]> Key Update for OSCORE (KUDOS) RISE AB
Isafjordsgatan 22 Kista 16440 Stockholm Sweden rikard.hoglund@ri.se
RISE AB
Isafjordsgatan 22 Kista 16440 Stockholm Sweden marco.tiloca@ri.se
CoRE Working Group Internet-Draft Communications with the Constrained Application Protocol (CoAP) can be protected end-to-end at the application-layer by using the security protocol Object Security for Constrained RESTful Environments (OSCORE). Under some circumstances, two CoAP endpoints need to update their OSCORE keying material before communications can securely continue, e.g., due to approaching key usage limits. This document defines Key Update for OSCORE (KUDOS), a lightweight key update procedure that two CoAP endpoints can use to update their OSCORE keying material by establishing a new OSCORE Security Context. Accordingly, this document updates the use of the OSCORE flag bits in the CoAP OSCORE Option as well as the protection of CoAP response messages with OSCORE. Also, it deprecates the key update procedure specified in Appendix B.2 of RFC 8613. Therefore, this document updates RFC 8613. Discussion Venues Discussion of this document takes place on the Constrained RESTful Environments Working Group mailing list (core@ietf.org), which is archived at . Source for this draft and an issue tracker can be found at .
Introduction The security protocol Object Security for Constrained RESTful Environments (OSCORE) provides end-to-end protection at the application-layer for messages exchanged with the Constrained Application Protocol (CoAP) . In particular, OSCORE ensures message confidentiality and integrity, replay protection, and binding of response to request between a sender and a recipient. Under some circumstances, two CoAP endpoints using OSCORE may need to update their shared keying material in order to ensure the security of their communications. Among other reasons, approaching key usage limits requires updating the OSCORE keying material before communications can securely continue. This document defines Key Update for OSCORE (KUDOS), a lightweight key update procedure that two CoAP endpoints can use to update their OSCORE keying material by establishing a new OSCORE Security Context. Accordingly, this document updates as follows:
  • With reference to the "OSCORE Flag Bits" registry defined in as part of the "Constrained RESTful Environments (CoRE) Parameters" registry group, it updates the entries with Bit Position 0 and 1 (see ), both of which were originally marked as "Reserved". In particular, it defines and registers the usage of the OSCORE flag bit with Bit Position 0, as the one intended to expand the space for the OSCORE flag bits in the OSCORE Option (see ). Also, it marks the bit with Bit Position of 1 as "Unassigned".
  • It updates the protection of CoAP responses with OSCORE that was originally specified in , as defined in of this document.
  • It deprecates the key update procedure specified in , as intended to be superseded by KUDOS.
Terminology The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals, as shown here. Readers are expected to be familiar with the terms and concepts related to CoAP , Observe , Concise Binary Object Representation (CBOR) , OSCORE , and Ephemeral Diffie-Hellman Over COSE (EDHOC) . This document additionally defines the following terminology.
  • FS mode: the KUDOS execution mode that achieves forward secrecy (see ).
  • No-FS mode: the KUDOS execution mode that does not achieve forward secrecy (see ).
  • Equilibrium: The situation where a peer has no execution of KUDOS currently ongoing with the other KUDOS peer for updating one of their OSCORE Security Contexts.
Current Methods for Rekeying OSCORE Two peers communicating using OSCORE may choose to renew their shared keying information by establishing a new OSCORE Security Context for a variety of reasons. A particular reason is the approaching of limits that have been set for safe key usage . Practically, when the relevant limits are reached for an OSCORE Security Context, the two peers have to establish a new OSCORE Security Context, in order to continue using OSCORE for secure communication. That is, the two peers have to establish new Sender and Recipient Keys, as the keys actually used by the AEAD algorithm. In addition to the approaching of key usage limits, there may be other reasons for a peer to initiate a key update procedure. These include: the OSCORE Security Context approaching its expiration time; application policies prescribing a regular key rollover; approaching the exhaustion of the Sender Sequence Number space in the OSCORE Sender Context. It is RECOMMENDED that the peer initiating the key update procedure starts it with some margin, i.e., well before actually experiencing the trigger event that forces to perform a key update (e.g., the OSCORE Security Context expiration or the exhaustion of the Sender Sequence Number space). If the rekeying is not initiated ahead of these events, it may become practically impossible to perform a key update with certain methods and/or without aborting ongoing message exchanges. Other specifications define a number of ways for rekeying OSCORE, which are summarized below.
  • The two peers can run the procedure defined in . That is, the two peers exchange three or four messages that are protected with temporary Security Contexts, thus adding randomness to the OSCORE ID Context. As a result, the two peers establish a new OSCORE Security Context with new ID Context, Sender Key, and Recipient Key, while keeping the same OSCORE Master Secret and OSCORE Master Salt from the old OSCORE Security Context. This procedure does not require any additional components to what OSCORE already provides and it does not provide forward secrecy. The procedure defined in is used in 6TiSCH networks when handling failure events. That is, a node acting as Join Registrar/Coordinator (JRC) assists new devices, namely "pledges", to securely join the network as per the Constrained Join Protocol . In particular, a pledge exchanges OSCORE-protected messages with the JRC, from which it obtains a short identifier, link-layer keying material and other configuration parameters. As per , a JRC that experiences a failure event may likely lose information about joined nodes, including their assigned identifiers. Then, the reinitialized JRC can establish a new OSCORE Security Context with each pledge, through the procedure defined in .
  • The two peers can use the OSCORE profile of the Authentication and Authorization for Constrained Environments (ACE) Framework . When a CoAP client uploads an access token to a CoAP server as an access credential, the two peers also exchange two nonces. Then, the two peers use the two nonces together with information provided by the ACE authorization server that issued the access token, in order to derive an OSCORE Security Context. This procedure does not provide forward secrecy.
  • The two peers can run the EDHOC key exchange protocol based on Diffie-Hellman and defined in , in order to establish a shared pseudo-random secret key in a mutually authenticated way. Then, the two peers can use the established pseudo-random key to derive external application keys. This allows the two peers to securely derive an OSCORE Master Secret and an OSCORE Master Salt, from which an OSCORE Security Context can be established. This procedure additionally provides forward secrecy. EDHOC also specifies an optional function, namely EDHOC_KeyUpdate, to perform a key update in a more efficient way than re-running EDHOC. The two communicating peers call EDHOC_KeyUpdate with equivalent input, which results in the derivation of a new shared pseudo-random secret key. Usage of EDHOC_KeyUpdate preserves forward secrecy. Note that EDHOC may be run standalone or as part of other workflows, such as when using the EDHOC and OSCORE profile of ACE .
  • If one peer is acting as LwM2M Client and the other peer as LwM2M Server, according to the OMA Lightweight Machine to Machine Core specification , then the LwM2M Client peer may take the initiative to bootstrap again with the LwM2M Bootstrap Server, and receive again an OSCORE Security Context. Alternatively, the LwM2M Server can instruct the LwM2M Client to initiate this procedure. If the OSCORE Security Context information on the LwM2M Bootstrap Server has been updated, the LwM2M Client will thus receive a fresh OSCORE Security Context to use with the LwM2M Server. The LwM2M Client, the LwM2M Server, and the LwM2M Bootstrap server are also required to use the procedure defined in and overviewed above, when they use a certain OSCORE Security Context for the first time .
Manually updating the OSCORE Security Context at the two peers should be a last resort option and it might often be not practical or feasible. Even when any of the alternatives mentioned above is available, it is RECOMMENDED that two OSCORE peers update their Security Context by using the KUDOS procedure as defined in of this document.
Updated Protection of Responses with OSCORE The protection of CoAP responses with OSCORE is updated, by adding the following text at the end of step 3 of as well as before the text "Then, go to 4." of .
If the server is using a different Security Context for the response compared to what was used to verify the request (e.g., due to an occurred key update), then the server MUST take the second alternative. That is, the server MUST include its Sender Sequence Number as Partial IV in the response and use it to build the AEAD nonce to protect the response. This prevents the server from using the same AEAD (key, nonce) pair for two responses, protected with different OSCORE Security Contexts. An exception is the procedure in , which is secure although not complying with the above. The reason is that, in that procedure, the server uses the new OSCORE Security Context only and solely to protect the outgoing response (response #1), and no other message is protected with that OSCORE Security Context. Other procedures where that holds would also remain secure.
Key Update for OSCORE (KUDOS) This section defines KUDOS, a lightweight procedure that two OSCORE peers can use to update their keying material and establish a new OSCORE Security Context. Hereafter, this document refers to two specific peers that run KUDOS to update specifically one OSCORE Security Context that they share with each other. KUDOS relies on the OSCORE Option defined in and extended as defined in , as well as on the support function updateCtx() defined in . In order to run KUDOS, two peers exchange OSCORE-protected CoAP messages. The key update procedure is described in detail in , with particular reference to the stateful FS mode providing forward secrecy. The possible use of the stateless no-FS mode is described in , as intended to peers that are not able to write in non-volatile memory. Two peers MUST run KUDOS in FS mode if they are both capable to do so. The key update procedure has the following properties:
  • It can be initiated by either peer.
  • The new OSCORE Security Context enjoys forward secrecy, unless the no-FS mode is used (see ).
  • The same ID Context value used in the old OSCORE Security Context (if set) is preserved in the new OSCORE Security Context.
  • The same Sender and Recipient IDs used in the old OSCORE Security Context are preserved in the new OSCORE Security Context.
  • It is robust against a peer rebooting and loss of state, avoiding the reuse of AEAD (nonce, key) pairs also in such cases.
  • It typically completes in one round trip by exchanging two OSCORE-protected CoAP messages. The two peers achieve mutual key confirmation in a following exchange, which is protected with the newly established OSCORE Security Context.
Extensions to the OSCORE Option This document extends the use of the OSCORE Option originally defined in as follows:
  • This document defines the usage of the eight least significant bit, called "Extension-1 Flag", in the first byte of the OSCORE Option containing the OSCORE flag bits. The registration of this flag bit in the "OSCORE Flag Bits" registry is specified in . When the Extension-1 Flag is set to 1, the second byte of the OSCORE Option MUST include the OSCORE flag bits 8-15.
  • This document defines the usage of the least significant bit "Nonce Flag", 'd', in the second byte of the OSCORE Option containing the OSCORE flag bits 8-15. The registration of this flag bit in the "OSCORE Flag Bits" registry is specified in . When it is set to 1, the compressed COSE object contains a field 'x' and a field 'nonce', to be used for the steps defined in . In particular, the 1 byte 'x' following 'kid context' (if any) includes the size of the following field 'nonce' as well as a number of signaling bits that indicate the specific behavior to adopt during the KUDOS execution. Hereafter, a message is referred to as a "KUDOS message", if and only if the second byte of flags is present and the 'd' bit is set to 1. If that is not the case, the message is referred to as a "non KUDOS message". The encoding of the 'x' field is as follows:
    • The four least significant bits encode the 'nonce' size in bytes minus 1, namely 'm'.
    • The fifth least significant bit is the "No Forward Secrecy" 'p' bit. The sender peer indicates its wish to run KUDOS in FS mode or in no-FS mode, by setting the 'p' bit to 0 or 1, respectively. This makes KUDOS possible to run also for peers that cannot support the FS mode. At the same time, two peers MUST run KUDOS in FS mode if they are both capable to do so, as per . The execution of KUDOS in no-FS mode is defined in .
    • The sixth least significant bit is the "Preserve Observations" 'b' bit. The sender peer indicates its wish to preserve or terminate the ongoing observations with the other peer beyond the KUDOS execution, by setting the 'b' bit to 1 or 0, respectively. The related processing is defined in .
    • The seventh least significant bit is the 'z' bit, which has the following meaning:
      • If the bit 'z' is set to 0, the present message is a "divergent" KUDOS message, i.e., it is protected with a temporary OSCORE Security Context and indicates that the sender peer is moving away from "equilibrium". That is, the sender peer is offering its own nonce in the 'nonce' field of the message and is waiting to receive the other peer's nonce.
      • If the bit 'z' is set to 1, the present message is a "convergent" KUDOS message, i.e., it is protected with the newly established OSCORE Security Context and indicates that the sender peer is attempting to return to "equilibrium". That is, the sender peer is offering its own nonce in the 'nonce' field of the message, has received the other peer's nonce, and is going to wait for key confirmation (as a pre-condition to return to equilibrium).
    • The eight least significant bit is reserved for future use. This bit SHALL be set to 0 when not in use. According to this specification, if this bit is set to 1, the following applies:
      • If the message is a request, it is considered to be malformed and decompression fails as specified in item 2 of .
      • If the message is a response, it is considered to be malformed, decompression fails as specified in item 2 of , and the client SHALL discard the response as specified in item 8 of .
shows the extended OSCORE Option value, with the presence of the 'x' and 'nonce' fields.
The Extended OSCORE Option Value +-+-+-+-+-+-+-+-+---+---+---+---+---+---+---+---+---------------------+ |1|0|0|h|k| n | 0 | 0 | 0 | 0 | 0 | 0 | 0 | d | Partial IV (if any) | +-+-+-+-+-+-+-+-+---+---+---+---+---+---+---+---+---------------------+ <------ 1 byte ------> <----- s bytes ------> +----------------------+----------------------+ | s (if any) | kid context (if any) | +----------------------+----------------------+ <----- 1 byte ------> <--- m + 1 bytes ---> +---------------------+---------------------+------------------+ | x (if any) | nonce (if any) | kid (if any) | +---------------------+---------------------+------------------+ | | | 0 1 2 3 4 5 6 7 | | +-+-+-+-+-+-+-+-+ | | |0|z|b|p| m | | | +-+-+-+-+-+-+-+-+ | ]]>
Function for Security Context Update This section defines the updateCtx() function shown in , which takes as input the three parameters input1, input2, and CTX_IN. In particular, input1 and input2 are built from the 'x' and 'nonce' fields transported in the OSCORE Option value of the exchanged KUDOS messages (see ), while CTX_IN is the OSCORE Security Context to update through the KUDOS execution. The function returns a new OSCORE Security Context CTX_OUT.
Functions for Deriving a new OSCORE Security Context = "oscore " + Label; opaque context<0..255> = X_N; } ExpandLabel; return KUDOS_Expand(master_secret, ExpandLabel, key_length) ]]>
The updateCtx() function builds the two CBOR byte strings input1_cbor and input2_cbor, whose values are the input parameter input1 and input2, respectively. Then, it builds X_N as the byte concatenation of input1_cbor and input2_cbor. In order to be agnostic of the order according to which the nonce values were exchanged, the binary representations of input1_cbor and input2_cbor are sorted in lexicographical order before they are concatenated. That is, with | denoting byte concatenation, X_N MUST take input1_cbor | input2_cbor if input1_cbor comes before input2_cbor in lexicographical order, or input2_cbor | input1_cbor otherwise. After that, the updateCtx() function derives the new values of the Master Salt and Master Secret for the Security Context CTX_OUT. In particular, the new Master Salt takes X_N as value. Instead, the new Master Secret is derived through a KUDOS-Expand step that is invoked through the KUDOS_Expand_Label() function. The latter takes as input the Master Secret value from the Security Context CTX_IN, the literal string "key update", X_N, and the length of the Master Secret in bytes. The definition of KUDOS-Expand depends on the key derivation function used for OSCORE by the two peers, as specified in CTX_IN. If the key derivation function is an HKDF Algorithm (see ), then KUDOS-Expand is mapped to HKDF-Expand , as shown below. In particular, the hash algorithm is the same one used by the HKDF Algorithm specified in CTX_IN. If a future specification updates by admitting different key derivation functions than HKDF Algorithms (e.g., KMAC as based on the SHAKE128 or SHAKE256 hash functions), that specification has to also update the present document in order to define the mapping between such key derivation functions and KUDOS-Expand. When an HKDF Algorithm is used, the derivation of new values follows the same approach used in TLS 1.3, which is also based on HKDF-Expand (see ) and is used for computing new keying material in case of key update (see ). After that, the newly computed Master Secret and Master Salt are used to derive a new Security Context CTX_OUT, as per . Any other parameter required for that derivation takes the same value as in the Security Context CTX_IN. Note that the following holds for the newly derived CTX_OUT:
  • In its Sender Context, the Sender Sequence Number is initialized to 0 as per .
  • If the peer that has derived CTX_OUT supports CoAP Observe , the Notification Number used for the replay protection of Observe notifications (see ) is left as not initialized.
Finally, the updateCtx() function returns the newly derived Security Context CTX_OUT. Note that, thanks to the input parameters input1 and input2 provided to the updateCtx() function, the derivation of CTX_OUT also considers as input the information from the 'x' field conveyed in the OSCORE Option value of the exchanged KUDOS messages. In turn, this ensures that a successfully completed KUDOS execution has occurred as intended by the two peers.
Key Update When using KUDOS as described in this section, forward secrecy is achieved for the new OSCORE keying material that results from the KUDOS execution, as long as the original OSCORE keying material was also established with forward secrecy. For peers that are unable to store information to persistent memory, provides an alternative approach that does not achieve forward secrecy but allows also such very constrained peers to perform a key update. A peer can run KUDOS for active rekeying at any time, or for a variety of more compelling reasons. These include the (approaching) expiration of the OSCORE Security Context, approaching the limits for the corresponding key usage , the enforcement of application policies, and the (approaching) exhaustion of the OSCORE Sender Sequence Number space. The expiration time of an OSCORE Security Context and the key usage limits are hard limits. Once reached them, a peer MUST stop using the keying material in the OSCORE Security Context for exchanging application data with the other peer and has to perform a rekeying before resuming secure communication. Before starting KUDOS, the two peers share the OSCORE Security Context CTX_OLD. In particular, CTX_OLD is the most recent OSCORE Security Context that a peer has with the other peer, before initiating the KUDOS procedure or upon having received and successfully verified a divergent KUDOS message. During an execution of KUDOS, a temporary OSCORE Security Context CTX_TEMP is also derived. Once successfully completed a KUDOS execution, the two peers agree on a newly established OSCORE Security Context CTX_NEW that replaces CTX_OLD. In particular, CTX_NEW is the most recent OSCORE Security Context that a peer has with the other peer, before sending a convergent KUDOS message to the other peer or upon having received and successfully verified a convergent KUDOS message from that other peer. CTX_OLD can be safely deleted upon receiving key confirmation from the other peer, i.e., upon gaining knowledge that the other peer also has CTX_NEW. The following specifically defines how KUDOS is run in its stateful FS mode achieving forward secrecy. That is, in the OSCORE Option value of all the exchanged KUDOS messages, the "No Forward Secrecy" 'p' bit is set to 0. In order to run KUDOS in FS mode, both peers have to be able to write in non-volatile memory. From the newly derived Security Context CTX_NEW, the peers MUST store to non-volatile memory the immutable parts of the OSCORE Security Context as specified in , with the possible exception of the Common IV, Sender Key, and Recipient Key that can be derived again when needed, as specified in . If either or both peers are unable to write in non-volatile memory, the two peers have to run KUDOS in its stateless no-FS mode (see ).
Nonces and X Bytes When running KUDOS, each peer contributes by generating a nonce value N1 or N2 and providing it to the other peer. The size of the nonces N1 and N2 is application specific and the use of 8 byte nonce values is RECOMMENDED. The nonces N1 and N2 MUST be random values, with the possible exception described later in . Note that a good amount of randomness is important for the nonce generation. provides guidance on the generation of random values. In the following, X1 and X2 denote the value of the 'x' field specified in the OSCORE Option value of a KUDOS message. From one peer's point of view, X1 and N1 are generated by that peer, while X2 and N2 are obtained from the other peer. In a KUDOS message, the sender peer sets the X1 value based on: the length of N1 in bytes, the specific settings that the peer wishes to run KUDOS with, and the message being divergent or convergent. During the same KUDOS execution, all the KUDOS messages sent by a peer MUST have the same value of the bit 'b' in the 'x' field conveying X1. N1, N2, X1, and X2 are used by the peers to build the 'input1' and 'input2' values provided as input to the updateCtx() function, in order to derive an OSCORE Security Context (see ). As for any newly derived OSCORE Security Context, the Sender Sequence Number and the Replay Window are re-initialized accordingly (see ). Specifically, the input to updateCtx() is built as follows, where | denotes byte concatenation:
  • When deriving CTX_TEMP to protect a divergent outgoing message, input1 is X1 | N1 and input2 is 0x.
  • When deriving CTX_TEMP to unprotect a divergent incoming message, input1 is X2 | N2 and input2 is 0x.
  • When deriving CTX_NEW to protect or unprotect a convergent message, input1 is X1 | N1 and input2 is X2 | N2.
For any divergent KUDOS message, the sender peer's (X, nonce) are included in the 'x' and 'nonce' field of the OSCORE Option value, respectively. Also, both peers use those as input to updateCtx() for deriving CTX_TEMP, which is used to protect and unprotect the KUDOS message. For any convergent KUDOS message, the sender peer's (X, nonce) are included in the 'x' and 'nonce' field of the OSCORE Option value, respectively. Both the sender peer's (X, nonce) and the recipient peer's (X, nonce) are used as input to updateCtx() for deriving CTX_NEW, which is used to protect and unprotect the KUDOS message. A pair (X, nonce) offered by a peer is bound to CTX_OLD, and is reused as much as possible during the same KUDOS execution. A peer generates its (X, nonce) pair before invoking updateCtx(), if the peer does not have one such pair already associated with the CTX_OLD to use as input CTX_IN for updateCtx(). The peer associates the newly generated pair with CTX_OLD before entering updateCtx().
KUDOS States A peer performs a KUDOS execution according to the state machine specified in and illustrated as a figure in , where the following states are considered. The peer can be in three possible states: IDLE, BUSY, and PENDING. Normally, the peer is in the IDLE state, i.e., in "equilibrium". The peer starts a KUDOS execution upon entering the BUSY state from a state different than BUSY. The peer successfully completes a KUDOS execution by entering the IDLE state, at which point the peer has the OSCORE Security Context CTX_NEW and has achieved key confirmation. The sending of a KUDOS message is per the KUDOS state machine and is based on the perception that the sender peer has about the state of the other peer. The processing of a received KUDOS message is per the KUDOS state machine and is based on the local status of the recipient peer. Moving to a state due to a received KUDOS message occurs only in case of successful decryption and verification of the message with OSCORE. In its local status, a peer tracks its current KUDOS state by means of the bits (c_tx, c_rx) as follows:
  • (00) IDLE - The peer is not running KUDOS.
  • BUSY - The peer is running KUDOS and:
    • (01) has not offered a nonce, but has received the nonce from the other peer; or
    • (10) has offered a nonce, but has not received the nonce from the other peer.
  • (11) PENDING: the peer is running KUDOS, has offered its nonce, has received the nonce from the other peer, and is waiting for key confirmation.
While in the BUSY or the PENDING state, the peer MUST NOT send non KUDOS messages.
KUDOS State Machine From a peer's point of view, KUDOS states evolve as follows.
Startup At startup, the peer enters a Pre-IDLE stage.
Pre-IDLE Stage Upon entering the Pre-IDLE stage, perform the following steps:
  1. If the peer has any CTX_TEMP Security Contexts, delete them.
  2. If the peer has both an old and a new OSCORE Security Context:
    • Delete the (X, nonce) pair associated with the old OSCORE Security Context.
    • Delete the old OSCORE Security Context, or retain it only for processing late incoming messages as allowed by retention policies (see ).
  3. Move to IDLE.
IDLE While in IDLE, the following applies:
  • Upon receiving a divergent message, move to BUSY.
  • Upon sending a divergent message, move to BUSY.
  • Upon receiving a convergent message:
    1. Ignore the message for the sake of KUDOS processing, but process it as a CoAP message.
    2. Stay in IDLE.
BUSY Upon entering BUSY due to receiving a divergent message:
  1. Send a convergent message.
  2. Move to PENDING.
While in BUSY, the following applies:
  • Upon receiving a divergent message:
    1. Send a convergent message.
    2. Move to PENDING.
  • Upon receiving a convergent message:
    1. Achieve key confirmation.
    2. Move to the Pre-IDLE stage.
  • Upon sending a divergent message:
    • If, as in most cases, CTX_TEMP is usable to protect the intended divergent message:
      1. Send the message protected with CTX_TEMP.
      2. Stay in BUSY.
    • Otherwise, perform the following steps (e.g., this happens upon eventually exhausting the Sender Sequence Number space of CTX_TEMP):
      1. Delete CTX_TEMP.
      2. Delete the (X, nonce) pair associated with the Security Context CTX_IN that was used to generate the CTX_TEMP deleted at the previous step.
      3. Generate a new (X, nonce) pair and associate it with CTX_IN.
      4. Generate a new CTX_TEMP from CTX_IN.
      5. Send the message protected with the CTX_TEMP generated at the previous step.
      6. Stay in BUSY.
Pending While in PENDING, the following applies:
  • Upon needing to send a message (e.g., the application wants to send a request):
    1. Send the message as a convergent message.
    2. Stay in PENDING.
  • Upon receiving a non KUDOS message protected with the latest CTX_NEW:
    1. Achieve key confirmation.
    2. Move to the Pre-IDLE stage.
  • Upon receiving a convergent message:
    1. Achieve key confirmation.
    2. Move to the Pre-IDLE stage.
  • Upon receiving a divergent message:
    • In case of successful decryption and verification of the message using a CTX_TEMP derived from CTX_OLD:
      1. Delete CTX_NEW.
      2. Delete the pair (X, nonce) associated with the Security Context CTX_IN that was used to generate the CTX_NEW deleted at the previous step.
      3. Abort the ongoing KUDOS execution.
      4. Move to BUSY and enter it consistently with the reception of a divergent message.
    • Otherwise, in case of successful decryption and verification of the message using a CTX_TEMP derived from CTX_NEW:
      1. Delete the oldest CTX_TEMP.
      2. Delete the Security Context that was used as CTX_IN to generate the CTX_TEMP deleted at the previous step.
      3. CTX_NEW becomes the oldest Security Context. From this point on, that Security Context is what this KUDOS execution refers to as CTX_OLD.
      4. Abort the ongoing KUDOS execution.
      5. Move to BUSY and enter it consistently with the reception of a divergent message.
Optimization upon Receiving a Divergent Message while in PENDING When a peer is in the PENDING state and receives a divergent message, an optimization can be applied to avoid unnecessary state transitions and cryptographic derivations. It builds on comparing the just received divergent message MSG_A with a previously received divergent message MSG_B that originally caused the latest transition to PENDING or BUSY. Normally the reception of MSG_A would move the peer to BUSY state. If the two messages MSG_A and MSG_B contain the same X byte and Nonce from the other peer, then the peer stays in PENDING. Otherwise, the peer moves to BUSY upon reception of the divergent message MSG_\A, as normal. If upon reception of MSG_A, CTX_NEW is not usable to protect outgoing messages (e.g., this happens upon eventually exhausting the Sender Sequence Number values of CTX_TEMP), the peer moves to BUSY, as normal. This optimization avoids repeated cryptographic operations and redundant transitions in the state machine when divergent messages originate from the same peer and carry identical X byte and Nonce. To determine whether message MSG_A and MSG_B are equivalent, the peer MUST:
  1. Decompose the Master Salt from the current CTX_NEW into its CBOR byte string components, as described in . Then identify:
    • The component containing the peer's own X and Nonce, i.e., the (X, nonce) pair associated with the Security Context CTX_IN that was used to generate the CTX_TEMP used to unprotect MSG_A.
    • The component containing the other peer's X and Nonce that was used in the divergent message MSG_B, i.e., the result of removing from the Master Salt the component above related to this peer.
  2. Extract the X and Nonce values from the latest received divergent message MSG_A.
  3. There is a match if the X and Nonce from message MSG_A are the same as those from message MSG_B identified above.
Handling of OSCORE Security Contexts A peer completes the key update procedure when it has derived the new OSCORE Security Context CTX_NEW and achieved key confirmation, and thus has moved back to the IDLE state. Once the peer has successfully derived CTX_NEW, the peer MUST use CTX_NEW to protect outgoing non KUDOS messages and MUST NOT use the originally shared OSCORE Security Context CTX_OLD for protecting outgoing messages. The peer MUST terminate all the ongoing observations that it has with the other peer as protected with the old Security Context CTX_OLD, unless the two peers have explicitly agreed otherwise as defined in . More specifically, if either or both peers indicate the wish to cancel their observations, those will all be cancelled following a successful KUDOS execution. Note that, even in case a peer has no fundamental reason to update its OSCORE keying material, running KUDOS can be intentionally exploited as a more efficient way to terminate all the ongoing observations with the other peer, compared to sending one cancellation request per observation (see ).
KUDOS Messages as CoAP Requests or Responses If a KUDOS message is a CoAP request, then it can target two different types of resources at the recipient CoAP server:
  • The well-known KUDOS resource at /.well-known/kudos (see ), or an alternative KUDOS resource with resource type "core.kudos" (see and ). In such a case, no application processing is expected at the CoAP server and the plain CoAP request composed before OSCORE protection SHOULD NOT include an application payload.
  • A non-KUDOS resource, i.e., an actual application resource that a CoAP request can target in order to trigger application processing at the CoAP server. In such a case, the plain CoAP request composed before OSCORE protection can include an application payload, if admitted by the request method.
In either case, the link to the target resource can be accompanied by the "osc" target attribute to indicate that the resource is only accessible using OSCORE (see ). Similarly, any CoAP response can also be a KUDOS message. If the corresponding CoAP request has targeted a KUDOS resource, then the plain CoAP response composed before OSCORE protection SHOULD NOT include an application payload. Otherwise, an application payload MAY be included.
Avoiding In-Transit Requests During a Key Update Before sending a KUDOS message, a peer MUST ensure that it has no outstanding interactions with the other peer (see ), with the exception of ongoing observations . If any such outstanding interactions are found, the peer MUST NOT initiate or continue the KUDOS execution, before either:
  • having all those outstanding interactions cleared; or
  • freeing up the Token values used with those outstanding interactions, with the exception of ongoing observations with the other peer.
Later on, this prevents a non KUDOS response protected with the new Security Context CTX_NEW from cryptographically matching with both the corresponding request also protected with CTX_NEW and with an older request protected with CTX_OLD, in case the two requests were protected using the same OSCORE Partial IV. During an ongoing KUDOS execution, a peer MUST NOT send a non KUDOS message to the other peer, until having aborted or successfully completed the key update procedure on its side. Note that, without the constraint above, this could otherwise be possible if a client running KUDOS uses a value of NSTART greater than 1 (see ).
Key Update Admitting no Forward Secrecy The FS mode of the KUDOS procedure defined in ensures forward secrecy of the OSCORE keying material. However, it requires peers running KUDOS to preserve their state (e.g., across a device reboot occurred in an unprepared way), by writing information such as data from the newly derived OSCORE Security Context CTX_NEW in non-volatile memory. This can be problematic for devices that cannot dynamically write information to non-volatile memory. For example, some devices may support only a single writing in persistent memory when initial keying material is provided (e.g., at manufacturing or commissioning time), but no further writing after that. Therefore, these devices cannot perform a stateful key update procedure and thus are not capable to run KUDOS in FS mode to achieve forward secrecy. In order to address these limitations, KUDOS can be run in its stateless no-FS mode, as defined in the following. This allows two peers to accomplish the same results as when running KUDOS in FS mode (see ), with the difference that forward secrecy is not achieved and no state information is required to be dynamically written in non-volatile memory. From a practical point of view, the two modes differ in which exact OSCORE Master Secret and Master Salt are used as part of the OSCORE Security Context CTX_IN that is provided as input to the updateCtx() function (see ). If either or both peers are unable to write in non-volatile memory, then the two peers have to run KUDOS in no-FS mode.
Handling and Use of Keying Material In the following, a device is denoted as "CAPABLE" if it is able to store information in non-volatile memory (e.g., on disk), beyond a one-time-only writing occurring at manufacturing or (re-)commissioning time. If that is not the case, the device is denoted as "non-CAPABLE". The following terms are used to refer to OSCORE keying material.
  • Bootstrap Master Secret and Bootstrap Master Salt. If pre-provisioned during manufacturing or (re-)commissioning, these OSCORE Master Secret and Master Salt are initially stored on disk and are never going to be overwritten by the device.
  • Latest Master Secret and Latest Master Salt. These OSCORE Master Secret and Master Salt can be dynamically updated by the device. In case of reboot, they are lost unless they have been stored on disk.
Note that:
  • A peer running KUDOS can have none of the pairs above associated with another peer, only one, or both.
  • If a peer has neither of the pairs above associated with another peer, then the peer cannot run KUDOS in any mode with that other peer.
  • If a peer has only one of the pairs above associated with another peer, then the peer can attempt to run KUDOS with that other peer, but the procedure might fail depending on the other peer's capabilities. In particular:
    • In order to run KUDOS in FS mode, a peer must be a CAPABLE device. It follows that two peers have to both be CAPABLE devices in order to be able to run KUDOS in FS mode with one another.
    • In order to run KUDOS in no-FS mode, a peer must have Bootstrap Master Secret and Bootstrap Master Salt available as stored on disk.
  • A peer that is a non-CAPABLE device MUST support the no-FS mode, with the exception described in for non-CAPABLE devices that lack Bootstrap Master Secret and Bootstrap Master Salt.
  • A peer that is a CAPABLE device MUST support the FS mode and the no-FS mode.
  • As an exception to the nonces being generated as random values (see ), a peer that is a CAPABLE device MAY use a value obtained from a monotonically incremented counter as nonce. Related privacy implications are described in . In such a case, the peer MUST enforce measures to ensure freshness of the nonce values. For example, the peer can use the same procedure described in for handling the OSCORE Sender Sequence Number values. These measures require to regularly store the used counter values in non-volatile memory, which makes non-CAPABLE devices unable to safely use counter values as nonce values.
As a general rule, once successfully generated a new OSCORE Security Context CTX (e.g., CTX is the CTX_NEW resulting from a KUDOS execution, or it has been established through the EDHOC protocol ), a peer considers the Master Secret and Master Salt of CTX as Latest Master Secret and Latest Master Salt. After that:
  • If the peer is a CAPABLE device, it MUST store Latest Master Secret and Latest Master Salt on disk, with the exception of possible temporary OSCORE Security Contexts used during a key update procedure, such as CTX_TEMP used during the KUDOS execution. That is, the OSCORE Master Secret and Master Salt from such temporary Security Contexts are not stored on disk.
  • The peer MUST store Latest Master Secret and Latest Master Salt in volatile memory, thus making them available to OSCORE message processing and possible key update procedures.
Following a state loss (e.g., due to a reboot occurred in an unprepared way), a device MUST complete a successful KUDOS execution before performing an exchange of OSCORE-protected application data with another peer, unless:
  • The device is CAPABLE and implements a functionality for safely reusing old keying material, such as that described in ; or
  • The device is exchanging OSCORE-protected data within a KUDOS message, as described in . In such a case, the plain CoAP message composed before OSCORE protection can include an application payload, if admitted.
Selection of KUDOS Mode The following refers to CTX_BOOTSTRAP as to the OSCORE Security Context where the OSCORE Master Secret is the Bootstrap Master Secret and the Master Salt is the Bootstrap Master Salt . During a KUDOS execution, the two peers agree on whether to perform the key update procedure in FS mode or no-FS mode, by leveraging the "No Forward Secrecy" bit, 'p', in the 'x' byte of the OSCORE Option value of the KUDOS messages (see ). The 'p' bit practically determines what OSCORE Security Context CTX_IN to use as input to updateCtx() during the KUDOS execution, consistently with the indicated mode. That is:
  • If the 'p' bit is set to 0 (FS mode), the updateCtx() function used to derive CTX_TEMP or CTX_NEW considers CTX_IN to be CTX_OLD, i.e., the current OSCORE Security Context shared with the other peer as is. In particular, CTX_OLD includes Latest Master Secret as OSCORE Master Secret and Latest Master Salt as OSCORE Master Salt.
  • If the 'p' bit is set to 1 (no-FS mode), the updateCtx() function used to derive CTX_TEMP or CTX_NEW considers CTX_IN to be CTX_BOOTSTRAP. Thus, every execution of KUDOS in no-FS mode between these two peers considers the same CTX_BOOTSTRAP, i.e., the same CTX_IN as input to the updateCtx() function, hence the impossibility to achieve forward secrecy. In particular, updateCtx() will take CTX_BOOTSTRAP as input when creating every OSCORE Security Context for protecting or unprotecting a KUDOS message where the 'p' bit is set to 1. If at least one KUDOS message in a successful KUDOS execution had the 'p' bit set to 1, then that KUDOS execution was run in no-FS mode. When a peer moves to the Pre-IDLE stage after having successfully completed a KUDOS execution in no-FS mode, then the peer MUST additionally perform the following Step A before Step 1 in : A. Delete CTX_BOOTSTRAP.
A peer determines to run KUDOS either in FS mode or in no-FS mode with another peer as follows.
  • If a peer A is a non-CAPABLE device, it MUST run KUDOS only in no-FS mode. That is, when sending a KUDOS message, it MUST set to 1 the 'p' bit of the 'x' byte in the OSCORE Option value. Note that, if the peer A lacks a Bootstrap Master Secret and Bootstrap Master Salt to use with the other peer B, it can still run KUDOS in FS mode according to what is defined in .
  • If a peer A is a CAPABLE device, it SHOULD run KUDOS only in FS mode. That is, when sending a KUDOS message, it SHOULD set to 0 the 'p' bit of the 'x' byte in the OSCORE Option value. An exception applies in the following cases.
    • The peer A is running KUDOS with another peer B, which A has learned to be a non-CAPABLE device (and hence not able to run KUDOS in FS mode). Note that, if the peer A is a CAPABLE device, it is able to store such information about the other peer B on disk and it MUST do so. From then on, the peer A will perform every execution of KUDOS with the peer B in no-FS mode, including after a possible reboot.
    • While the peer A is running KUDOS with another peer B without knowing its capabilities, the peer A receives a KUDOS message where the 'p' bit of the 'x' byte in the OSCORE Option value is set to 1.
  • If a peer A is a CAPABLE device and has learned that another peer B is also a CAPABLE device (and hence able to run KUDOS in FS mode), then the peer A MUST NOT run KUDOS with the peer B in no-FS mode. If the peer A receives a KUDOS message from the peer B where the 'p' bit of the 'x' byte in the OSCORE Option value is set to 1, then the peer A MUST ignore the message for the sake of KUDOS processing, but processes it as a CoAP message. Note that, if the peer A is a CAPABLE device, it is able to remember that the peer B is also a CAPABLE device and thus to store such information on disk, which it MUST do. This ensures that the peer A will perform every execution of KUDOS with the peer B in FS mode. This also prevents a possible downgrading attack aimed at making A believe that B is a non-CAPABLE device, hence at making A run KUDOS in no-FS mode although the FS mode can actually be used by both peers.
Non-CAPABLE Devices Operating in FS Mode Devices may not be pre-provisioned with Bootstrap material, for instance due to storage limitations of their persistent memory or to fulfill particular use cases. Bootstrap material specifically consists in the Bootstrap Master Secret and Bootstrap Master Salt, while Latest material specifically consists in the Latest Master Secret and Latest Master Salt as defined in . Normally, a non-CAPABLE device always uses KUDOS in no-FS mode. An exception is possible, if the Bootstrap material is dynamically installed at that device through an in-band process between that device and the peer device. In such a case, it is possible for that device to run KUDOS in FS mode with the peer device. Note that, under the assumption that peer A does not have any Bootstrap material with another peer B, peer A cannot use the no-FS mode with peer B, even though peer A is a non-CAPABLE device. Thus, allowing peer A to use KUDOS in FS mode ensures that peer A can perform a key update using KUDOS at all. In the situation outlined above, the following describes how a non-CAPABLE device, namely peer A, runs KUDOS in FS mode with another peer B:
  • Peer A is not provisioned with Bootstrap material associated with peer B at the time of manufacturing or commissioning.
  • Peer A establishes OSCORE keying material associated with peer B through an in-band procedure run with peer B. Then, peer A considers that keying material as the Latest material with peer B and stores it only in volatile memory. An example of such an in-band procedure is the EDHOC and OSCORE profile of ACE , according to which the two peers run the EDHOC protocol for establishing an OSCORE Security Context to associate with access rights. This in-band procedure may occur multiple times over the device's lifetime.
  • Peer A runs KUDOS in FS mode with peer B, thereby achieving forward secrecy for subsequent key update epochs, as long as the OSCORE keying material was originally established with forward secrecy. Peer A stores each newly derived Security Context in volatile memory.
As long as peer A does not reboot, executions of KUDOS rely on the Latest material stored in volatile memory. If peer A reboots, no OSCORE keying material associated with the peer B will be retained, as peer A is non-CAPABLE and therefore stores it only in volatile memory. Consequently, peer A must first establish new OSCORE keying material to use as Latest material with peer B, before running KUDOS again with peer B. This can be accomplished by running again the in-band procedure mentioned above.
Preserving Observations Across Key Updates As defined in , once a peer has successfully completed the KUDOS execution and derived the new OSCORE Security Context CTX_NEW, that peer normally terminates all the ongoing observations that it has with the other peer and that are protected with the old OSCORE Security Context CTX_OLD. This section describes a method that the two peers can use to safely preserve the ongoing observations that they have with one another, beyond the completion of a KUDOS execution. In particular, this method ensures that an Observe notification can never successfully cryptographically match against the Observe requests of two different observations, e.g., against an Observe request protected with CTX_OLD and an Observe request protected with CTX_NEW. The actual preservation of ongoing observations has to be agreed by the two peers at each execution of KUDOS that they run with one another, as defined in . If, at the end of a KUDOS execution, the two peers have not agreed on that, they MUST terminate the ongoing observations that they have with one another, just as defined in .
Management of Observations As per , a client can register its interest in observing a resource at a server, by sending a registration request including the Observe Option with value 0. If the server registers the observation as ongoing, the server sends back a successful response also including the Observe Option, hence confirming that an entry has been successfully added for that client. If the client receives back the successful response above from the server, then the client also registers the observation as ongoing. In case the client can ever consider to preserve ongoing observations beyond a key update as defined below, then the client MUST NOT simply forget about an ongoing observation if not interested in it anymore. Instead, the client MUST send an explicit cancellation request to the server, i.e., a request including the Observe Option with value 1 (see ). After sending this cancellation request, if the client does not receive back a response confirming that the observation has been terminated, the client MUST NOT consider the observation terminated. The client MAY try again to terminate the observation by sending a new cancellation request. In case a peer A performs a KUDOS execution with another peer B and A has ongoing observations with B that it is interested to preserve beyond the key update, then A can explicitly indicate its interest to do so. To this end, the peer A sets to 1 the bit "Preserve Observations", 'b', in the 'x' byte of the OSCORE Option value (see ), in the KUDOS message that it sends to the other peer B. If a peer receives a KUDOS message with the bit 'b' set to 0, then the peer MUST set to 0 the bit 'b' in the KUDOS message that it sends as follow-up, regardless of its wish to preserve ongoing observations with the other peer. If a peer has sent a KUDOS message with the bit 'b' set to 0, the peer MUST ignore the bit 'b' in the follow-up KUDOS message that it receives from the other peer. Note that during the same KUDOS execution, all the KUDOS messages sent by a peer MUST have the same value in the bit 'b' for preserving ongoing observations. After successfully completing the KUDOS execution (i.e., after having successfully derived the new OSCORE Security Context CTX_NEW), both peers have expressed their interest in preserving their common ongoing observations if and only if the bit 'b' was set to 1 in all the exchanged KUDOS messages. In such a case, each peer X performs the following actions:
  1. The peer X considers all the still ongoing observations that it has with the other peer, such that X acts as client in those observations. If there are no such observations, the peer X takes no further actions. Otherwise, it moves to Step 2.
  2. The peer X considers all the OSCORE Partial IV values used in the Observe registration requests associated with any of the still ongoing observations determined at Step 1.
  3. The peer X determines the value PIV* as the highest OSCORE Partial IV value among those considered at Step 2.
  4. In the Sender Context of the OSCORE Security Context shared with the other peer, the peer X sets its own Sender Sequence Number to (PIV* + 1), rather than to 0.
As a result, each peer X will "jump" beyond the OSCORE Partial IV (PIV) values that are occupied and in use for ongoing observations with the other peer where X acts as client. Note that, each time it runs KUDOS, a peer must determine if it wishes to preserve ongoing observations with the other peer or not, before sending a KUDOS message. To this end, the peer should also assess the new value that PIV* would take after a successful completion of KUDOS, in case ongoing observations with the other peer are going to be preserved. If the peer considers such a new value of PIV* to be too close to or equal to the maximum possible value admitted for the OSCORE Partial IV, then the peer may choose to run KUDOS with no intention to preserve its ongoing observations with the other peer, in order to "start over" from a fresh, entirely unused Sender Sequence Number space. Application policies can further influence whether attempting to preserve observations beyond a key update is appropriate or not.
Retention Policies Applications MAY define policies that allow a peer to temporarily keep the old Security Context CTX_OLD beyond having established the new Security Context CTX_NEW and having achieved key confirmation, rather than simply deleting CTX_OLD. This allows the peer to decrypt late, still on-the-fly incoming non KUDOS messages that are protected with CTX_OLD. When enforcing such policies, the following applies:
  • Outgoing non KUDOS messages MUST be protected only by using CTX_NEW.
  • Incoming non KUDOS messages MUST first be attempted to decrypt by using CTX_NEW. If decryption fails, a second attempt can use CTX_OLD.
  • KUDOS messages MUST NOT be protected or unprotected by using CTX_OLD.
  • When an amount of time defined by the policy has elapsed since the establishment of CTX_NEW, the peer deletes CTX_OLD.
A peer MUST NOT retain CTX_OLD beyond the establishment of CTX_NEW and the achievement of key confirmation, if any of the following conditions holds:
  • CTX_OLD is expired.
  • Limits set for safe key usage have been reached for the Recipient Key of the Recipient Context of CTX_OLD (see ).
Discussion KUDOS is intended to deprecate and replace the procedure defined in , as fundamentally achieving the same goal while displaying a number of improvements and advantages. In particular, it is especially convenient for the handling of failure events concerning the JRC node in 6TiSCH networks (see ). That is, among its intrinsic advantages compared to the procedure defined in , KUDOS preserves the same ID Context value when establishing a new OSCORE Security Context. Since the JRC uses ID Context values as identifiers of network nodes, namely "pledge identifiers", the above implies that the JRC does not have to perform anymore a mapping between a new, different ID Context value and a certain pledge identifier (see ). It follows that pledge identifiers can remain constant once assigned and thus ID Context values used as pledge identifiers can be employed in the long-term as originally intended.
Communication Overhead Each KUDOS messages results in communication overhead. This is determined by the following, additional information conveyed in the OSCORE Option (see ).
  • The second byte of the OSCORE Option value.
  • The 1-byte 'x' field of the OSCORE Option value.
  • The nonce conveyed in the 'nonce' field of the OSCORE Option value. Its size ranges from 1 to 16 bytes, is typically of 8 bytes, and is indicated in the 'x' field.
  • The 'Partial IV' field of the OSCORE Option value, in a CoAP response message that is a KUDOS message. This takes into account the fact that OSCORE-protected CoAP response messages normally do not include the 'Partial IV' field, but they have to when they are KUDOS messages (see ).
  • The first byte of the OSCORE Option value (i.e., the first OSCORE flag byte), in a CoAP response message that is a KUDOS message. This takes into account the fact that OSCORE-protected CoAP response messages normally convey an OSCORE Option that only consists of the all zero (0x00) flag byte. In turn, this results in the OSCORE Option being encoded as with empty value (see ).
  • The possible presence of the 1-byte 'Option Length (extended)' field in the OSCORE Option (see ). This is the case where the length of the OSCORE Option value is between 13 and 255 bytes (see ).
The results shown in figure are the minimum, typical, and maximum communication overhead in bytes introduced by KUDOS, when considering a nonce with size 1, 8, and 16 bytes. All the indicated values are in bytes. The overhead is calculated considering a scenario where a CoAP request serves as the divergent message and a following, corresponding CoAP response serves as the convergent message. In particular, the results build on the following assumptions.
  • Both messages of the same KUDOS execution use nonces of the same size and do not include the 'kid context' field in the OSCORE Option value.
  • When included in the OSCORE Option value, the 'Partial IV' field has size 1 byte.
  • CoAP request messages include the 'kid' field with size 1 byte in the OSCORE Option value.
  • CoAP response messages do not include the 'kid' field in the OSCORE Option value.
Communication Overhead (Bytes)
Nonce size Request KUDOS message Response KUDOS message Total
1 3 5 8
8 11 12 23
16 19 21 40
Resource Type core.kudos The "core.kudos" resource type registered in is defined to ensure a means for clients to send KUDOS requests without incurring any side effects. Specifically, a resource of this type does not pertain to any real application, which ensures that no application-level actions are triggered as a result of the KUDOS request. This allows clients to issue KUDOS requests when they do not include any actionable application payload in the plain CoAP request composed before OSCORE protection, or when no application-layer processing is intended to occur on the server.
Well-Known KUDOS Resource If a client wishes to run the KUDOS procedure without triggering any application processing on the server, then a request sent as a KUDOS message can target a KUDOS resource with resource type "core.kudos" (see ), e.g., at the Uri-Path "/.well-known/kudos" (see ). An alternative KUDOS resource can be discovered, e.g., by using a resource directory , by using the resource type "core.kudos" as filter criterion.
Rekeying when Using SCHC with OSCORE In the interest of rekeying, the following points must be taken into account when using the Static Context Header Compression and fragmentation (SCHC) framework for compressing CoAP messages protected with OSCORE, as defined in . The SCHC compression of the 'Partial IV' field in the OSCORE Option value has implications for the frequency of rekeying. That is, if the 'Partial IV' field is compressed, the communicating peers must perform rekeying more often, as the available Sender Sequence Number space that is used for the Partial IV becomes effectively smaller due to the compression. For instance, if only 3 bits of the Partial IV are sent, then the maximum Partial IV that can be used before having to rekey is only 23 - 1 = 7. Furthermore, any time the SCHC context Rules are updated on an OSCORE endpoint, that endpoint must perform a rekeying (see ). That is, the use of SCHC plays a role in triggering KUDOS executions and in affecting their cadence. Hence, the employed SCHC Rules and their update policies should ensure that the KUDOS executions occurring as their side effect do not significantly impair the gain expected from message compression.
Combining KUDOS with Access Control Resource where messages can be sent at the server might be following the enforcement of access control means on the request. For example, when combining KUDOS with the EDHOC and OSCORE profile of ACE , certain considerations must be taken into account to ensure proper access control behavior:
  • A KUDOS request that targets a non-KUDOS resource MUST trigger standard ACE-based access control checks.
  • A KUDOS request that targets a KUDOS resource MUST NOT trigger ACE-based access control.
To support this, the path of any KUDOS resource can be included in the ACE access control exclusion list (i.e., the "do not enforce access control" list). The same principles have to be applied if other means are used to enforce access control. In some deployment scenarios, an ACE Access Token may be bound to both CTX_OLD and CTX_NEW, allowing it to be valid and still usable after the execution of a KUDOS procedure. It is important to note that KUDOS is not compatible with the OSCORE profile of ACE , this is because KUDOS changes the OSCORE Master Secret, which is used as proof-of-possession key in that profile. However, as described above, KUDOS is compatible with the EDHOC and OSCORE profile of ACE .
Signaling KUDOS support in EDHOC The EDHOC protocol defines the transport of additional External Authorization Data (EAD) within an optional EAD field of the EDHOC messages (see ). An EAD field is composed of one or multiple EAD items, each of which specifies an identifying 'ead_label' encoded as a CBOR integer and an optional 'ead_value' encoded as a CBOR byte string. This document defines a new EDHOC EAD item KUDOS_EAD and registers its 'ead_label' in . By including this EAD item in an outgoing EDHOC message, a sender peer can indicate whether it supports KUDOS and in which modes, as well as query the other peer about its support. Note that peers do not have to use this EDHOC EAD item to be able to run KUDOS with each other, irrespective of the modes that they support. A KUDOS peer MUST only use the EDHOC EAD item KUDOS_EAD as non-critical. That is, when included in an EDHOC message, its 'ead_label' MUST be used with positive sign. The possible values of the 'ead_value' are as follows: Values for the EDHOC EAD Item KUDOS_EAD
Name Value Description
ASK h'' (0x40) Used only in EDHOC message_1. It asks the recipient peer to specify in EDHOC message_2 whether it supports KUDOS.
NONE h'00' (0x4100) Used only in EDHOC message_2 and message_3. It specifies that the sender peer does not support KUDOS.
FULL h'01' (0x4101) Used only in EDHOC message_2 and message_3. It specifies that the sender peer supports KUDOS in FS mode and no-FS mode.
PART h'02' (0x4102) Used only in EDHOC message_2 and message_3. It specifies that the sender peer supports KUDOS in no-FS mode only.
When the KUDOS_EAD item is included in EDHOC message_1 with 'ead_value' ASK, a recipient peer that supports the KUDOS_EAD item MUST specify whether it supports KUDOS in EDHOC message_2. When the KUDOS_EAD item is not included in EDHOC message_1 with 'ead_value' ASK, a recipient peer that supports the KUDOS_EAD item MAY still specify whether it supports KUDOS in EDHOC message_2. When the KUDOS_EAD item is included in EDHOC message_2 with 'ead_value' FULL or PART, a recipient peer that supports the KUDOS_EAD item SHOULD specify whether it supports KUDOS in EDHOC message_3. An exception applies in case, based on application policies or other context information, the recipient peer that receives EDHOC message_2 already knows that the sender peer is supposed to have such knowledge. When the KUDOS_EAD item is included in EDHOC message_2 with 'ead_value' NONE, a recipient peer that supports the KUDOS_EAD item MUST NOT specify whether it supports KUDOS in EDHOC message_3. In the following cases, the recipient peer silently ignores the KUDOS_EAD item specified in the received EDHOC message and does not include a KUDOS_EAD item in the next EDHOC message it sends (if any).
  • The recipient peer does not support the KUDOS_EAD item.
  • The KUDOS_EAD item is included in EDHOC message_1 with 'ead_value' different than ASK
  • The KUDOS_EAD item is included in EDHOC message_2 or message_3 with 'ead_value' ASK.
  • The KUDOS_EAD item is included in EDHOC message_4.
That is, by specifying 'ead_value' ASK in EDHOC message_1, a peer A can indicate to the other peer B that it wishes to know if B supports KUDOS and in what mode(s). In the following EDHOC message_2, the peer B indicates whether it supports KUDOS and in what mode(s), by specifying either NONE, FULL, or PART as 'ead_value'. Specifying the 'ead_value' FULL or PART in EDHOC message_2 also asks A to indicate whether it supports KUDOS in EDHOC message_3. To further illustrate the signaling process defined above, the following presents two examples of EDHOC execution where only the new KUDOS_EAD item is shown when present, assuming that no other EAD items are used by the two peers. In the example shown in , the EDHOC Initiator asks the EDHOC Responder about its support for KUDOS ('ead_value' = ASK). In EDHOC message_2, the Responder indicates that it supports both the FS and no-FS mode of KUDOS ('ead_value' = FULL). Finally, in EDHOC message_3, the Initiator indicates that it also supports both the FS and no-FS mode of KUDOS ('ead_value' = FULL). After the EDHOC execution has been successfully completed, both peers are aware that they both support KUDOS, in the FS and no-FS modes.
Example of EDHOC Execution with Signaling of Support for KUDOS (Both Peers Support KUDOS) EDHOC EDHOC Initiator Responder EAD_1: (TBD_LABEL, ASK) message_1 EAD_2: (TBD_LABEL, FULL) message_2 EAD_3: (TBD_LABEL, FULL) message_3 | | message_1 | | | | EAD_2: (TBD_LABEL, FULL) | |<--------------------------------------------------------+ | message_2 | | | | EAD_3: (TBD_LABEL, FULL) | +-------------------------------------------------------->| | message_3 | | | ]]>
In the example shown in , the EDHOC Initiator asks the EDHOC Responder about its support for KUDOS ('ead_value' = ASK). In EDHOC message_2, the Responder indicates that it does not support KUDOS at all ('ead_value' = NONE). Finally, in EDHOC message_3, the Initiator does not include the KUDOS_EAD item, since it already knows that using KUDOS with the other peer will not be possible. After the EDHOC execution has been successfully completed, the Initiator is aware that the Responder does not support KUDOS, which the two peers are not going to use with each other.
Example of EDHOC Execution with Signaling of Support for KUDOS (the EDHOC Responder Does Not Support KUDOS) EDHOC EDHOC Initiator Responder EAD_1: (TBD_LABEL, ASK) message_1 EAD_2: (TBD_LABEL, NONE) message_2 message_3 | | message_1 | | | | EAD_2: (TBD_LABEL, NONE) | |<--------------------------------------------------------+ | message_2 | | | +-------------------------------------------------------->| | message_3 | | | ]]>
Security Considerations Depending on the specific key update procedure used to establish a new OSCORE Security Context, the related security considerations also apply. As mentioned in , it is RECOMMENDED that the size for the nonces N1 and N2 is 8 bytes. Applications need to set the size of each nonce such that the probability of its value being repeated is negligible throughout executions of KUDOS that aim to update a given OSCORE Security Context, even in case of loss of state (e.g., due to a reboot occurred in an unprepared way). Considering the birthday paradox and a nonce size of 8 bytes, the average collision for each nonce will happen after the generation of 232 (X, nonce) pairs generated by a given peer (see ), which is considerably more than the number of such pairs that a peer is expected to generate throughout the update of a given OSCORE Security Context using KUDOS (in fact, that number is expected to typically be 1). Yet, determining the appropriate nonce size also ought to take into account the possible use of KUDOS in no-FS mode (see ), in which case every execution in no-FS mode between two given peers considers the same CTX_BOOTSTRAP as the OSCORE Security Context to update (see ), hence raising the chances of reusing a nonce. Overall, the size of the nonces N1 and N2 should be set such that the security level is harmonized with other components of the deployment. Considering the constraints of embedded implementations, there might be a need for allowing N1 and N2 values that have a size smaller than the recommended one. This is acceptable, provided that safety, reliability, and robustness within the system can still be assured. That is, if nonces with a smaller size are used and thus a collision will occur on average after fewer KUDOS executions that aim to update a given OSCORE Security Context, care must be taken to ensure that this does not pose significant problems, e.g., considering as benchmark a constrained server operating at a capacity of one request per second. The nonces exchanged in the KUDOS messages are sent in the clear, so using random nonces is preferable for maintaining privacy. Instead, if counter values are used (see ), this can leak information such as the frequency according to which two peers perform a key update. As discussed in , key update methods built on symmetric key exchange have weaker security properties compared to methods built on ephemeral Diffie-Hellman key exchange. In fact, while the two approaches can co-exist, rekeying with symmetric key exchange is not intended as a substitute for ephemeral Diffie-Hellman key exchange. Peers should periodically perform a key update based on ephemeral Diffie-Hellman key exchange (e.g., by running the EDHOC protocol ). The cadence of such periodic key updates should be determined based on how much the two peers and their network environment are constrained, as well as on the maximum amount of time and of exchanged data that are acceptable between two such consecutive key updates.
IANA Considerations This document has the following actions for IANA. Note to RFC Editor: Please replace all occurrences of "[RFC-XXXX]" with the RFC number of this specification and delete this paragraph.
OSCORE Flag Bits Registry IANA is asked to add the following entries to the "OSCORE Flag Bits" registry within the "Constrained RESTful Environments (CoRE) Parameters" registry group. Registrations in the OSCORE Flag Bits Registry
Bit Position Name Description Reference
0 (suggested) Extension-1 Flag Set to 1 if the OSCORE Option specifies a second byte, which includes the OSCORE flag bits 8-15 [RFC-XXXX]
8 Extension-2 Flag Set to 1 if the OSCORE Option specifies a third byte, which includes the OSCORE flag bits 16-23 [RFC-XXXX]
15 Nonce Flag Set to 1 if nonce is present in the compressed COSE object [RFC-XXXX]
16 Extension-3 Flag Set to 1 if the OSCORE Option specifies a fourth byte, which includes the OSCORE flag bits 24-31 [RFC-XXXX]
24 Extension-4 Flag Set to 1 if the OSCORE Option specifies a fifth byte, which includes the OSCORE flag bits 32-39 [RFC-XXXX]
32 Extension-5 Flag Set to 1 if the OSCORE Option specifies a sixth byte, which includes the OSCORE flag bits 40-47 [RFC-XXXX]
40 Extension-6 Flag Set to 1 if the OSCORE Option specifies a seventh byte, which includes the OSCORE flag bits 48-55 [RFC-XXXX]
48 Extension-7 Flag Set to 1 if the OSCORE Option specifies an eighth byte, which includes the OSCORE flag bits 56-63 [RFC-XXXX]
In the same registry, IANA is asked to mark as 'Unassigned' the entry with Bit Position of 1, i.e., to update the entry as follows. Update in the OSCORE Flag Bits Registry
Bit Position Name Description Reference
1 Unassigned    
CoAP Option Numbers Registry IANA is asked to add this document as a reference for the OSCORE Option in the "CoAP Option Numbers" registry within the "Constrained RESTful Environments (CoRE) Parameters" registry group.
EDHOC External Authorization Data Registry IANA is asked to add the following entry to the "EDHOC External Authorization Data" registry defined in within the "Ephemeral Diffie-Hellman Over COSE (EDHOC)" registry group. Registrations in the EDHOC External Authorization Data Registry
Name Label Description Reference
KUDOS_EAD TBD1 Indicates whether this peer supports KUDOS and in which mode(s) [RFC-XXXX]
The Well-Known URI Registry IANA is asked to add the 'kudos' well-known URI to the Well-Known URIs registry as defined by .
  • URI suffix: kudos
  • Change controller: IETF
  • Specification document(s): [RFC-XXXX]
  • Related information: None
Resource Type (rt=) Link Target Attribute Values Registry IANA is requested to add the resource type "core.kudos" to the "Resource Type (rt=) Link Target Attribute Values" registry under the registry group "Constrained RESTful Environments (CoRE) Parameters".
  • Value: "core.kudos"
  • Description: KUDOS resource.
  • Reference: [RFC-XXXX]
References Normative References HMAC-based Extract-and-Expand Key Derivation Function (HKDF) This document specifies a simple Hashed Message Authentication Code (HMAC)-based key derivation function (HKDF), which can be used as a building block in various protocols and applications. The key derivation function (KDF) is intended to support a wide range of applications and requirements, and is conservative in its use of cryptographic hash functions. This document is not an Internet Standards Track specification; it is published for informational purposes. The Constrained Application Protocol (CoAP) The Constrained Application Protocol (CoAP) is a specialized web transfer protocol for use with constrained nodes and constrained (e.g., low-power, lossy) networks. The nodes often have 8-bit microcontrollers with small amounts of ROM and RAM, while constrained networks such as IPv6 over Low-Power Wireless Personal Area Networks (6LoWPANs) often have high packet error rates and a typical throughput of 10s of kbit/s. The protocol is designed for machine- to-machine (M2M) applications such as smart energy and building automation. CoAP provides a request/response interaction model between application endpoints, supports built-in discovery of services and resources, and includes key concepts of the Web such as URIs and Internet media types. CoAP is designed to easily interface with HTTP for integration with the Web while meeting specialized requirements such as multicast support, very low overhead, and simplicity for constrained environments. Observing Resources in the Constrained Application Protocol (CoAP) The Constrained Application Protocol (CoAP) is a RESTful application protocol for constrained nodes and networks. The state of a resource on a CoAP server can change over time. This document specifies a simple protocol extension for CoAP that enables CoAP clients to "observe" resources, i.e., to retrieve a representation of a resource and keep this representation updated by the server over a period of time. The protocol follows a best-effort approach for sending new representations to clients and provides eventual consistency between the state observed by each client and the actual resource state at the server. Object Security for Constrained RESTful Environments (OSCORE) This document defines Object Security for Constrained RESTful Environments (OSCORE), a method for application-layer protection of the Constrained Application Protocol (CoAP), using CBOR Object Signing and Encryption (COSE). OSCORE provides end-to-end protection between endpoints communicating using CoAP or CoAP-mappable HTTP. OSCORE is designed for constrained nodes and networks supporting a range of proxy operations, including translation between different transport protocols. Although an optional functionality of CoAP, OSCORE alters CoAP options processing and IANA registration. Therefore, this document updates RFC 7252. Concise Binary Object Representation (CBOR) The Concise Binary Object Representation (CBOR) is a data format whose design goals include the possibility of extremely small code size, fairly small message size, and extensibility without the need for version negotiation. These design goals make it different from earlier binary serializations such as ASN.1 and MessagePack. This document obsoletes RFC 7049, providing editorial improvements, new details, and errata fixes while keeping full compatibility with the interchange format of RFC 7049. It does not create a new version of the format. Ephemeral Diffie-Hellman Over COSE (EDHOC) This document specifies Ephemeral Diffie-Hellman Over COSE (EDHOC), a very compact and lightweight authenticated Diffie-Hellman key exchange with ephemeral keys. EDHOC provides mutual authentication, forward secrecy, and identity protection. EDHOC is intended for usage in constrained scenarios, and a main use case is to establish an Object Security for Constrained RESTful Environments (OSCORE) security context. By reusing CBOR Object Signing and Encryption (COSE) for cryptography, Concise Binary Object Representation (CBOR) for encoding, and Constrained Application Protocol (CoAP) for transport, the additional code size can be kept very low. Key words for use in RFCs to Indicate Requirement Levels In many standards track documents several words are used to signify the requirements in the specification. These words are often capitalized. This document defines these words as they should be interpreted in IETF documents. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements. Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words RFC 2119 specifies common key words that may be used in protocol specifications. This document aims to reduce the ambiguity by clarifying that only UPPERCASE usage of the key words have the defined special meanings. Informative References The Transport Layer Security (TLS) Protocol Version 1.3 This document specifies version 1.3 of the Transport Layer Security (TLS) protocol. TLS allows client/server applications to communicate over the Internet in a way that is designed to prevent eavesdropping, tampering, and message forgery. This document updates RFCs 5705 and 6066, and obsoletes RFCs 5077, 5246, and 6961. This document also specifies new requirements for TLS 1.2 implementations. Using IEEE 802.15.4e Time-Slotted Channel Hopping (TSCH) in the Internet of Things (IoT): Problem Statement This document describes the environment, problem statement, and goals for using the Time-Slotted Channel Hopping (TSCH) Medium Access Control (MAC) protocol of IEEE 802.14.4e in the context of Low-Power and Lossy Networks (LLNs). The set of goals enumerated in this document form an initial set only. Minimal IPv6 over the TSCH Mode of IEEE 802.15.4e (6TiSCH) Configuration This document describes a minimal mode of operation for an IPv6 over the TSCH mode of IEEE 802.15.4e (6TiSCH) network. This minimal mode of operation specifies the baseline set of protocols that need to be supported and the recommended configurations and modes of operation sufficient to enable a 6TiSCH functional network. 6TiSCH provides IPv6 connectivity over a Time-Slotted Channel Hopping (TSCH) mesh composed of IEEE Std 802.15.4 TSCH links. This minimal mode uses a collection of protocols with the respective configurations, including the IPv6 Low-Power Wireless Personal Area Network (6LoWPAN) framework, enabling interoperable IPv6 connectivity over IEEE Std 802.15.4 TSCH. This minimal configuration provides the necessary bandwidth for network and security bootstrapping and defines the proper link between the IETF protocols that interface to IEEE Std 802.15.4 TSCH. This minimal mode of operation should be implemented by all 6TiSCH-compliant devices. Constrained Join Protocol (CoJP) for 6TiSCH This document describes the minimal framework required for a new device, called a "pledge", to securely join a 6TiSCH (IPv6 over the Time-Slotted Channel Hopping mode of IEEE 802.15.4) network. The framework requires that the pledge and the JRC (Join Registrar/Coordinator, a central entity), share a symmetric key. How this key is provisioned is out of scope of this document. Through a single CoAP (Constrained Application Protocol) request-response exchange secured by OSCORE (Object Security for Constrained RESTful Environments), the pledge requests admission into the network, and the JRC configures it with link-layer keying material and other parameters. The JRC may at any time update the parameters through another request-response exchange secured by OSCORE. This specification defines the Constrained Join Protocol and its CBOR (Concise Binary Object Representation) data structures, and it describes how to configure the rest of the 6TiSCH communication stack for this join process to occur in a secure manner. Additional security mechanisms may be added on top of this minimal framework. Authentication and Authorization for Constrained Environments Using the OAuth 2.0 Framework (ACE-OAuth) This specification defines a framework for authentication and authorization in Internet of Things (IoT) environments called ACE-OAuth. The framework is based on a set of building blocks including OAuth 2.0 and the Constrained Application Protocol (CoAP), thus transforming a well-known and widely used authorization solution into a form suitable for IoT devices. Existing specifications are used where possible, but extensions are added and profiles are defined to better serve the IoT use cases. The Object Security for Constrained RESTful Environments (OSCORE) Profile of the Authentication and Authorization for Constrained Environments (ACE) Framework This document specifies a profile for the Authentication and Authorization for Constrained Environments (ACE) framework. It utilizes Object Security for Constrained RESTful Environments (OSCORE) to provide communication security and proof-of-possession for a key owned by the client and bound to an OAuth 2.0 access token. Constrained RESTful Environments (CoRE) Resource Directory In many Internet of Things (IoT) applications, direct discovery of resources is not practical due to sleeping nodes or networks where multicast traffic is inefficient. These problems can be solved by employing an entity called a Resource Directory (RD), which contains information about resources held on other servers, allowing lookups to be performed for those resources. The input to an RD is composed of links, and the output is composed of links constructed from the information stored in the RD. This document specifies the web interfaces that an RD supports for web servers to discover the RD and to register, maintain, look up, and remove information on resources. Furthermore, new target attributes useful in conjunction with an RD are defined. Well-Known Uniform Resource Identifiers (URIs) This memo defines a path prefix for "well-known locations", "/.well-known/", in selected Uniform Resource Identifier (URI) schemes. In doing so, it obsoletes RFC 5785 and updates the URI schemes defined in RFC 7230 to reserve that space. It also updates RFC 7595 to track URI schemes that support well-known URIs in their registry. SCHC: Generic Framework for Static Context Header Compression and Fragmentation This document defines the Static Context Header Compression and fragmentation (SCHC) framework, which provides both a header compression mechanism and an optional fragmentation mechanism. SCHC has been designed with Low-Power Wide Area Networks (LPWANs) in mind. SCHC compression is based on a common static context stored both in the LPWAN device and in the network infrastructure side. This document defines a generic header compression mechanism and its application to compress IPv6/UDP headers. This document also specifies an optional fragmentation and reassembly mechanism. It can be used to support the IPv6 MTU requirement over the LPWAN technologies. Fragmentation is needed for IPv6 datagrams that, after SCHC compression or when such compression was not possible, still exceed the Layer 2 maximum payload size. The SCHC header compression and fragmentation mechanisms are independent of the specific LPWAN technology over which they are used. This document defines generic functionalities and offers flexibility with regard to parameter settings and mechanism choices. This document standardizes the exchange over the LPWAN between two SCHC entities. Settings and choices specific to a technology or a product are expected to be grouped into profiles, which are specified in other documents. Data models for the context and profiles are out of scope. Static Context Header Compression (SCHC) for the Constrained Application Protocol (CoAP) This document defines how to compress Constrained Application Protocol (CoAP) headers using the Static Context Header Compression and fragmentation (SCHC) framework. SCHC defines a header compression mechanism adapted for Constrained Devices. SCHC uses a static description of the header to reduce the header's redundancy and size. While RFC 8724 describes the SCHC compression and fragmentation framework, and its application for IPv6/UDP headers, this document applies SCHC to CoAP headers. The CoAP header structure differs from IPv6 and UDP, since CoAP uses a flexible header with a variable number of options, themselves of variable length. The CoAP message format is asymmetric: the request messages have a header format different from the format in the response messages. This specification gives guidance on applying SCHC to flexible headers and how to leverage the asymmetry for more efficient compression Rules. Constrained Application Protocol (CoAP) Option for No Server Response There can be machine-to-machine (M2M) scenarios where server responses to client requests are redundant. This kind of open-loop exchange (with no response path from the server to the client) may be desired to minimize resource consumption in constrained systems while updating many resources simultaneously or performing high-frequency updates. CoAP already provides Non-confirmable (NON) messages that are not acknowledged by the recipient. However, the request/response semantics still require the server to respond with a status code indicating "the result of the attempt to understand and satisfy the request", per RFC 7252. This specification introduces a CoAP option called 'No-Response'. Using this option, the client can explicitly express to the server its disinterest in all responses against the particular request. This option also provides granular control to enable expression of disinterest to a particular response class or a combination of response classes. The server MAY decide to suppress the response by not transmitting it back to the client according to the value of the No-Response option in the request. This option may be effective for both unicast and multicast requests. This document also discusses a few examples of applications that benefit from this option. Randomness Requirements for Security Security systems are built on strong cryptographic algorithms that foil pattern analysis attempts. However, the security of these systems is dependent on generating secret quantities for passwords, cryptographic keys, and similar quantities. The use of pseudo-random processes to generate secret quantities can result in pseudo-security. A sophisticated attacker may find it easier to reproduce the environment that produced the secret quantities and to search the resulting small set of possibilities than to locate the quantities in the whole of the potential number space. Choosing random quantities to foil a resourceful and motivated adversary is surprisingly difficult. This document points out many pitfalls in using poor entropy sources or traditional pseudo-random number generation techniques for generating such quantities. It recommends the use of truly random hardware techniques and shows that the existing hardware on many systems can be used for this purpose. It provides suggestions to ameliorate the problem when a hardware solution is not available, and it gives examples of how large such quantities need to be for some applications. This document specifies an Internet Best Current Practices for the Internet Community, and requests discussion and suggestions for improvements. Usage Limits on AEAD Algorithms IBM Research Europe - Zurich Mozilla Cloudflare An Authenticated Encryption with Associated Data (AEAD) algorithm provides confidentiality and integrity. Excessive use of the same key can give an attacker advantages in breaking these properties. This document provides simple guidance for users of common AEAD functions about how to limit the use of keys in order to bound the advantage given to an attacker. It considers limits in both single- and multi-key settings. Key Usage Limits for OSCORE RISE AB RISE AB Object Security for Constrained RESTful Environments (OSCORE) uses AEAD algorithms to ensure confidentiality and integrity of exchanged messages. Due to known issues allowing forgery attacks against AEAD algorithms, limits should be followed on the number of times a specific key is used for encryption or decryption. Among other reasons, approaching key usage limits requires updating the OSCORE keying material before communications can securely continue. This document defines how two OSCORE peers can follow these key usage limits and what steps they should take to preserve the security of their communications. Ephemeral Diffie-Hellman Over COSE (EDHOC) and Object Security for Constrained Environments (OSCORE) Profile for Authentication and Authorization for Constrained Environments (ACE) Ericsson Ericsson RISE RISE This document specifies a profile for the Authentication and Authorization for Constrained Environments (ACE) framework. It utilizes Ephemeral Diffie-Hellman Over COSE (EDHOC) for achieving mutual authentication between an ACE-OAuth client and resource server, and it binds an authentication credential of the client to an ACE-OAuth access token. EDHOC also establishes an Object Security for Constrained RESTful Environments (OSCORE) Security Context, which is used to secure communications between the client and resource server when accessing protected resources according to the authorization information indicated in the access token. This profile can be used to delegate management of authorization information from a resource-constrained server to a trusted host with less severe limitations regarding processing power and memory. Lightweight Machine to Machine Technical Specification - Core, Approved Version 1.2, OMA-TS-LightweightM2M_Core-V1_2-20201110-A Open Mobile Alliance Security of Symmetric Ratchets and Key Chains - Implications for Protocols like TLS 1.3, Signal, and PQ3 Ericsson Research Lightweight Machine to Machine Technical Specification - Transport Bindings, Approved Version 1.2, OMA-TS-LightweightM2M_Transport-V1_2-20201110-A Open Mobile Alliance
Examples The following sections show two examples of KUDOS being executed, both showing successfully completion of KUDOS and the procedure failing.
Successful KUDOS Execution Initiated with a Request Message The following shows a successful execution of KUDOS where KUDOS is started by the client sending a divergent KUDOS message as a CoAP request. KUDOS status: KUDOS status: - CTX_OLD: -,- - CTX_OLD: -,- - State: IDLE (0,0) - State: IDLE (0,0) Client Server Generate N1, X1 CTX_TEMP = updateCtx( X1 | N1, 0x, CTX_OLD ) Request #1 Protect with CTX_TEMP /.well-known/kudos OSCORE { KUDOS status: ... CTX_TEMP = updateCtx( CTX_OLD: X1, N1 Partial IV: 0 0x, State: BUSY (1,0) ... X1 | N1, d flag: 1 CTX_OLD ) x: X1 = b'00000111' nonce: N1 Verify with CTX_TEMP ... } Encrypted Payload { ... } KUDOS status: CTX_OLD: -, - State: BUSY (0,1) Generate N2, X2 CTX_NEW = updateCtx( X2 N2), X1 N1) CTX_OLD ) Response #1 Protect with CTX_NEW OSCORE { ... KUDOS status: CTX_NEW = updateCtx( Partial IV: 0 CTX_OLD: X2, N2 X1 N1, ... State: PENDING (1,1) X2 N2 d flag: 1 CTX_OLD ) x: X2 = b'01000111' nonce: N2 Verify with CTX_NEW ... } / key confirmation / Encrypted Payload { ... Pre-IDLE steps: } Delete CTX_TEMP Delete CTX_OLD, X1, N1 KUDOS status: CTX_NEW: -, - State: IDLE (0,0) The actual key update process ends here. The two peers can use the new Security Context CTX_NEW. Request #2 Protect with CTX_NEW /temp OSCORE { ... } Verify with CTX_NEW Encrypted Payload { Application Payload / key confirmation / ... } Pre-IDLE steps: Delete CTX_TEMP Delete CTX_OLD, X2, N2 KUDOS status: CTX_NEW: -, - State: IDLE (0,0) Response #2 Protect with CTX_NEW Verify with CTX_NEW OSCORE { ... } Encrypted Payload { ... Application Payload } | /.well-known/kudos | OSCORE { | KUDOS status: | ... | CTX_TEMP = updateCtx( CTX_OLD: X1, N1 | Partial IV: 0 | 0x, State: BUSY (1,0) | ... | X1 | N1, | d flag: 1 | CTX_OLD ) | x: X1 = b'00000111' | | nonce: N1 | Verify with CTX_TEMP | ... | | } | | Encrypted Payload { | | ... | | } | | | | | KUDOS status: | | CTX_OLD: -, - | | State: BUSY (0,1) | | | | | | Generate N2, X2 | | | | CTX_NEW = updateCtx( | | X2 | N2), | | X1 | N1), | | CTX_OLD ) | | | Response #1 | |<---------------------+ Protect with CTX_NEW | OSCORE { | | ... | KUDOS status: CTX_NEW = updateCtx( | Partial IV: 0 | CTX_OLD: X2, N2 X1 | N1, | ... | State: PENDING (1,1) X2 | N2 , | d flag: 1 | CTX_OLD ) | x: X2 = b'01000111' | | nonce: N2 | Verify with CTX_NEW | ... | | } | / key confirmation / | Encrypted Payload { | | ... | Pre-IDLE steps: | } | Delete CTX_TEMP | | Delete CTX_OLD, X1, N1 | | | | KUDOS status: | | CTX_NEW: -, - | | State: IDLE (0,0) | | | | The actual key update process ends here. The two peers can use the new Security Context CTX_NEW. | | | Request #2 | Protect with CTX_NEW +--------------------->| /temp | OSCORE { | | ... | | } | Verify with CTX_NEW | Encrypted Payload { | | Application Payload | / key confirmation / | ... | | } | Pre-IDLE steps: | | Delete CTX_TEMP | | Delete CTX_OLD, X2, N2 | | | | KUDOS status: | | CTX_NEW: -, - | | State: IDLE (0,0) | Response #2 | |<---------------------+ Protect with CTX_NEW Verify with CTX_NEW | OSCORE { | | ... | | } | | Encrypted Payload { | | ... | | Application Payload | | } | | | ]]>
Successful KUDOS Execution Initiated with a Response Message The following shows a successful execution of KUDOS where KUDOS is started by the server sending a divergent KUDOS message as a CoAP response. KUDOS status: KUDOS status: - CTX_OLD: -,- - CTX_OLD: -,- - State: IDLE (0,0) - State: IDLE (0,0) Client Server Request #1 Protect with CTX_OLD /temp OSCORE { ... } Verify with CTX_OLD Encrypted Payload { ... Generate N1, X1 Application Payload } CTX_TEMP = updateCtx( X1 | N1, 0x, CTX_OLD ) Response #1 Protect with CTX_TEMP OSCORE { ... KUDOS status: CTX_TEMP = updateCtx( Partial IV: 0 CTX_OLD: X1, N1 0x, ... State: BUSY (1,0) X1 | N1, d flag: 1 CTX_OLD ) x: X1 = b'00000111' nonce: N1 Verify with CTX_TEMP ... } Encrypted Payload { ... } KUDOS status: - CTX_OLD: -,- - State: BUSY (0,1) Generate N2, X2 CTX_NEW = updateCtx( X2 N2, X1 N1, CTX_OLD ) Request #2 Protect with CTX_NEW /.well-known/kudos OSCORE { KUDOS status: ... - CTX_OLD: X2, N2 d flag: 1 CTX_NEW = updateCtx( - State: PENDING (1,1) x: X2 = b'01000111' X1 N1, nonce: N2 X2 N2, ... CTX_OLD ) } Encrypted Payload { Verify with CTX_NEW ... Application Payload / key confirmation / } Pre-IDLE steps: Delete CTX_TEMP Delete CTX_OLD, X1, N1 KUDOS status: - CTX_NEW: -,- - State: IDLE (0,0) The actual key update process ends here. The two peers can use the new Security Context CTX_NEW. Response #2 Protect with CTX_NEW OSCORE { ... Verify with CTX_NEW } Encrypted Payload { / key confirmation / ... Application Payload Pre-IDLE steps: } Delete CTX_TEMP Delete CTX_OLD, X1, N1 KUDOS status: CTX_NEW: -, - State: IDLE (0,0) | /temp | OSCORE { | | ... | | } | Verify with CTX_OLD | Encrypted Payload { | | ... | Generate N1, X1 | Application Payload | | } | CTX_TEMP = updateCtx( | | X1 | N1, | | 0x, | | CTX_OLD ) | | | Response #1 | |<---------------------+ Protect with CTX_TEMP | OSCORE { | | ... | KUDOS status: CTX_TEMP = updateCtx( | Partial IV: 0 | CTX_OLD: X1, N1 0x, | ... | State: BUSY (1,0) X1 | N1, | d flag: 1 | CTX_OLD ) | x: X1 = b'00000111' | | nonce: N1 | Verify with CTX_TEMP | ... | | } | | Encrypted Payload { | | ... | | } | | | KUDOS status: | | - CTX_OLD: -,- | | - State: BUSY (0,1) | | | | | | Generate N2, X2 | | | | CTX_NEW = updateCtx( | | X2 | N2, | | X1 | N1, | | CTX_OLD ) | | | | | Request #2 | Protect with CTX_NEW +--------------------->| /.well-known/kudos | OSCORE { | KUDOS status: | ... | - CTX_OLD: X2, N2 | d flag: 1 | CTX_NEW = updateCtx( - State: PENDING (1,1) | x: X2 = b'01000111' | X1 | N1, | nonce: N2 | X2 | N2, | ... | CTX_OLD ) | } | | Encrypted Payload { | Verify with CTX_NEW | ... | | Application Payload | / key confirmation / | } | | | Pre-IDLE steps: | | Delete CTX_TEMP | | Delete CTX_OLD, X1, N1 | | | | KUDOS status: | | - CTX_NEW: -,- | | - State: IDLE (0,0) | | | | | | | | The actual key update process ends here. The two peers can use the new Security Context CTX_NEW. | | | Response #2 | |<---------------------+ Protect with CTX_NEW | OSCORE { | | ... | Verify with CTX_NEW | } | | Encrypted Payload { | / key confirmation / | ... | | Application Payload | Pre-IDLE steps: | } | Delete CTX_TEMP | | Delete CTX_OLD, X1, N1 | | | | KUDOS status: | | CTX_NEW: -, - | | State: IDLE (0,0) | | | | ]]>
Successful KUDOS Execution Initiated with a Request Message, with Non-capable Server that has Rebooted The peers have run KUDOS prior to this KUDOS execution and have learned that they must from now on run KUDOS only in no-FS mode. KUDOS status: KUDOS status: - CTX_OLD: -,- - No CTX_OLD due to reboot - State: IDLE (0,0) - State: IDLE (0,0) Client Server (initiator) (responder) Generate N1, X1 CTX_TEMP = updateCtx( X1 | N1, 0x, CTX_BOOTSTRAP ) Request #1 Protect with CTX_TEMP /.well-known/kudos OSCORE { KUDOS status: ... CTX_TEMP = updateCtx( CTX_BOOTSTRAP: X1, N1 Partial IV: 0 0x, State: BUSY (1,0) ... X1 | N1, d flag: 1 CTX_BOOTSTRAP ) x: X1 = b'00010111' nonce: N1 Verify with CTX_TEMP ... } Encrypted Payload { ... } KUDOS status: CTX_BOOTSTRAP: - - State: BUSY (0,1) Generate N2, X2 CTX_NEW = updateCtx( X2 N2), X1 N1), CTX_BOOTSTRAP ) Response #1 Protect with CTX_NEW OSCORE { ... KUDOS status: CTX_NEW = updateCtx( Partial IV: 0 CTX_BOOTSTRAP: X2, N2 X1 N1, ... State: PENDING (1,1) X2 N2 , d flag: 1 CTX_BOOTSTRAP) x: X2 = b'01010111' nonce: N2 Verify with CTX_NEW ... } / key confirmation / Encrypted Payload { ... Pre-IDLE steps: } Delete CTX_BOOTSTRAP Delete X1, N1 Delete CTX_TEMP Delete CTX_OLD KUDOS status: CTX_NEW: -, - State: IDLE (0,0) The actual key update process ends here. The two peers can use the new Security Context CTX_NEW. Request #2 Protect with CTX_NEW /temp OSCORE { ... } Verify with CTX_NEW Encrypted Payload { Application Payload / key confirmation / ... } Pre-IDLE steps: Delete CTX_BOOTSTRAP Delete X2, N2 Delete CTX_TEMP KUDOS status: CTX_NEW: -, - State: IDLE (0,0) Response #2 Protect with CTX_NEW Verify with CTX_NEW OSCORE { ... } Encrypted Payload { ... Application Payload } | /.well-known/kudos | OSCORE { | KUDOS status: | ... | CTX_TEMP = updateCtx( CTX_BOOTSTRAP: X1, N1 | Partial IV: 0 | 0x, State: BUSY (1,0) | ... | X1 | N1, | d flag: 1 | CTX_BOOTSTRAP ) | x: X1 = b'00010111' | | nonce: N1 | Verify with CTX_TEMP | ... | | } | | Encrypted Payload { | | ... | | } | | | | | KUDOS status: | | CTX_BOOTSTRAP: -,- | | State: BUSY (0,1) | | | | | | Generate N2, X2 | | | | CTX_NEW = updateCtx( | | X2 | N2), | | X1 | N1), | | CTX_BOOTSTRAP ) | | | Response #1 | |<---------------------+ Protect with CTX_NEW | OSCORE { | | ... | KUDOS status: CTX_NEW = updateCtx( | Partial IV: 0 | CTX_BOOTSTRAP: X2, N2 X1 | N1, | ... | State: PENDING (1,1) X2 | N2 , | d flag: 1 | CTX_BOOTSTRAP)| x: X2 = b'01010111' | | nonce: N2 | Verify with CTX_NEW | ... | | } | / key confirmation / | Encrypted Payload { | | ... | Pre-IDLE steps: | } | Delete CTX_BOOTSTRAP | | Delete X1, N1 | | Delete CTX_TEMP | | Delete CTX_OLD | | | | KUDOS status: | | CTX_NEW: -, - | | State: IDLE (0,0) | | | | The actual key update process ends here. The two peers can use the new Security Context CTX_NEW. | | | Request #2 | Protect with CTX_NEW +--------------------->| /temp | OSCORE { | | ... | | } | Verify with CTX_NEW | Encrypted Payload { | | Application Payload | / key confirmation / | ... | | } | Pre-IDLE steps: | | Delete CTX_BOOTSTRAP | | Delete X2, N2 | | Delete CTX_TEMP | | | | KUDOS status: | | CTX_NEW: -, - | | State: IDLE (0,0) | Response #2 | |<---------------------+ Protect with CTX_NEW Verify with CTX_NEW | OSCORE { | | ... | | } | | Encrypted Payload { | | ... | | Application Payload | | } | | | ]]>
Successful KUDOS Execution Initiated with a Request Message, where the Client Executes KUDOS again after the first Execution A second KUDOS execution is started by the client immediately after a successful KUDOS key update. KUDOS status: KUDOS status: - CTX_OLD: -,- - CTX_OLD: -,- - State: IDLE (0,0) - State: IDLE (0,0) Client Server (initiator) (responder) Generate N1, X1 CTX_TEMP = updateCtx( X1 | N1, 0x, CTX_OLD ) Request #1 Protect with CTX_TEMP /.well-known/kudos OSCORE { KUDOS status: ... CTX_TEMP = updateCtx( CTX_OLD: X1, N1 Partial IV: 0 0x, State: BUSY (1,0) ... X1 | N1, d flag: 1 CTX_OLD ) x: X1 = b'00000111' nonce: N1 Verify with CTX_TEMP ... } Encrypted Payload { ... } KUDOS status: CTX_OLD: -, - State: BUSY (0,1) Generate N2, X2 CTX_NEW = updateCtx( X2 N2), X1 N1) CTX_OLD ) Response #1 Protect with CTX_NEW OSCORE { ... KUDOS status: CTX_NEW = updateCtx( Partial IV: 0 CTX_NEW: X2, N2 X1 N1, ... State: PENDING (1,1) X2 N2 d flag: 1 CTX_OLD ) x: X2 = b'01000111' nonce: N2 Verify with CTX_NEW ... } / key confirmation / Encrypted Payload { ... Pre-IDLE steps: } Delete CTX_TEMP Delete CTX_OLD, X1, N1 KUDOS status: CTX_NEW: -, - State: IDLE (0,0) The actual key update process ends here. The two peers can use the new Security Context CTX_NEW. Here the client sends a divergent message Generate N3, X3 CTX_TEMP' = updateCtx( X3 | N3, 0x, CTX_NEW ) Request #2 Protect with CTX_TEMP' /.well-known/kudos OSCORE { KUDOS status: ... CTX_TEMP' = updateCtx( CTX_NEW: X3, N3 Partial IV: 0 0x, State: BUSY (1,0) ... X3 | N3, d flag: 1 CTX_OLD ) x: X3 = b'00000111' nonce: N3 Verify with CTX_TEMP' ... / verification fails / } Encrypted Payload { ... CTX_TEMP' = updateCtx( } 0x, X3 | N3, CTX_NEW ) Verify with CTX_TEMP' / successful verification / Cleanup: Delete CTX_TEMP Delete CTX_OLD, -, - KUDOS status: CTX_NEW: X2, N2 State: BUSY (0,1) CTX_NEW' = updateCtx( X2 N2), X3 N3) CTX_NEW ) Response #3 Protect with CTX_NEW' OSCORE { ... KUDOS status: CTX_NEW' = updateCtx( Partial IV: 0 CTX_NEW': -, - X3 N3, ... State: PENDING (1,1) X2 N2 d flag: 1 CTX_NEW ) x: X2 = b'01000111' nonce: N2 Verify with CTX_NEW' ... } / key confirmation / Encrypted Payload { ... Pre-IDLE steps: } Delete CTX_TEMP' Delete CTX_NEW, X3, N3 KUDOS status: CTX_NEW': -, - State: IDLE (0,0) The actual key update process ends here. The two peers can use the new Security Context CTX_NEW. Request #3 Protect with CTX_NEW' /temp OSCORE { ... } Verify with CTX_NEW' Encrypted Payload { Application Payload / key confirmation / ... } Pre-IDLE steps: Delete CTX_TEMP' Delete CTX_NEW, X2, N2 KUDOS status: CTX_NEW': -, - State: IDLE (0,0) Response #3 Protect with CTX_NEW' Verify with CTX_NEW' OSCORE { ... } Encrypted Payload { ... Application Payload } | /.well-known/kudos | OSCORE { | KUDOS status: | ... | CTX_TEMP = updateCtx( CTX_OLD: X1, N1 | Partial IV: 0 | 0x, State: BUSY (1,0) | ... | X1 | N1, | d flag: 1 | CTX_OLD ) | x: X1 = b'00000111' | | nonce: N1 | Verify with CTX_TEMP | ... | | } | | Encrypted Payload { | | ... | | } | | | | | KUDOS status: | | CTX_OLD: -, - | | State: BUSY (0,1) | | | | | | Generate N2, X2 | | | | CTX_NEW = updateCtx( | | X2 | N2), | | X1 | N1), | | CTX_OLD ) | | | Response #1 | |<---------------------+ Protect with CTX_NEW | OSCORE { | | ... | KUDOS status: CTX_NEW = updateCtx( | Partial IV: 0 | CTX_NEW: X2, N2 X1 | N1, | ... | State: PENDING (1,1) X2 | N2 , | d flag: 1 | CTX_OLD ) | x: X2 = b'01000111' | | nonce: N2 | Verify with CTX_NEW | ... | | } | / key confirmation / | Encrypted Payload { | | ... | Pre-IDLE steps: | } | Delete CTX_TEMP | | Delete CTX_OLD, X1, N1 | | | | KUDOS status: | | CTX_NEW: -, - | | State: IDLE (0,0) | | | | The actual key update process ends here. The two peers can use the new Security Context CTX_NEW. Here the client sends a divergent message | | Generate N3, X3 | | | | CTX_TEMP' = updateCtx( | | X3 | N3, | | 0x, | | CTX_NEW ) | | | | | Request #2 | Protect with CTX_TEMP' +--------------------->| /.well-known/kudos | OSCORE { | KUDOS status: | ... | CTX_TEMP' = updateCtx( CTX_NEW: X3, N3 | Partial IV: 0 | 0x, State: BUSY (1,0) | ... | X3 | N3, | d flag: 1 | CTX_OLD ) | x: X3 = b'00000111' | | nonce: N3 | Verify with CTX_TEMP' | ... | / verification fails / | } | | Encrypted Payload { | | ... | CTX_TEMP' = updateCtx( | } | 0x, | | X3 | N3, | | CTX_NEW ) | | | | Verify with CTX_TEMP' | | / successful verification / | | | | Cleanup: | | Delete CTX_TEMP | | Delete CTX_OLD, -, - | | | | KUDOS status: | | CTX_NEW: X2, N2 | | State: BUSY (0,1) | | | | | | CTX_NEW' = updateCtx( | | X2 | N2), | | X3 | N3), | | CTX_NEW ) | | | | | Response #3 | |<---------------------+ Protect with CTX_NEW' | OSCORE { | | ... | KUDOS status: CTX_NEW' = updateCtx( | Partial IV: 0 | CTX_NEW': -, - X3 | N3, | ... | State: PENDING (1,1) X2 | N2 , | d flag: 1 | CTX_NEW ) | x: X2 = b'01000111' | | nonce: N2 | Verify with CTX_NEW' | ... | | } | / key confirmation / | Encrypted Payload { | | ... | Pre-IDLE steps: | } | Delete CTX_TEMP' | | Delete CTX_NEW, X3, N3 | | | | KUDOS status: | | CTX_NEW': -, - | | State: IDLE (0,0) | | | | The actual key update process ends here. The two peers can use the new Security Context CTX_NEW. | | | Request #3 | Protect with CTX_NEW' +--------------------->| /temp | OSCORE { | | ... | | } | Verify with CTX_NEW' | Encrypted Payload { | | Application Payload | / key confirmation / | ... | | } | Pre-IDLE steps: | | Delete CTX_TEMP' | | Delete CTX_NEW, X2, N2 | | | | | | KUDOS status: | | CTX_NEW': -, - | | State: IDLE (0,0) | Response #3 | |<---------------------+ Protect with CTX_NEW' Verify with CTX_NEW' | OSCORE { | | ... | | } | | Encrypted Payload { | | ... | | Application Payload | | } | | | ]]>
Successful KUDOS Execution Initiated with a Request Message, where KUDOS Response #1 is Lost The server's first response is dropped by the network, thus the client retries and both sides end up deriving the same a CTX_NEW. KUDOS status: KUDOS status: - CTX_OLD: -,- - CTX_OLD: -,- - State: IDLE (0,0) - State: IDLE (0,0) Client Server (initiator) (responder) Generate N1, X1 CTX_TEMP = updateCtx( X1 | N1, 0x, CTX_OLD ) Request #1 Protect with CTX_TEMP /.well-known/kudos OSCORE { KUDOS status: ... CTX_TEMP = updateCtx( CTX_OLD: X1, N1 Partial IV: 0 0x, State: BUSY (1,0) ... X1 | N1, d flag: 1 CTX_OLD ) x: X1 = b'00000111' nonce: N1 Verify with CTX_TEMP ... } Encrypted Payload { ... } KUDOS status: CTX_OLD: -, - State: BUSY (0,1) Generate X2, N2 CTX_NEW = updateCtx( X2 N2), X1 N1) CTX_OLD ) Response #1 LOST Protect with CTX_NEW OSCORE { ... KUDOS status: Partial IV: 0 CTX_OLD: X2, N2 ... State: PENDING (1,1) d flag: 1 x: X2 = b'01000111' nonce: N2 ... } Encrypted Payload { ... } time passes ... Request #2 Protect with CTX_TEMP /.well-known/kudos OSCORE { KUDOS status: ... CTX_TEMP = updateCtx( CTX_OLD: X1, N1 Partial IV: 1 0x, State: BUSY (1,0) ... X1 | N1, d flag: 1 CTX_OLD ) x: X1 = b'00000111' nonce: N1 Verify with CTX_TEMP ... / successful verification / } Encrypted Payload { Cleanup: ... Delete CTX_NEW } Delete X2, N2 KUDOS status: CTX_OLD: -,- State: BUSY (0,1) Generate X3, N3 CTX_NEW = updateCtx( X3 N3), X1 N1) CTX_OLD ) Response #2 Protect with CTX_NEW OSCORE { ... KUDOS status: CTX_NEW = updateCtx( Partial IV: 0 CTX_OLD: X3, N3 X1 N1, ... State: PENDING (1,1) X3 N3 d flag: 1 CTX_OLD ) x: X3 = b'01000111' nonce: N3 Verify with CTX_NEW ... } / key confirmation / Encrypted Payload { ... Pre-IDLE steps: } Delete CTX_TEMP Delete CTX_OLD, X1, N1 KUDOS status: CTX_NEW: -, - State: IDLE (0,0) The actual key update process ends here. The two peers can use the new Security Context CTX_NEW. Request #3 Protect with CTX_NEW /temp OSCORE { ... } Verify with CTX_NEW Encrypted Payload { Application Payload / key confirmation / ... } Pre-IDLE steps: Delete CTX_TEMP Delete CTX_OLD Delete X3, N3 KUDOS status: CTX_NEW: -, - State: IDLE (0,0) Response #3 Protect with CTX_NEW Verify with CTX_NEW OSCORE { ... } Encrypted Payload { ... Application Payload } | /.well-known/kudos | OSCORE { | KUDOS status: | ... | CTX_TEMP = updateCtx( CTX_OLD: X1, N1 | Partial IV: 0 | 0x, State: BUSY (1,0) | ... | X1 | N1, | d flag: 1 | CTX_OLD ) | x: X1 = b'00000111' | | nonce: N1 | Verify with CTX_TEMP | ... | | } | | Encrypted Payload { | | ... | | } | | | | | KUDOS status: | | CTX_OLD: -, - | | State: BUSY (0,1) | | | | | | Generate X2, N2 | | | | CTX_NEW = updateCtx( | | X2 | N2), | | X1 | N1), | | CTX_OLD ) | | | Response #1 | | <-- LOST -------+ Protect with CTX_NEW | OSCORE { | | ... | KUDOS status: | Partial IV: 0 | CTX_OLD: X2, N2 | ... | State: PENDING (1,1) | d flag: 1 | | x: X2 = b'01000111' | | nonce: N2 | | ... | | } | | Encrypted Payload { | | ... | | } | | | time passes ... | | | Request #2 | Protect with CTX_TEMP +--------------------->| /.well-known/kudos | OSCORE { | KUDOS status: | ... | CTX_TEMP = updateCtx( CTX_OLD: X1, N1 | Partial IV: 1 | 0x, State: BUSY (1,0) | ... | X1 | N1, | d flag: 1 | CTX_OLD ) | x: X1 = b'00000111' | | nonce: N1 | Verify with CTX_TEMP | ... | / successful verification / | } | | Encrypted Payload { | Cleanup: | ... | Delete CTX_NEW | } | Delete X2, N2 | | | | KUDOS status: | | CTX_OLD: -,- | | State: BUSY (0,1) | | | | Generate X3, N3 | | | | CTX_NEW = updateCtx( | | X3 | N3), | | X1 | N1), | | CTX_OLD ) | | | Response #2 | |<---------------------+ Protect with CTX_NEW | OSCORE { | | ... | KUDOS status: CTX_NEW = updateCtx( | Partial IV: 0 | CTX_OLD: X3, N3 X1 | N1, | ... | State: PENDING (1,1) X3 | N3 , | d flag: 1 | CTX_OLD ) | x: X3 = b'01000111' | | nonce: N3 | Verify with CTX_NEW | ... | | } | / key confirmation / | Encrypted Payload { | | ... | Pre-IDLE steps: | } | Delete CTX_TEMP | | Delete CTX_OLD, X1, N1 | | | | KUDOS status: | | CTX_NEW: -, - | | State: IDLE (0,0) | | | | The actual key update process ends here. The two peers can use the new Security Context CTX_NEW. | | | Request #3 | Protect with CTX_NEW +--------------------->| /temp | OSCORE { | | ... | | } | Verify with CTX_NEW | Encrypted Payload { | | Application Payload | / key confirmation / | ... | | } | Pre-IDLE steps: | | Delete CTX_TEMP | | Delete CTX_OLD | | Delete X3, N3 | | | | | | KUDOS status: | | CTX_NEW: -, - | | State: IDLE (0,0) | Response #3 | |<---------------------+ Protect with CTX_NEW Verify with CTX_NEW | OSCORE { | | ... | | } | | Encrypted Payload { | | ... | | Application Payload | | } | | | ]]>
Successful KUDOS Execution Completed using two Request Messages Both peers independently initiate KUDOS and exchange two request messages that ultimately result in the the same CTX_NEW. KUDOS status: KUDOS status: - CTX_OLD: -,- - CTX_OLD: -,- - State: IDLE (0,0) - State: IDLE (0,0) Client Server (initiator) (responder) Generate N1, X1 CTX_TEMP_A = updateCtx( X1 | N1, 0x, CTX_OLD ) Request #1_A Protect with CTX_TEMP_A ... /.well-known/kudos OSCORE { KUDOS status: ... CTX_OLD: X1, N1 Partial IV: 0 State: BUSY (1,0) ... d flag: 1 x: X1 = b'00000111' nonce: N1 ... } Encrypted Payload { ... } Generate N2, X2 CTX_TEMP_B = updateCtx( X2 | N2), 0x), CTX_OLD ) Request #1_B Protect with CTX_TEMP_B OSCORE { ... KUDOS status: Partial IV: 0 CTX_OLD: X2, N2 ... State: BUSY (1,0) d flag: 1 x: X2 = b'00000111' nonce: N2 ... } Encrypted Payload { ... } (Request #1_A arrives) Request #1_A ... /.well-known/kudos OSCORE { ... CTX_TEMP_A = updateCtx( Partial IV: 0 0x, ... X1 | N1, d flag: 1 CTX_OLD ) x:X1 = b'00000111' nonce: N1 Verify with CTX_TEMP_A ... } KUDOS status: Encrypted Payload { CTX_OLD: X2, N2 ... State: BUSY (1,0) } CTX_NEW = updateCtx( X2 N2), X1 N1) CTX_OLD ) Response #2_A Protect with CTX_NEW OSCORE { ... KUDOS status: Partial IV: 0 CTX_OLD: X2, N2 ... State: PENDING (1,1) d flag: 1 x: X2 = b'01000111' nonce: N2 ... } Encrypted Payload { ... } (Request #1_B arrives) Request #1_B ... Protect with CTX_TEMP_B OSCORE { ... CTX_TEMP_B = updateCtx( Partial IV: 0 0x, ... X2 | N2, d flag: 1 CTX_OLD ) x: X2 = b'00000111' nonce: N2 Verify with CTX_TEMP_B ... } Encrypted Payload { ... } CTX_NEW = updateCtx( X1 N1, X2 N2, CTX_OLD ) Response #2_B Protect with CTX_NEW /.well-known/kudos OSCORE { KUDOS status: ... - CTX_OLD: X1, N1 d flag: 1 - State: PENDING (1,1) x: X1 = b'01000111' nonce: N1 ... } Encrypted Payload { ... Application Payload Response #2_A ..... Protect with CTX_NEW OSCORE { ... Partial IV: 0 ... d flag: 1 x: X2 = b'01000111' nonce: N2 Verify with CTX_NEW ... } / key confirmation / Encrypted Payload { ... Pre-IDLE steps: } Delete CTX_TEMP_A Delete CTX_TEMP_B Delete CTX_OLD, X1, N1 KUDOS status: CTX_NEW: -, - State: IDLE (0,0) Response #2_B Protect with CTX_NEW .... OSCORE { ... d flag: 1 Verify with CTX_NEW x: X1 = b'01000111' / key confirmation / nonce: N1 ... Pre-IDLE steps: } Delete CTX_TEMP_A Encrypted Payload { Delete CTX_TEMP_B ... Delete CTX_OLD, X2, N2 Application Payload } KUDOS status: CTX_NEW: -, - State: IDLE (0,0) ... | /.well-known/kudos | OSCORE { | KUDOS status: | ... | CTX_OLD: X1, N1 | Partial IV: 0 | State: BUSY (1,0) | ... | | d flag: 1 | | x: X1 = b'00000111' | | nonce: N1 | | ... | | } | | Encrypted Payload { | | ... | | } | | | | | | | | | | | Generate N2, X2 | | | | CTX_TEMP_B = updateCtx( | | X2 | N2), | | 0x), | | CTX_OLD ) | | | Request #1_B | | <---------------+ Protect with CTX_TEMP_B | OSCORE { | | ... | KUDOS status: | Partial IV: 0 | CTX_OLD: X2, N2 | ... | State: BUSY (1,0) | d flag: 1 | | x: X2 = b'00000111' | | nonce: N2 | | ... | | } | | Encrypted Payload { | | ... | | } | | | | | | | |(Request #1_A arrives)| | | | Request #1_A | | ... ---->| /.well-known/kudos | OSCORE { | | ... | CTX_TEMP_A = updateCtx( | Partial IV: 0 | 0x, | ... | X1 | N1, | d flag: 1 | CTX_OLD ) | x:X1 = b'00000111' | | nonce: N1 | Verify with CTX_TEMP_A | ... | | } | KUDOS status: | Encrypted Payload { | CTX_OLD: X2, N2 | ... | State: BUSY (1,0) | } | | | | | CTX_NEW = updateCtx( | | X2 | N2), | | X1 | N1), | | CTX_OLD ) | | | Response #2_A | | <---------------+ Protect with CTX_NEW | OSCORE { | | ... | KUDOS status: | Partial IV: 0 | CTX_OLD: X2, N2 | ... | State: PENDING (1,1) | d flag: 1 | | x: X2 = b'01000111' | | nonce: N2 | | ... | | } | | Encrypted Payload { | | ... | | } | | | | | | | |(Request #1_B arrives)| | | | Request #1_B | |<--- ... + Protect with CTX_TEMP_B | OSCORE { | | ... | CTX_TEMP_B = updateCtx( | Partial IV: 0 | 0x, | ... | X2 | N2, | d flag: 1 | CTX_OLD ) | x: X2 = b'00000111' | | nonce: N2 | Verify with CTX_TEMP_B | ... | | } | | Encrypted Payload { | | ... | | } | | | | | | | CTX_NEW = updateCtx( | | X1 | N1, | | X2 | N2, | | CTX_OLD ) | | | Response #2_B | Protect with CTX_NEW +---------------> | /.well-known/kudos | OSCORE { | KUDOS status: | ... | - CTX_OLD: X1, N1 | d flag: 1 | - State: PENDING (1,1) | x: X1 = b'01000111' | | nonce: N1 | | ... | | } | | Encrypted Payload { | | ... | | Application Payload | | | | | | | | Response #2_A | |<---------------......+ Protect with CTX_NEW | OSCORE { | | ... | | Partial IV: 0 | | ... | | d flag: 1 | | x: X2 = b'01000111' | | nonce: N2 | Verify with CTX_NEW | ... | | } | / key confirmation / | Encrypted Payload { | | ... | Pre-IDLE steps: | } | Delete CTX_TEMP_A | | Delete CTX_TEMP_B | | Delete CTX_OLD, X1, N1 | | | | KUDOS status: | | CTX_NEW: -, - | | State: IDLE (0,0) | | | | | | | Response #2_B | Protect with CTX_NEW +.....---------------->| | OSCORE { | | ... | | d flag: 1 | Verify with CTX_NEW | x: X1 = b'01000111' | / key confirmation / | nonce: N1 | | ... | Pre-IDLE steps: | } | Delete CTX_TEMP_A | Encrypted Payload { | Delete CTX_TEMP_B | ... | Delete CTX_OLD, X2, N2 | Application Payload | | } | | | KUDOS status: | | | | CTX_NEW: -, - | | State: IDLE (0,0) | | ]]>
KUDOS State Machine The following illustrates the states and transitions of the KUDOS state machine. PRE-IDLE Clean up and delete CTX_TEMP/CTX_OLD IDLE Receive CONVERGENT: - Stay in IDLE Send or receive DIVERGENT: - Go to BUSY BUSY Send DIVERGENT (stalled): - Stay in BUSY Receive CONVERGENT: - Go to PRE-IDLE Send CONVERGENT or Receive DIVERGENT: - Go to PENDING PENDING Need to send something: - Send as CONVERGENT - Stay in PENDING Receive CONVERGENT OR non-KUDOS message protected with CTX_NEW: Go to PRE-IDLE Receive DIVERGENT: Attempt to decrypt using CTX_OLD, then CTX_NEW as input context Revert to using CTX_NEW as CTX_OLD, or continue using CTX_OLD (Go to BUSY) (Go to BUSY) ]]>
Document Updates
Version -11 to -12
  • Add multiple additional message flow examples.
  • Editorial improvements.
  • Add diagram of KUDOS state machine.
Version -10 to -11
  • Extended security considerations.
  • Clarifications and editorial improvements.
  • Updates to IANA considerations according to IANA early reviews.
  • Extended section about updated protection of CoAP responses.
  • Discussion about combining usage of KUDOS with profiles of ACE.
  • Optimization for traversing the state machine upon reception of a divergent message.
Version -09 to -10
  • Major re-design building on a state machine driving the KUDOS execution.
Version -08 to -09
  • Merge text about avoiding in-transit requests during a key update into a single subsection.
  • Improved error handling.
  • Editorial improvements and clarifications.
  • State that the EDHOC EAD item must be used as non-critical.
  • Extended description and updates values for KUDOS communication overhead.
  • Introduce special case when non-CAPABLE devices may operate in FS Mode.
  • Add parameter for signaling KUDOS support when using the ACE OSCORE profile.
  • Enable using the reverse message flow for peers that are only CoAP servers.
  • Further clarifications about achieving key confirmation and deletion of old contexts.
  • Restructure distribution of content about FS and no-FS mode.
  • Warn of consequences of running KUDOS with insufficient margin.
  • Stressed usefulness of core.kudos for safe KUDOS requests without side effects.
Version -07 to -08
  • Add note about usage of the CoAP No-Response Option.
  • Avoid problems for two simultaneously started key updates.
  • Set Notification Number to be uninitialized for new OSCORE Security Contexts.
  • Handle corner case for responder that reached its key usage limits.
  • Re-organizing main section about Forward Secrecy mode into subsections.
  • IANA considerations for CoAP Option Numbers Registry to refer to this draft for the OSCORE option.
  • Use AASVG in diagrams.
  • Use actual tables instead of figures.
  • Clarifications and editorial improvements.
  • Extended security considerations with reference to relevant paper.
Version -06 to -07
  • Removed material about the ID update procedure, which has been split out into a separate draft.
  • Allow non-random nonces for CAPABLE devices.
  • Editorial improvements.
  • Permit flexible message flow with KUDOS messages as any request/response.
  • Enable sending KUDOS messages as regular application messages.
Version -05 to -06
  • Mandate support for both the forward and reverse message flow.
  • Mention the EDHOC and OSCORE profile of ACE as method for rekeying.
  • Clarify definition of KUDOS (request/response) message.
  • Further extend the OSCORE option to transport N1 in the second KUDOS message as a request.
  • Mandate support for the no-FS mode on CAPABLE devices.
  • Explain when KUDOS fails during selection of mode.
  • Explicitly forbid using old keying material after reboot.
  • Editorial improvements.
Version -04 to -05
  • Note on client retransmissions if KUDOS execution fails in reverse message flow.
  • Specify what information needs to be written to non-volatile memory to handle reboots.
  • Extended recommendations and considerations on minimum size of nonces N1 & N2.
  • Arbitrary maximum size of the Recipient-ID Option.
  • Detailed lifecycle of the OSCORE IDs update procedure.
  • Described examples of OSCORE IDs update procedure.
  • Examples of OSCORE IDs update procedure integrated in KUDOS.
  • Considerations about using SCHC for CoAP with OSCORE.
  • Clarifications and editorial improvements.
Version -03 to -04
  • Removed content about key usage limits.
  • Use of "forward message flow" and "reverse message flow".
  • Update to RFC 8613 extended to include protection of responses.
  • Include EDHOC_KeyUpdate() in the methods for rekeying.
  • Describe reasons for using the OSCORE ID update procedure.
  • Clarifications on deletion of CTX_OLD and CTX_NEW.
  • Added new section on preventing deadlocks.
  • Clarified that peers can decide to run KUDOS at any point.
  • Defined preservation of observations beyond OSCORE ID updates.
  • Revised discussion section, including also communication overhead.
  • Defined a well-known KUDOS resource and a KUDOS resource type.
  • Editorial improvements.
Version -02 to -03
  • Use of the OSCORE flag bit 0 to signal more flag bits.
  • In UpdateCtx(), open for future key derivation different than HKDF.
  • Simplified updateCtx() to use only Expand(); used to be METHOD 2.
  • Included the Partial IV if the second KUDOS message is a response.
  • Added signaling of support for KUDOS in EDHOC.
  • Clarifications on terminology and reasons for rekeying.
  • Updated IANA considerations.
  • Editorial improvements.
Version -01 to -02
  • Extended terminology.
  • Moved procedure for preserving observations across key updates to main body.
  • Moved procedure to update OSCORE Sender/Recipient IDs to main body.
  • Moved key update without forward secrecy section to main body.
  • Define signaling bits present in the 'x' byte.
  • Modifications and alignment of updateCtx() with EDHOC.
  • Rules for deletion of old EDHOC keys PRK_out and PRK_exporter.
  • Describe CBOR wrapping of involved nonces with examples.
  • Renamed 'id detail' to 'nonce'.
  • Editorial improvements.
Version -00 to -01
  • Recommendation on limits for CCM_8. Details in Appendix.
  • Improved message processing, also covering corner cases.
  • Example of method to estimate and not store 'count_q'.
  • Added procedure to update OSCORE Sender/Recipient IDs.
  • Added method for preserving observations across key updates.
  • Added key update without forward secrecy.
Acknowledgments The authors sincerely thank , , , , , and for their feedback and comments. The work on this document has been partly supported by the Sweden's Innovation Agency VINNOVA and the Celtic-Next projects CRITISEC and CYPRESS; and by the H2020 projects SIFIS-Home (Grant agreement 952652) and ARCADIAN-IoT (Grant agreement 101020259).