IETF Logo Mail Archive

[Lake] Re: Preparing EDHOC-PSK for WGLC

John Mattsson <john.mattsson@ericsson.com> Tue, 09 June 2026 10:41 UTC

Return-Path: <john.mattsson@ericsson.com>
X-Original-To: lake@mail2.ietf.org
Delivered-To: lake@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id 55DC9FDF728A for <lake@mail2.ietf.org>; Tue, 9 Jun 2026 03:41:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1781001690; bh=y/8I0NzmcJE+VDhlQVL+yEEugHssuO03XzqEWVnCr64=; h=From:To:CC:Subject:Date:References:In-Reply-To; b=Q86F8DA/rkvhRN3efihKVH2Gg9yMzmsMUuM6MUxgVXklkJnetSo6dVzuE2OM+R1sG V7lxVIzqiHXSQh1xqrF2jvi8vf6+07zNtEM8xjjxlOju2Mlih25C22brGs5XNiuLPK 0DULiOTcNrRoBPkmJoDeRKtjqJWFvsNSD9uKhExk=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.096
X-Spam-Level:
X-Spam-Status: No, score=-2.096 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=ericsson.com
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rTWIUgtgMWe4 for <lake@mail2.ietf.org>; Tue, 9 Jun 2026 03:41:29 -0700 (PDT)
Received: from DU2PR03CU002.outbound.protection.outlook.com (mail-northeuropeazon11011059.outbound.protection.outlook.com [52.101.65.59]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id AC11CFDF7283 for <lake@ietf.org>; Tue, 9 Jun 2026 03:41:29 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Wrberi78jda0WBDLTkmCt749orfS4NgzH2RT2YZZzYVRUWTf7cm8HsFXW+7UDkRN+1vVy72gI9aD/5eb0CaExiVZo8qf8P+ba2T/o2WC7WuzQnO9RfC+JAGmOel8UxkEaEePIloUm7APgbkghN0STZpPLP7RxiksKQIZ62dyebbO7PPt+0EQijZzinKL4/nT9iHeIDUdbyf8w3FiIcVBlyKGWS3nVUbxbZRDgdLJZ+qR4+4PzZPUsUb/dT3OhfMrSFGWJu1aeLgZ2J2DItirCBayGgbdp22ziBnI280yDbPXt22zZnTXlQiiWPdonKqomES+Ux9BiRbBoKxmautfbA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=y/8I0NzmcJE+VDhlQVL+yEEugHssuO03XzqEWVnCr64=; b=TtNAA2SkTtVGJwE2oG8qV9CAxaz85zq7HL/J8JafgohEy6nb9Mb0b+7C+LNRxGzExfroR77TZYginwRzdwlGVksr3AqWUkXoA2txBwmb1CyaDOuKw1XGfKYU3eUrlO4ZfTfFWwz2Og3ZoTCqPd53QrpgKaq/h5CiPaM0GDBqIXxEdMHa0vAR5RGpOHH3Cv4XgxL9AVKRyGa1uUtyTHNBSLsZW8Is2ogc3orBGY9OE5UkGymaO38mZZoEJ+rjm98+SfbeDjIASzo6z2437uNh5y18sCs4Z7Y/QMjCCn9nDdM9IE78ExAcfGwsc3sBeDvszRlnqrgreMrpN+ZWK1CuLg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=y/8I0NzmcJE+VDhlQVL+yEEugHssuO03XzqEWVnCr64=; b=pvCONQhfe3o+LIez0C7BFGScgVt1JBqf6hsdaJSa1W31W3bAPvKkEjr8BPVxP31Cx+vTlw9TQcCcrwc8ROcOG9m7gpc3vbe3ROA58eWXN9W4FH3RAPhp7ELJwYLzXyLMKHfg0mnj8DSSEmFi11eLD9PHiDaqLb4LBxKygBbRSCPlvyTJV+OLcuG/fgthC8fp1uY358VaeUaIyI7cH5j8LOxg1XwF1IbPkNXt0TQgwXPX+osF0NJyDV2EtTyv1DAHDgrp3/0MncrI8dVPduSXZ7tHRaP4zyZUNW7BQRaq34mVQTclrcejiG63FQvxeunP7Ng4bvC3VLjlETqXggeLSw==
Received: from AS4PR07MB8825.eurprd07.prod.outlook.com (2603:10a6:20b:4f3::15) by AS1PR07MB8525.eurprd07.prod.outlook.com (2603:10a6:20b:4db::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.92.14; Tue, 9 Jun 2026 10:41:22 +0000
Received: from AS4PR07MB8825.eurprd07.prod.outlook.com ([fe80::11a4:5f37:fa92:f174]) by AS4PR07MB8825.eurprd07.prod.outlook.com ([fe80::11a4:5f37:fa92:f174%6]) with mapi id 15.21.0092.011; Tue, 9 Jun 2026 10:41:22 +0000
From: John Mattsson <john.mattsson@ericsson.com>
To: Elsa Lopez Perez <elsa.lopez-perez@inria.fr>, Clement Papon <clement.papon@unilim.fr>, "Brian.Sipos@jhuapl.edu" <Brian.Sipos@jhuapl.edu>
Thread-Topic: [Lake] Re: Preparing EDHOC-PSK for WGLC
Thread-Index: AQHc8duObzPEuewr1kaBudsnZXtmYLYp/NoQgAFkXZh7KCuFV/wwC2sAgAFi7gg=
Date: Tue, 09 Jun 2026 10:41:21 +0000
Message-ID: <AS4PR07MB8825B227A25CC2BE78D84443891D2@AS4PR07MB8825.eurprd07.prod.outlook.com>
References: <AS4PR07MB8825B34EDE9E9E9525ACDFB489152@AS4PR07MB8825.eurprd07.prod.outlook.com> <8ae34efdcdda4554a9a0ee9a913fee36@jhuapl.edu> <AS4PR07MB8825609391DC2C40AF9D65D589122@AS4PR07MB8825.eurprd07.prod.outlook.com> <1421721086.6244682.1780871741296.JavaMail.zextras@unilim.fr> <0b65f401-510c-46ae-aa9e-1d879d51a517@inria.fr>
In-Reply-To: <0b65f401-510c-46ae-aa9e-1d879d51a517@inria.fr>
Accept-Language: en-US
Content-Language: en-GB
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-reactions: allow
authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=ericsson.com;
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: AS4PR07MB8825:EE_|AS1PR07MB8525:EE_
x-ms-office365-filtering-correlation-id: 5441bbb1-578e-4ece-7311-08dec613a5bc
x-ms-exchange-senderadcheck: 1
x-ms-exchange-antispam-relay: 0
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|376014|38070700021|56012099006|11063799006|4143699003|22082099003|18002099003|13003099007|8096899003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS4PR07MB8825.eurprd07.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(38070700021)(56012099006)(11063799006)(4143699003)(22082099003)(18002099003)(13003099007)(8096899003);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/alternative; boundary="_000_AS4PR07MB8825B227A25CC2BE78D84443891D2AS4PR07MB8825eurp_"
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AS4PR07MB8825.eurprd07.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: 5441bbb1-578e-4ece-7311-08dec613a5bc
X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Jun 2026 10:41:21.9820 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: qKMD4Bs6LP2en3zuJNBqeeA1GkpIQx9dSfniyCG0sCo1VB5AUEdNijDrLta4TTExgwxf8pMWgCeh0/Bh3P588QXgSA1pjY5tDU455qWIEco=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS1PR07MB8525
Message-ID-Hash: UZLK62VTXVDN2R7GXQE6GRHRE57LZ3UN
X-Message-ID-Hash: UZLK62VTXVDN2R7GXQE6GRHRE57LZ3UN
X-MailFrom: john.mattsson@ericsson.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: lake <lake@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [Lake] Re: Preparing EDHOC-PSK for WGLC
List-Id: Lightweight Authenticated Key Exchange <lake.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/lake/u-nGiO2iiA7LJxONsb0rZT2ICEE>
List-Archive: <https://mailarchive.ietf.org/arch/browse/lake>
List-Help: <mailto:lake-request@ietf.org?subject=help>
List-Owner: <mailto:lake-owner@ietf.org>
List-Post: <mailto:lake@ietf.org>
List-Subscribe: <mailto:lake-join@ietf.org>
List-Unsubscribe: <mailto:lake-leave@ietf.org>

Hi,

I think all of the technical details discussed in this thread have already been handled in the issue and the RRs. The PRs already removes “stronger” and “weaker” and the hash association PR #45 changes the rPRK length to hash_length.
https://github.com/lake-wg/psk/issues/49
https://github.com/lake-wg/psk/pull/46
https://github.com/lake-wg/psk/pull/45

I think the hash association has simpler security reasoning. The benefits with cipher suite association would be (in some cases) smaller keys. So far I think the flexibility of hash association seems most convincing. Irrespectively if you use a long-term external PSK or a long-term chain of resumption PSKs, you can upgrade from ECDHE to ML-KEM, from AES-128 to AES-256/ChaCha20, or from CNSA 1.0 to CNSA 2.0. My current feeling is should go with hash association and merge #45. That also aligns with TLS 1.3 which might simplify things and might reduce the need to explain things.

Cheers,
John Preuß Mattsson

v2.46.0 | Report a Bug | By Email | System Status