Re: [Secdispatch] EDHOC Summary

John Mattsson <john.mattsson@ericsson.com> Wed, 10 April 2019 06:59 UTC

Return-Path: <john.mattsson@ericsson.com>
X-Original-To: secdispatch@ietfa.amsl.com
Delivered-To: secdispatch@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 006FC1202B2 for <secdispatch@ietfa.amsl.com>; Tue, 9 Apr 2019 23:59:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4zl7HoFcsgpn for <secdispatch@ietfa.amsl.com>; Tue, 9 Apr 2019 23:59:11 -0700 (PDT)
Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70058.outbound.protection.outlook.com [40.107.7.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E1AE12001E for <secdispatch@ietf.org>; Tue, 9 Apr 2019 23:59:11 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=VaWDzIIfj5m5uGIOcOpjVRi0cidX8awBi5FM/48tJ2g=; b=B3easN+2ZiGhFj4E3VhQ9BRTckK35cWcJYzE8bFLYxpqTromesav0aMMbVrqoN/+hrMUZjazjS3w1vKg5o3sThdZ0fyUqC6gDTiw52A4u8Ezu220CGNEkbIMY5takg6aRwPFxArElk6tlmz+2hqiX5J0pl2oousY2Xu8TXcQ4sk=
Received: from HE1PR07MB4169.eurprd07.prod.outlook.com (20.176.166.22) by HE1PR07MB3513.eurprd07.prod.outlook.com (10.170.247.160) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1771.8; Wed, 10 Apr 2019 06:59:08 +0000
Received: from HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::d49e:f22a:1e0b:f888]) by HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::d49e:f22a:1e0b:f888%5]) with mapi id 15.20.1792.007; Wed, 10 Apr 2019 06:59:08 +0000
From: John Mattsson <john.mattsson@ericsson.com>
To: Christopher Wood <caw@heapingbits.net>, "secdispatch@ietf.org" <secdispatch@ietf.org>
Thread-Topic: [Secdispatch] EDHOC Summary
Thread-Index: AQHU70ABBpJ7sDqWOEq8H6QVKHzF1qY1GM6A
Date: Wed, 10 Apr 2019 06:59:08 +0000
Message-ID: <D7468312-88B4-4546-9D72-8895780A6DD4@ericsson.com>
References: <359EC4B99E040048A7131E0F4E113AFC01B3311A9F@marchand> <012a4798-fc70-4b5d-b0da-373221c95d38@www.fastmail.com> <721B6044-8DA1-4173-BE73-87D37136DFEE@ericsson.com> <1bfbef5a-027a-460e-b421-fb4c3a82e583@www.fastmail.com>
In-Reply-To: <1bfbef5a-027a-460e-b421-fb4c3a82e583@www.fastmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
user-agent: Microsoft-MacOutlook/10.17.1.190326
authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com;
x-originating-ip: [82.214.46.143]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: bed2a8c3-b1dd-4def-379d-08d6bd820764
x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390118)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600139)(711020)(4605104)(2017052603328)(7193020); SRVR:HE1PR07MB3513;
x-ms-traffictypediagnostic: HE1PR07MB3513:
x-microsoft-antispam-prvs: <HE1PR07MB351329EE8BF3B42B3B687C61892E0@HE1PR07MB3513.eurprd07.prod.outlook.com>
x-forefront-prvs: 00032065B2
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(396003)(376002)(366004)(39860400002)(136003)(199004)(189003)(33656002)(7736002)(106356001)(99286004)(2906002)(93886005)(305945005)(105586002)(97736004)(44832011)(6506007)(6116002)(66066001)(102836004)(53936002)(76176011)(6512007)(26005)(5660300002)(36756003)(229853002)(6246003)(58126008)(186003)(6436002)(486006)(8936002)(6486002)(2501003)(476003)(478600001)(110136005)(71200400001)(14454004)(3846002)(68736007)(14444005)(81156014)(81166006)(82746002)(256004)(316002)(86362001)(11346002)(25786009)(446003)(8676002)(83716004)(2616005)(71190400001); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3513; H:HE1PR07MB4169.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1;
received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam-message-info: sozElDCJLqMdnLT4z4zHNnsO611l30Pwx3XvbPXP7Yrc4nCfiL3Q3I11PK71BDp5z9WUuWBcsIPg0mL6fZJVx1uDv75RJZQF+17C7PiArXjUYBD1nrBeTQyHe5iUkk66NjRiv/szIVC0m/n1pwhfV5w3ShU5Jd1fAyNhKABDGQUNQuEoNf9wgNh8AfJRPfGsTWmFRczfCRGoYGVa2lo/WYsqPILazr8Nn+88VgQ9594mRMeZEQsMv9zL09m2RxBz57x8h4dZj3X1voYvI5kQ27K2E4MLlMBRPpbP2fAkJPr+X1aybMO8dyqOJZSXALuntN87ejn4Z2k7H21MbjwJMFB5N619E1W73RIa/hMAlWu+YHTyJmyWaGEQlYTPgftLhI02/JTTwWY3BQY4navQaCBNfjXe/gwkdNhFs3zZOOQ=
Content-Type: text/plain; charset="utf-8"
Content-ID: <9F669D7D7A3EFE42AC7A4F7A79D6FFC4@eurprd07.prod.outlook.com>
Content-Transfer-Encoding: base64
MIME-Version: 1.0
X-OriginatorOrg: ericsson.com
X-MS-Exchange-CrossTenant-Network-Message-Id: bed2a8c3-b1dd-4def-379d-08d6bd820764
X-MS-Exchange-CrossTenant-originalarrivaltime: 10 Apr 2019 06:59:08.4828 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3513
Archived-At: <https://mailarchive.ietf.org/arch/msg/secdispatch/cGpp5yB-kQXdc2ZLCoZt07j3YrE>
Subject: Re: [Secdispatch] EDHOC Summary
X-BeenThere: secdispatch@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Dispatch <secdispatch.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/secdispatch>, <mailto:secdispatch-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/secdispatch/>
List-Post: <mailto:secdispatch@ietf.org>
List-Help: <mailto:secdispatch-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/secdispatch>, <mailto:secdispatch-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 10 Apr 2019 06:59:14 -0000

Hi Chris,

Christopher Wood <caw@heapingbits.net> wrote:

>If what’s missing is a lightweight AKE protocol, then shouldn’t the purpose of this WG be to first identify what >lightweight means? To reiterate (my understanding of) Martin’s point, it seems the requirements do not have >consensus, and therefore choosing a specific AKE is a bit premature. It seems prudent to first get a shared >understanding of the problem space and requirements before we trim the solution space.
 
The use cases and requirements for lightweight protocols including lightweight security protocols for constrained IoT have been discussed for years in the IETF IoT working groups (CORE, ACE, T2TRG, 6TiSCH, LWIG, LPWAN, 6lo, etc.). IESG took the decision a few year ago that IETF WGs should in general not do requirement and use case RFCs. RFC7228 (and RFC7228bis) gives an excellent overview of the wide span of IoT devices and networks and how utterly constrained some of them are. For the target network technologies LPWAN over LoRaWAN and 6TiSCH over IEEE 802.15.4, the requirements for message size are clear (under 50 bytes).

Cheers,
John