EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 41
Abstract: Enrollment over Secure Transport (EST) is used as a certificate provisioning protocol over HTTPS. Low-resource devices often use the lightweight Constrained Application Protocol (CoAP) for message exchanges. This document defines how to transport EST payloads over secure CoAP (EST-coaps), which allows constrained devices to use existing EST functionality for provisioning certificates.
Publication Date: 2022-04-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9148
Link: https://doi.org/10.17487/RFC9148
Author(s): Peter Van der Stok
Panos Kampanakis
Michael Richardson
Shahid Raza

Latest version of IETF RFC 9148

Document Versions — IETF RFC 9148

▶ IETF RFC 9148 (2022-04-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

IETF RFC 9908 [Active*]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 2585 [Active*]
IETF RFC 5246 [Superseded*]
IETF RFC 5958 [Active*]
IETF RFC 5967 [Active*]
IETF RFC 6347 [Superseded*]
IETF RFC 6690 [Active*]
IETF RFC 7030 [Active*]
IETF RFC 7252 [Active*]
IETF RFC 7925 [Active*]
IETF RFC 7959 [Active*]
IETF RFC 8075 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 8422 [Superseded*]
IETF RFC 8446 [Superseded*]
IETF RFC 8551 [Active*]
RFC8710 — RFC8710 EXTERNAL
IETF RFC 9147 [Active*]

Bibliographic Reference(s)

10.1109-SP.2014.14 — TRIPLE-HS EXTERNAL
IEEE.STD802.15.4.2020 — IEEE802.15.4 EXTERNAL
IETF.draft-ietf-kitten-tls-channel-bindings-for-tls13-15 — I-D.ietf-kitten-tls-channel-bindings-for-tls13 EXTERNAL
IETF.draft-moskowitz-ecdsa-pki-10 — I-D.moskowitz-ecdsa-pki EXTERNAL
Heninger, N., Durumeric, Z., Wustrow, E., and J. Alex Halderman, "Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices", USENIX Security Symposium 2012, ISBN 978-931971-95-9, August 2012. EXTERNAL
IANA, "Constrained RESTful Environments (CoRE) Parameters", <https://www.iana.org/assignments/core-parameters/>. EXTERNAL
IEEE, "IEEE Standard for Local and metropolitan area networks - Secure Device Identity", December 2009. EXTERNAL
Bernstein, D., Chang, Y., Cheng, C., Chou, L., Heninger, N., Lange, T., and N. Someren, "Factoring RSA keys from certified smart cards: Coppersmith in the wild", Advances in Cryptology - ASIACRYPT 2013, August 2013. EXTERNAL
IETF RFC 4919 [Active*]
IETF RFC 5272 [Superseded*]
IETF RFC 5929 [Active*]
IETF RFC 6402 [Superseded*]
IETF RFC 7228 [Active*]
IETF RFC 7230 [Superseded*]
IETF RFC 7251 [Active*]
RFC7299 — RFC7299 EXTERNAL
IETF RFC 7525 [Superseded*]
IETF RFC 7627 [Superseded*]
IETF RFC 7748 [Active*]
IETF RFC 9146 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9148.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9148, EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol. Available at https://doi.org/10.17487/RFC9148

Snippet:

IETF RFC 9148, EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol. Available at https://doi.org/10.17487/RFC9148

HTML (ISO 690 compliant)

Preview:

IETF RFC 9148, EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol. Available at https://doi.org/10.17487/RFC9148

Snippet:

<span class="citation"><cite>IETF RFC 9148</cite>, EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol. Available at <a href="https://doi.org/10.17487/RFC9148" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9148</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9148, EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol
doi: 10.17487/RFC9148
url: https://doi.org/10.17487/RFC9148

Snippet:

<li>
<cite id="bib-rfc9148">IETF RFC 9148</cite>, EST-coaps: Enrollment over Secure Transport with the Secure Constrained Application Protocol
<span class="doi">10.17487/RFC9148</span>
</li>

Referenced By

IETF RFC 9908 [Active*]