This PR adds a section discussing key establishment and authentication of the EST endpoints.
Questions and remarks:
EDHOC can use several types of cryptographic material to perform authentication. Depending on the type of authentication used the Implicit TA database must be initialized with the corresponding cryptographic material (RPK, PSK or certificates). Will EST-OSCORE support all these methods or only EDHOC in combination with certificates (similar to DTLS and certificates in EST-CoAPS).
What type of key material does the TTP provide: 1) In case of PSKs, are these used directly in the OSCORE security context? 2) In case of RPKs or certificate, are these used in combination with an EDHOC exchange to derive a shared master secret?
Provisioned with PSK: directly used in OSCORE security context or use in EDHOC as authentication key?
This PR adds a section discussing key establishment and authentication of the EST endpoints.
Questions and remarks:
EDHOC can use several types of cryptographic material to perform authentication. Depending on the type of authentication used the Implicit TA database must be initialized with the corresponding cryptographic material (RPK, PSK or certificates). Will EST-OSCORE support all these methods or only EDHOC in combination with certificates (similar to DTLS and certificates in EST-CoAPS).
What type of key material does the TTP provide: 1) In case of PSKs, are these used directly in the OSCORE security context? 2) In case of RPKs or certificate, are these used in combination with an EDHOC exchange to derive a shared master secret?
Provisioned with PSK: directly used in OSCORE security context or use in EDHOC as authentication key?
CoAP + OSCORE = CoAPS ?