Ephemeral Diffie-Hellman Over COSE (EDHOC)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 82
Abstract: This document specifies Ephemeral Diffie-Hellman Over COSE (EDHOC), a very compact and lightweight authenticated Diffie-Hellman key exchange with ephemeral keys. EDHOC provides mutual authentication, forward secrecy, and identity protection. EDHOC is intended for usage in constrained scenarios, and a main use case is to establish an Object Security for Constrained RESTful Environments (OSCORE) security context. By reusing CBOR Object Signing and Encryption (COSE) for cryptography, Concise Binary Object Representation (CBOR) for encoding, and Constrained Application Protocol (CoAP) for transport, the additional code size can be kept very low.
Publication Date: 2024-03-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9528
Link: https://doi.org/10.17487/RFC9528
Author(s): Göran Selander
John Preuß Mattsson
Francesca Palombini
Keyword(s): AKE, LAKE, COSE, OSCORE, Constrained-node Network, IoT Security

Latest version of IETF RFC 9528

Document Versions — IETF RFC 9528

▶ IETF RFC 9528 (2024-03-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 3279 [Active*]
IETF RFC 3552 [Active*]
IETF RFC 5116 [Active*]
IETF RFC 5869 [Active*]
IETF RFC 6090 [Active*]
IETF RFC 6960 [Active*]
IETF RFC 6979 [Active*]
IETF RFC 7252 [Active*]
IETF RFC 7748 [Active*]
IETF RFC 7959 [Active*]
IETF RFC 8126 [Active*]
IETF RFC 8174 [Active*]
IETF RFC 8392 [Active*]
IETF RFC 8410 [Active*]
IETF RFC 8610 [Active*]
IETF RFC 8613 [Active*]
IETF RFC 8724 [Active*]
IETF RFC 8742 [Active*]
IETF RFC 8747 [Active*]
IETF RFC 8949 [Active*]
IETF RFC 9052 [Active*]
IETF RFC 9053 [Active*]
IETF RFC 9175 [Active*]
IETF RFC 9360 [Active*]

Bibliographic Reference(s)

10.1109-IEEESTD.2016.7460875 — IEEE.802.15.4 EXTERNAL
IETF.draft-arkko-arch-internet-threat-model-guidance-00 — Internet Threat Model Guidance EXTERNAL
IETF.draft-ietf-core-oscore-edhoc-10 — I-D.ietf-core-oscore-edhoc EXTERNAL
IETF.draft-ietf-core-oscore-key-update-07 — I-D.ietf-core-oscore-key-update EXTERNAL
IETF.draft-ietf-cose-cbor-encoded-cert-09 — I-D.ietf-cose-cbor-encoded-cert EXTERNAL
IETF.draft-ietf-iotops-security-protocol-comparison-04 — I-D.ietf-iotops-security-protocol-comparison EXTERNAL
IETF.draft-ietf-lake-authz-01 — I-D.ietf-lake-authz EXTERNAL
IETF.draft-ietf-lake-reqs-04 — I-D.ietf-lake-reqs EXTERNAL
IETF.draft-ietf-lwig-curve-representations-23 — I-D.ietf-lwig-curve-representations EXTERNAL
IETF.draft-ietf-rats-eat-25 — I-D.ietf-rats-eat EXTERNAL
IETF.draft-irtf-cfrg-det-sigs-with-noise-02 — I-D.irtf-cfrg-det-sigs-with-noise EXTERNAL
NIST.SP.800-56Ar3 — KEYAGREEMENT EXTERNAL
NIST.SP.800-108R1-upd1 — SP-800-108 EXTERNAL
NIST.SP.800-185 — SP800-185 EXTERNAL
National Institute Standards and Technology (NIST), "Post-Quantum Cryptography FAQs", <https://csrc.nist.gov/Projects/post-quantum-cryptography/faqs>. EXTERNAL
Perrin, T., "The Noise Protocol Framework", Revision 34, July 2018, <https://noiseprotocol.org/noise.html>. EXTERNAL
Bormann, C., "CBOR Playground", <https://cbor.me/>. EXTERNAL
Degabriele, J., Lehmann, A., Paterson, K., Smart, N., and M. Strefler, "On the Joint Security of Encryption and Signature in EMV", December 2011, <https://eprint.iacr.org/2011/615>. EXTERNAL
Wikipedia, "Commercial National Security Algorithm Suite", October 2023, <https://en.wikipedia.org/w/index.php?title=Commercial_National_Security_Algorithm_Suite&oldid=1181333611>. EXTERNAL
Krawczyk, H., "SIGMA: the 'SIGn-and-MAc' Approach to Authenticated Diffie-Hellman and Its Use in the IKE-Protocols", June 2003, <https://www.iacr.org/cryptodb/archive/2003/CRYPTO/1495/1495.pdf>. EXTERNAL
Cottier, B. and D. Pointcheval, "Security Analysis of the EDHOC protocol", September 2022, <https://arxiv.org/abs/2209.03599>. EXTERNAL
Bruni, A., Sahl Jørgensen, T., Grønbech Petersen, T., and C. Schürmann, "Formal Verification of Ephemeral Diffie-Hellman Over COSE (EDHOC)", November 2018, <https://www.springerprofessional.de/en/formal-verification-of-ephemeral-diffie-hellman-over-cose-edhoc/16284348>. EXTERNAL
Jacomme, C., Klein, E., Kremer, S., and M. Racouchot, "A comprehensive, formal and automated analysis of the EDHOC protocol", October 2022, <https://hal.inria.fr/hal-03810102/>. EXTERNAL
Norrman, K., Sundararajan, V., and A. Bruni, "Formal Analysis of EDHOC Key Establishment for Constrained IoT Devices", September 2020, <https://arxiv.org/abs/2007.11427>. EXTERNAL
Thormarker, E., "On using the same key pair for Ed25519 and an X25519 based KEM", April 2021, <https://eprint.iacr.org/2021/509.pdf>. EXTERNAL
Krawczyk, H., "Cryptographic Extraction and Key Derivation: The HKDF Scheme", May 2010, <https://eprint.iacr.org/2010/264.pdf>. EXTERNAL
Günther, F. and M. Mukendi, "Careful with MAc-then-SIGn: A Computational Analysis of the EDHOC Lightweight Authenticated Key Exchange Protocol", December 2022, <https://eprint.iacr.org/2022/1705>. EXTERNAL
IETF RFC 2986 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 6194 [Active*]
IETF RFC 7228 [Active*]
IETF RFC 7258 [Active*]
IETF RFC 7296 [Active*]
IETF RFC 7624 [Active*]
IETF RFC 8366 [Active*]
IETF RFC 8376 [Active*]
IETF RFC 8446 [Superseded*]
IETF RFC 8937 [Active*]
IETF RFC 9000 [Active*]
IETF RFC 9147 [Active*]
IETF RFC 9176 [Active*]
IETF RFC 9397 [Active*]
IETF RFC 9529 [Active*]
SECG.SEC1.v2.2009-05 — SEC1 EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9528.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9528, Ephemeral Diffie-Hellman Over COSE (EDHOC). Available at https://doi.org/10.17487/RFC9528

Snippet:

IETF RFC 9528, Ephemeral Diffie-Hellman Over COSE (EDHOC). Available at https://doi.org/10.17487/RFC9528

HTML (ISO 690 compliant)

Preview:

IETF RFC 9528, Ephemeral Diffie-Hellman Over COSE (EDHOC). Available at https://doi.org/10.17487/RFC9528

Snippet:

<span class="citation"><cite>IETF RFC 9528</cite>, Ephemeral Diffie-Hellman Over COSE (EDHOC). Available at <a href="https://doi.org/10.17487/RFC9528" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9528</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9528, Ephemeral Diffie-Hellman Over COSE (EDHOC)
doi: 10.17487/RFC9528
url: https://doi.org/10.17487/RFC9528

Snippet:

<li>
<cite id="bib-rfc9528">IETF RFC 9528</cite>, Ephemeral Diffie-Hellman Over COSE (EDHOC)
<span class="doi">10.17487/RFC9528</span>
</li>

Referenced By

IETF RFC 9529 [Active*]
IETF RFC 9958 [Active*]