[Lake] EDHOC implementation status

"Sipos, Brian J." <Brian.Sipos@jhuapl.edu> Tue, 28 January 2025 14:20 UTC

Return-Path: <Brian.Sipos@jhuapl.edu>
X-Original-To: lake@ietfa.amsl.com
Delivered-To: lake@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 20A88C180B71 for <lake@ietfa.amsl.com>; Tue, 28 Jan 2025 06:20:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.104
X-Spam-Level:
X-Spam-Status: No, score=-2.104 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, RCVD_IN_ZEN_BLOCKED_OPENDNS=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=jhuapl.edu
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kHJX5_5OWspv for <lake@ietfa.amsl.com>; Tue, 28 Jan 2025 06:20:13 -0800 (PST)
Received: from aplegw03.jhuapl.edu (aplegw03.jhuapl.edu [128.244.208.131]) by ietfa.amsl.com (Postfix) with ESMTP id DA9D7C14CF13 for <lake@ietf.org>; Tue, 28 Jan 2025 06:20:12 -0800 (PST)
Received: from pps.filterd (aplegw03.jhuapl.edu [127.0.0.1]) by aplegw03.jhuapl.edu (8.18.1.2/8.18.1.2) with ESMTP id 50SEI6qb199248 for <lake@ietf.org>; Tue, 28 Jan 2025 09:20:11 -0500
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jhuapl.edu; h=content-type : date : from : message-id : mime-version : subject : to; s=JHUAPL2024; bh=XAgGlnfiz/+CMhJMlWzyg7KfcTUhAZhnMx1I4A+2xfY=; b=AR1sE6Ujq+RkrhkMNW32UeM9ZhG+M03em3ZbBOhJ7XXtKyN+qw450Wuk7rlq7Vq322e2 1BsHJaQS/beMGq44ZWEqdx7Lj/kHYEhZef4nmRwLbkaPETwzlx9IlgzHTiUbFGHHSB9m 20XIfQs05xA1vg7i8ybEyVTpbAM19kdhOKd1dcD15X2D6rmWAnb+gLqYNnNUaajCYy+y kBYiaiPN3TVuHbjpbeYYFMGNWhbeFmGlfKQduKm5WTX7bghMGfht4oZKWyyQp6CYzovT TE4ckdjUp7xoifTxdAlEfnPqsYbS+Jmter5P7y6T76sNJLzQ7v117G0kqvHwwuQdBbbs /A==
Received: from aplex29.dom1.jhuapl.edu (aplex29.dom1.jhuapl.edu [10.114.162.14]) by aplegw03.jhuapl.edu (PPS) with ESMTPS id 44df0dj9q6-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <lake@ietf.org>; Tue, 28 Jan 2025 09:20:11 -0500
Received: from APLEX21.dom1.jhuapl.edu (10.114.162.6) by APLEX29.dom1.jhuapl.edu (10.114.162.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.14; Tue, 28 Jan 2025 09:20:10 -0500
Received: from APLEX21.dom1.jhuapl.edu ([fe80::20d7:9545:f01e:9b2]) by APLEX21.dom1.jhuapl.edu ([fe80::20d7:9545:f01e:9b2%5]) with mapi id 15.02.1544.014; Tue, 28 Jan 2025 09:20:10 -0500
From: "Sipos, Brian J." <Brian.Sipos@jhuapl.edu>
To: "lake@ietf.org" <lake@ietf.org>
Thread-Topic: EDHOC implementation status
Thread-Index: AdtxhftuR1P+pn7FSMuCEqAGNCiXnA==
Date: Tue, 28 Jan 2025 14:20:10 +0000
Message-ID: <826d246421234cc7a8c880b2faf0a63b@jhuapl.edu>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [10.114.162.19]
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="SHA1"; boundary="----=_NextPart_000_0018_01DB7165.D02346D0"
MIME-Version: 1.0
X-CrossPremisesHeadersFilteredBySendConnector: APLEX29.dom1.jhuapl.edu
X-OrganizationHeadersPreserved: APLEX29.dom1.jhuapl.edu
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1057,Hydra:6.0.680,FMLib:17.12.68.34 definitions=2025-01-28_04,2025-01-27_01,2024-11-22_01
Message-ID-Hash: XVWBKQPT6KZ2SIZ3WFVXBPCXIPVYWBB3
X-Message-ID-Hash: XVWBKQPT6KZ2SIZ3WFVXBPCXIPVYWBB3
X-MailFrom: Brian.Sipos@jhuapl.edu
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Lake] EDHOC implementation status
List-Id: Lightweight Authenticated Key Exchange <lake.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/lake/TwgDKevz2L7UqDbZDlAI1zc-TAg>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lake>
List-Help: <mailto:lake-request@ietf.org?subject=help>
List-Owner: <mailto:lake-owner@ietf.org>
List-Post: <mailto:lake@ietf.org>
List-Subscribe: <mailto:lake-join@ietf.org>
List-Unsubscribe: <mailto:lake-leave@ietf.org>

WG,

I am working on an embedding of EDHOC into a larger protocol, and very much
appreciate the design decisions which easily enable its embedding. Part of
my work is to validate the embedding with some examples and I would like to
base them off of the examples from RFC 9529 [1] for simplicity. In searching
for existing implementations I came across py-edhoc [2] and lakers [3] (with
its C and Python APIs). It appears that these are both based on earlier
draft revisions, behind the published EDHOC RFC, and seem to lack support
for some/many of the currently defined ciphersuites (specifically those for
less-constrained devices).

 

Is there any motivation for updating the Python-native implementation [2]
from others in the group (or elsewhere)?

I know I can always fork and edit myself but I'd rather only touch source
that is expected to have a longer lifetime than just my example generator
tooling.

 

Thanks for any info,

Brian S.

 

[1] https://www.rfc-editor.org/rfc/rfc9529.html

[2] https://github.com/openwsn-berkeley/py-edhoc

[3] https://github.com/openwsn-berkeley/lakers