RFC 9528: Ephemeral Diffie-Hellman Over COSE (EDHOC)

This document specifies Ephemeral Diffie-Hellman Over COSE (EDHOC), a very compact and lightweight authenticated Diffie-Hellman key exchange with ephemeral…

Read RFC 9528 on the RFC Editor

Outgoing relationships (41 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 8126: Guidelines for Writing an IANA Considerations Section in RFCs
Normative reference — RFC 7252: The Constrained Application Protocol (CoAP)
Normative reference — RFC 8610: Concise Data Definition Language (CDDL): A Notational Convention to Express Concise Binary Object Representation (CBOR) and JSON Data Structures
Normative reference — RFC 3552: Guidelines for Writing RFC Text on Security Considerations
Normative reference — RFC 3279: Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 8949: Concise Binary Object Representation (CBOR)
Normative reference — RFC 5869: HMAC-based Extract-and-Expand Key Derivation Function (HKDF)
Normative reference — RFC 7748: Elliptic Curves for Security
Normative reference — RFC 6090: Fundamental Elliptic Curve Cryptography Algorithms
Normative reference — RFC 5116: An Interface and Algorithms for Authenticated Encryption
Normative reference — RFC 6960: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP
Normative reference — RFC 8392: CBOR Web Token (CWT)
Normative reference — RFC 8613: Object Security for Constrained RESTful Environments (OSCORE)
Normative reference — RFC 9052: CBOR Object Signing and Encryption (COSE): Structures and Process
Normative reference — RFC 6979: Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA)
Normative reference — RFC 7959: Block-Wise Transfers in the Constrained Application Protocol (CoAP)
Normative reference — RFC 9053: CBOR Object Signing and Encryption (COSE): Initial Algorithms
Normative reference — RFC 8724: SCHC: Generic Framework for Static Context Header Compression and Fragmentation
Normative reference — RFC 8747: Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs)
Normative reference — RFC 8410: Algorithm Identifiers for Ed25519, Ed448, X25519, and X448 for Use in the Internet X.509 Public Key Infrastructure
Normative reference — RFC 8742: Concise Binary Object Representation (CBOR) Sequences
Normative reference — RFC 9360: CBOR Object Signing and Encryption (COSE): Header Parameters for Carrying and Referencing X.509 Certificates
Normative reference — RFC 9175: Constrained Application Protocol (CoAP): Echo, Request-Tag, and Token Processing
Informative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Informative reference — RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3
Informative reference — RFC 9000: QUIC: A UDP-Based Multiplexed and Secure Transport
Informative reference — RFC 7296: Internet Key Exchange Protocol Version 2 (IKEv2)
Informative reference — RFC 7258: Pervasive Monitoring Is an Attack
Informative reference — RFC 7228: Terminology for Constrained-Node Networks
Informative reference — RFC 9147: The Datagram Transport Layer Security (DTLS) Protocol Version 1.3
Informative reference — RFC 2986: PKCS #10: Certification Request Syntax Specification Version 1.7
Informative reference — RFC 6194: Security Considerations for the SHA-0 and SHA-1 Message-Digest Algorithms
Informative reference — RFC 7624: Confidentiality in the Face of Pervasive Surveillance: A Threat Model and Problem Statement
Informative reference — RFC 8376: Low-Power Wide Area Network (LPWAN) Overview
Informative reference — RFC 8937: Randomness Improvements for Security Protocols
Informative reference — RFC 9176: Constrained RESTful Environments (CoRE) Resource Directory
Informative reference — RFC 8366: A Voucher Artifact for Bootstrapping Protocols
Informative reference — RFC 9397: Trusted Execution Environment Provisioning (TEEP) Architecture
Informative reference — RFC 9529: Traces of Ephemeral Diffie-Hellman Over COSE (EDHOC)

Incoming relationships (4 related RFCs)

Normatively referenced by — RFC 9668: Using Ephemeral Diffie-Hellman Over COSE (EDHOC) with the Constrained Application Protocol (CoAP) and Object Security for Constrained RESTful Environments (OSCORE)
Normatively referenced by — RFC 9770: Notification of Revoked Access Tokens in the Authentication and Authorization for Constrained Environments (ACE) Framework
Informatively referenced by — RFC 9953: DNS over CoAP (DoC)
Informatively referenced by — RFC 9958: Post-Quantum Cryptography for Engineers