Re: [Secdispatch] EDHOC Summary

[Hannes Tschofenig <[e-mail]>]

Hi Goeran,

Do you notice there is a difference between

"the AKE should support the same transport as OSCORE"

and

"The key exchange protocol must at least be able to travel the same path."

Ignoring the difference between the 'should' and the 'must' I wonder whether I could run a DTLS/TLS handshake between the two endpoints and then derive keys for OSCORE and whether that would still be OK in your view.

Ciao
Hannes

-----Original Message-----
From: Göran Selander <[e-mail]>
Sent: Donnerstag, 18. April 2019 17:08
To: Hannes Tschofenig <[e-mail]>; Owen Friel (ofriel) <[e-mail]>; Richard Barnes <[e-mail]>; Michael Richardson <[e-mail]>
Cc: Carsten Bormann <[e-mail]>; [e-mail]; Martin Thomson <[e-mail]>
Subject: Re: [Secdispatch] EDHOC Summary



On 2019-04-18, 16:55, "Hannes Tschofenig" <[e-mail]> wrote:

    Hi Goeran,

    > [GS] The context is this: OSCORE is deployed over a number of hops with different transports. The key exchange protocol must at least be able to travel the same path.

    This is now a different requirement than stated previously. We are making progress.

[GS] No, this is the requirement "the AKE should support the same transport as OSCORE". That does not exclude that the AKE supports other transport.

Göran


IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.