[Lake] Re: New Version Notification for draft-selma-lake-additional-messages-00.txt

Göran Selander <goran.selander@ericsson.com> Tue, 03 November 2026 08:52 UTC

Received: from DU2PR03CU002.outbound.protection.outlook.com (mail-northeuropeazlp170110003.outbound.protection.outlook.com [IPv6:2a01:111:f403:c200::3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange secp256r1 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by mx.ietf.org (Postfix) with ESMTPS id 95BCF46 for <lake@ietf.org>; Tue, 03 Nov 2026 08:52:21 +0000 (UTC)
Authentication-Results: mx.ietf.org; dkim=pass header.d=ericsson.com header.s=selector2 header.b=arFCEk4z; spf=pass (mx.ietf.org: domain of goran.selander@ericsson.com designates 2a01:111:f403:c200::3 as permitted sender) smtp.mailfrom=goran.selander@ericsson.com; dmarc=pass (policy=reject) header.from=ericsson.com; arc=pass ("microsoft.com:s=arcselector10001:i=1")
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=HFfgKNhNGC95nMowk5bmpMTcShMcDl6DlV+YDEVI1SgfjSE6JrbVTUubYiFVeQTgABFaYwzU3DrcY4xBconMWEuLCMZf+gwTugSv4Bn6no23mbqhyI6xvdwFUzhVvi9cWsZ8FSB/+7QccMdc6Qze+DvdtQ1MhnAb/LvJ2bOHw2BP8402tm74zYVQSVtp6x8Ndug8ulFwpsIGtfIjXQhfsyyjskxVc7OyZTl/XHIUWM63BuOylavLe89nKYAM51WEpjXiMo51R1lEVYyb0OVu7LHNVnWrxCNy2RCqfto0dLoJhnfc+LUdQAevpIz8BqRhyDHzzH3r1hT8brXwyioyug==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=J9j8gRWZdhAnEFI5T81ttA+4AR/VriLrmv128tJVN60=; b=IYA6BTpt/wWqNz0V/zfZRNWzRqi2rzujazJGiYm4KwlHGDcGj2Oz5z7GhxdHWOAmkWq/mv/keoJ8ts4YHb3vmOx4sE0S7IeYiYxl/YyvDBubkHIxcnej1HBn/g5O6cXDAw8hxGTAUaLlWZvNuu+aMzRjuFf89GBWRNz8+RPtr5yYGFpzXdu264YD83Dvs/PH5ZZXEgHXhIiEvM5z5h2Nf6Qm5A9xsyjlldN8U7RDM+rF1/j1T2d9LX3C9Lt+tFyp0R8uie8El3rFc8peFJ5I4cSOAG2arBMBJE2XV6cg2RouZpC11KXJEMAy2l7NvaT+bwbYLhpqH4EHil5CN/OCIA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=J9j8gRWZdhAnEFI5T81ttA+4AR/VriLrmv128tJVN60=; b=arFCEk4zIoOOHhV083TCKorXzPdusyOEHD8d2KYgci+kgng0cy1WXYfV5RHV5ZeV2Xy7Av6ygucDnQi1aubGD+Q6NRayY0XEklgtBMp6B7r2AKLsawVJ7+wKzv867Wc+vqC9q84yz2eV0NSFGBYDq0Lmosk4Hd90uJvLkzX4SLzCvTluBxwGnoAYAKT3tw6wJ+GfE4j+BwT6FvoRKZyasZsoJSwMGbeUcnh/GqJn+iUI7eW/w3rCgtlR/VpF0LqAvI2MkwR0a4e9nGOTJA/ZMJ3OfxKPsqR+rFaqZ5BpQu3CEtS7AghPtTh20tbWsCYB/9LVtrfcijIfDgYdOv5HUg==
Received: from AS1PR07MB8477.eurprd07.prod.outlook.com (2603:10a6:20b:4df::14) by PA1PR07MB11350.eurprd07.prod.outlook.com (2603:10a6:102:554::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.569.12; Tue, 3 Nov 2026 08:52:19 +0000
Received: from AS1PR07MB8477.eurprd07.prod.outlook.com ([fe80::c30e:d3d9:b753:66d7]) by AS1PR07MB8477.eurprd07.prod.outlook.com ([fe80::c30e:d3d9:b753:66d7%2]) with mapi id 15.21.0592.007; Tue, 3 Nov 2026 08:52:19 +0000
From: Göran Selander <goran.selander@ericsson.com>
To: lake <lake@ietf.org>
Thread-Topic: New Version Notification for draft-selma-lake-additional-messages-00.txt
Thread-Index: AQHdawdqW9I7lHfgl0OJ0jlKYKqO17ccBYNz
Date: Tue, 03 Nov 2026 08:52:19 +0000
Message-ID: <AS1PR07MB8477312D09BA309D5EE32C30F4692@AS1PR07MB8477.eurprd07.prod.outlook.com>
References: <179365074276.1095944.16076559212717328964@dt-datatracker-7dc874ff8f-5wfjq>
In-Reply-To: <179365074276.1095944.16076559212717328964@dt-datatracker-7dc874ff8f-5wfjq>
Accept-Language: en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: AS1PR07MB8477:EE_|PA1PR07MB11350:EE_
x-ms-office365-filtering-correlation-id: f0fd1e4d-5c8e-409d-4736-08df3987c4c0
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|23010399003|10070799003|366016|376014|1800799024|261021130227099003|261021121427099003|261021123027099003|261021133027099003|261022105027099003|261022113327099003|261022115727099003|261021135927099003|261022075727099003|261009223027099003|38070700021|261026130827099003|261026140227099003|261026121527099003|261026135527099003|261028144727099003|11063799006|56012099006|22082099003|18002099003|261102123227099003|6133799003|13003099007|10067099003|8096899003|4133799003|3023799007|261102130727099003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS1PR07MB8477.eurprd07.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(10070799003)(366016)(376014)(1800799024)(261021130227099003)(261021121427099003)(261021123027099003)(261021133027099003)(261022105027099003)(261022113327099003)(261022115727099003)(261021135927099003)(261022075727099003)(261009223027099003)(38070700021)(261026130827099003)(261026140227099003)(261026121527099003)(261026135527099003)(261028144727099003)(11063799006)(56012099006)(22082099003)(18002099003)(261102123227099003)(6133799003)(13003099007)(10067099003)(8096899003)(4133799003)(3023799007)(261102130727099003);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 2
x-ms-exchange-antispam-messagedata-0: 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
x-ms-exchange-antispam-messagedata-1: +g1EU1n5JINY04h45vVDXsZcPBzFgKIDnua50geRenMMc1CfygwqFSfY
Content-Type: multipart/alternative; boundary="_000_AS1PR07MB8477312D09BA309D5EE32C30F4692AS1PR07MB8477eurp_"
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AS1PR07MB8477.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: f0fd1e4d-5c8e-409d-4736-08df3987c4c0
X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Nov 2026 08:52:19.3944 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: XW0et9iLzaApaZpmgESCOLlBgEE+G9RuTDaPbvrtJAtxRmricvLTWtngG3Na4PtWnGiNNJJUnwSuvUhOyqbqcYdTwQehC8kFW0Kq4aeJuEo=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA1PR07MB11350
X-Spamd-Bar: ---------------------
Message-ID-Hash: QDCI2Y6RHY5Y5NAJ6AUZTFSIB3GC67IH
X-Message-ID-Hash: QDCI2Y6RHY5Y5NAJ6AUZTFSIB3GC67IH
X-MailFrom: goran.selander@ericsson.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: John Mattsson <john.mattsson@ericsson.com>
X-Mailman-Version: 3.3.10
Precedence: list
Subject: [Lake] Re: New Version Notification for draft-selma-lake-additional-messages-00.txt
List-Id: Lightweight Authenticated Key Exchange <lake.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/lake/tdeZgBw1drWnKhVRD9IPcBlGUXk>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lake>
List-Help: <mailto:lake-request@ietf.org?subject=help>
List-Owner: <mailto:lake-owner@ietf.org>
List-Post: <mailto:lake@ietf.org>
List-Subscribe: <mailto:lake-join@ietf.org>
List-Unsubscribe: <mailto:lake-leave@ietf.org>

Hi,

We uploaded a new draft on generic additional messages for LAKE/EDHOC, beyond those defined by the method.

This supports, for example, use cases when there is a need to carry additional External Authorization Data (EAD) or to convey protected success indications when required by method or deployment, such as when using EAP.

The construction is straightforward: same format as message_4 in RFC 9528 but encrypted with keys derived from the final exporter.

Comments are most welcome!

Can we have a short slot on the IETF 127 agenda, for presentation and potential discussion?

Göran


From: internet-drafts@ietf.org <internet-drafts@ietf.org>
Date: Monday, 2 November 2026 at 21:19
To: Göran Selander <goran.selander@ericsson.com>; John Mattsson <john.mattsson@ericsson.com>;
Subject: New Version Notification for draft-selma-lake-additional-messages-00.txt

A new version of Internet-Draft draft-selma-lake-additional-messages-00.txt
has been successfully submitted by Göran Selander and posted to the
IETF repository.

Name:     draft-selma-lake-additional-messages
Revision: 00
Title:    Additional Messages in Lightweight Authenticated Key Exchange (LAKE)
Date:     2026-11-02
Group:    Individual Submission
Pages:    16
URL:      https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Farchive%2Fid%2Fdraft-selma-lake-additional-messages-00.txt&data=05%7C02%7Cgoran.selander%40ericsson.com%7Cde56150299224a8cc56808df391e8a8c%7C92e84cebfbfd47abbe52080c6b87953f%7C0%7C0%7C639292475480730897%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=U6mNC1yM3QTiUz4FKkU2xAjf4GgjEVxxWhHcMlZHTSU%3D&reserved=0<https://www.ietf.org/archive/id/draft-selma-lake-additional-messages-00.txt>
Status:   https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-selma-lake-additional-messages%2F&data=05%7C02%7Cgoran.selander%40ericsson.com%7Cde56150299224a8cc56808df391e8a8c%7C92e84cebfbfd47abbe52080c6b87953f%7C0%7C0%7C639292475480758434%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=sIj4ZF%2FgWXL63zJlpEHlKNP2vYyGlnhRy99eTHj6nvE%3D&reserved=0<https://datatracker.ietf.org/doc/draft-selma-lake-additional-messages/>
HTML:     https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ietf.org%2Farchive%2Fid%2Fdraft-selma-lake-additional-messages-00.html&data=05%7C02%7Cgoran.selander%40ericsson.com%7Cde56150299224a8cc56808df391e8a8c%7C92e84cebfbfd47abbe52080c6b87953f%7C0%7C0%7C639292475480778385%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=uiH1yo2Wy25R%2FaHHVpHZyuzz5bHlihpqWVIX3LKQ1Pk%3D&reserved=0<https://www.ietf.org/archive/id/draft-selma-lake-additional-messages-00.html>
HTMLized: https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fhtml%2Fdraft-selma-lake-additional-messages&data=05%7C02%7Cgoran.selander%40ericsson.com%7Cde56150299224a8cc56808df391e8a8c%7C92e84cebfbfd47abbe52080c6b87953f%7C0%7C0%7C639292475480797477%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=LtZsi7kzebg51jJ67oS8E9M%2BId%2F%2Fr21Obcc4kkPjcGc%3D&reserved=0<https://datatracker.ietf.org/doc/html/draft-selma-lake-additional-messages>


Abstract:

   The Lightweight Authenticated Key Exchange (LAKE) protocol supports
   methods with different numbers of messages and different security
   properties.  The methods defined in the original specification, RFC
   9528, consist of three mandatory messages and an optional fourth
   message.  This document defines a generic mechanism for additional
   protected messages, message_n, where n is greater than the highest
   message number defined for the method in use.  The format of each
   message_n is identical to that of message_4 in RFC 9528, except that
   its encryption key and initialization vector are derived using the
   LAKE_Exporter.  This mechanism allows applications to include any
   number of additional protected messages in a LAKE session, for
   example, to carry additional External Authorization Data (EAD) and to
   convey protected success indications when required by a method or
   deployment, such as EAP-LAKE.  This document updates RFC 9528.



The IETF Secretariat