Subject: Re: [6tisch-security] [Ace] Constrained Environment PKI enrollment (fwd) Shahid Raza: Re: [Ace] Constrained Environment PKI enrollment

From: Michael Richardson <[email-masked]>
Date: Mon, 06 Jun 2016 14:31:45 -0400

A thread from ACE that you may not have seen.

Subject: Re: [Ace] Constrained Environment PKI enrollment
From: Shahid Raza <[email-masked]>
To: Samuel Erdtman <[email-masked]>
Cc: Julien Vermillard <[email-masked]>, Shahid Raza <[email-masked]>, "[email-masked]" <[email-masked]>
Date: Sat, 4 Jun 2016 01:01:29 +0200
List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" <ace.ietf.org>

We (SICS and neXus) have been working on this since September last year and designed and implemented an enrollment protocol over secure CoAP. Both the specifications and the Contiki source code will be available soon. This is done under the umbrella of a Swedish project called CEBOT: Certificate Enrollment in Billions of Things.

Regards,
Shahid

> On 03 Jun 2016, at 17:08, Samuel Erdtman <[email-masked]> wrote:
> 
> The company I previously worked for where looking into adopting EST for this purpose, the benefit of EST compared to cmp or scep was that it defined the process for server side generated keys, which could be beneficial if key generation would be to cumbersome for the device or if you don't trust the device to generate a "good" key.
> 
> Maybe Shahid could give sold more updates since he was helping us with this project
> 
> On Thursday, 2 June 2016, Julien Vermillard <[email-masked] <mailto:[email-masked]>> wrote:
> Hi,
> In industrial or enterprise M2M/IoT application we often use PSK for authentication, but more and more user want to enroll the device on their public key infrastructure like they does with some routers using SCEP/CMP.
> 
> I wonder if it was explored to enroll devices, and renew certificates on PKI only using CoAP and not HTTP?
> 
> --
> Julien Vermillard
> _______________________________________________
> Ace mailing list
> [email-masked]
> https://www.ietf.org/mailman/listinfo/ace

_______________________________________________
Ace mailing list
[email-masked]
https://www.ietf.org/mailman/listinfo/ace

--
Michael Richardson <[email-masked]>, Sandelman Software Works
 -= IPv6 IoT consulting =-