as the
      trigger.<br>
      <br>
      and<br>
      <br>
      &gt; * ead_value =3D null<br>
      <br>
      The intended and right way is to have ead_value not present.<br>
      <br>
      <br>
      [Section 6]<br>
      <br>
      It says:<br>
      <br>
      &gt; Although there are 8 cases (IoT/Net, BG/PP, Fwd/Rev), ...<br>
      <br>
      I think you are also silently implying that:<br>
      <br>
      * Forward Message Flow means that the IoT device is the EDHOC
      Initiator, while it should just mean that the EDHOC Initiator is a
      CoAP client.<br>
      <br>
      * Reverse Message Flow means that the IoT device is the EDHOC
      Responder, while it should just mean that the EDHOC Initiator is a
      CoAP server.<br>
      <br>
      If you actually mean that, it's good to make it explicit.
      Otherwise, the cases are more, and the tuple needs to also
      indicate whether the Attester is the Initiator or the Responder.<br=
>
      <br>
      <br>
      [Section 6.1]<br>
      <br>
      The EDHOC connection identifier C_R appears for the first time
      here in Figure 1, but it is never mentioned in the text here in
      Section 6.1 or earlier in Section 5.2.1.<br>
      <br>
      I guess that the intent is to allow the Verifier to correlate an
      Attestation Proposal with a later corresponding Evidence. If so:<br=
>
      <br>
      * Is that correlation actually required? After all, Evidence comes
      back as including the Nonce that the Verifier offered together
      with the EvidenceType(s).<br>
      <br>
      * A Verifier might be contacted by multiple Network Services
      acting as Relying Party, which might accidentally be using the
      same EDHOC Connection Identifier C_R in their respective EDHOC
      sessions with different IoT devices, thus creating ambiguity at
      the Verifier.<br>
      <br>
      <br>
      [Section 10.1]<br>
      <br>
      It says:<br>
      <br>
      &gt; The ead_label =3D TBD1 corresponds to the ead_value
      Attestation_proposal in Section 5.2.1.1.1, Attestation_request in
      Section 5.2.1.1.2 and Evidence in Section 5.2.1.1.3.<br>
      <br>
      When receiving an EDHOC message with the EAD item with label
      -TBD1, how does the recipient distinguish whether it is exactly
      about Attestation_proposal, Attestation_request or Evidence?<br>
      <br>
      The inclusion in one EDHOC message or other might still be
      ambiguous, so is that based on the unique (?) structure of the
      ead_value?<br>
      <br>
      The same goes for the later definition of the ead_label TBD3.<br>
      <br>
    </font>
    <pre class=3D"moz-signature" cols=3D"72">--=20
Marco Tiloca
Ph.D., Senior Researcher

Phone: +46 (0)70 60 46 501

RISE Research Institutes of Sweden AB
Box 1263
164 29 Kista (Sweden)

Division: Digital Systems
Department: Computer Science
Unit: Cybersecurity

<a class=3D"moz-txt-link-freetext" href=3D"https://www.ri.se">https://www=
=2Eri.se</a></pre>
  </body>
</html>

--------------ET6z5rtXcdo4ysimTkpnZ7m0--

--------------Mh5euqCe0wZxPI9FOvANi9j7
Content-Type: application/pgp-keys; name="OpenPGP_0xEE2664B40E58DA43.asc"
Content-Disposition: attachment; filename="OpenPGP_0xEE2664B40E58DA43.asc"
Content-Description: OpenPGP public key
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP PUBLIC KEY BLOCK-----
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3D=3D
=3D/wXB
-----END PGP PUBLIC KEY BLOCK-----

--------------Mh5euqCe0wZxPI9FOvANi9j7--

--------------A6blk94AZ0iHJaGc2cFxgIC0--

--------------8NTgA1Ax6pxvwC7vr50zmXIJ
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature.asc"

-----BEGIN PGP SIGNATURE-----

wsB5BAABCAAjFiEEOEo4cV326Z7GypVg7iZktA5Y2kMFAmfX1DoFAwAAAAAACgkQ7iZktA5Y2kN4
CQgAsuJQ+xSGf/QmFBUqPhJbwcveVcXo+CeBKFdAY1Zv3V/bEGPqQe/NNuW7S/LhIEjNQ7ryjacK
wGVdi3Pi6C0xbEdOD6BMVryrp7bQUjrtChIn98wYj15SPBz3EnGHE62/SQ8khQv68/ak1Zw10IBv
dN9CqRKZfdCykvAInzbojSQb9cfqTKbKkAjlhPKRcXtQTr+do2w3kWNOIMU1Nj2FToaLQflPGC3h
t4rN+tc+q612P7PAjEUymA4CTC3MnAfuDrhVQ2LEVXBhCPJJP6JirDb/e9iZzzxU0nbRDuzAcvse
d5KIw2b4CNMTAmgIuu5BtLqlz9QKisj/X6ujhnjMOg==
=IzR/
-----END PGP SIGNATURE-----

--------------8NTgA1Ax6pxvwC7vr50zmXIJ--