gselander
commented
4 years ago As agreed in the meeting, we merge this and do the remaining changes on the master branch.
Closed TimothyClaeys closed 4 years ago
gselander
commented
4 years ago As agreed in the meeting, we merge this and do the remaining changes on the master branch.
This PR adds a section discussing key establishment and authentication of the EST endpoints.
Questions and remarks:
EDHOC can use several types of cryptographic material to perform authentication. Depending on the type of authentication used the Implicit TA database must be initialized with the corresponding cryptographic material (RPK, PSK or certificates). Will EST-OSCORE support all these methods or only EDHOC in combination with certificates (similar to DTLS and certificates in EST-CoAPS).
What type of key material does the TTP provide: 1) In case of PSKs, are these used directly in the OSCORE security context? 2) In case of RPKs or certificate, are these used in combination with an EDHOC exchange to derive a shared master secret?
Provisioned with PSK: directly used in OSCORE security context or use in EDHOC as authentication key?
CoAP + OSCORE = CoAPS ?