Browsing by Subject "EDHOC"

Now showing 1 - 2 of 2
  • Thumbnail Image
    Publication
    Restricted
    CORECONF implementation as SDN southboundInterface for IoT: an OSCORE/EDHOC use case
    (Institute of Electrical and Electronics Engineers Inc., 2025) Fernández, Javier A.; Marín López, Rafael; López Millán, Gabriel; Toutain, Laurent; Ingeniería de la Información y las Comunicaciones; Facultades de la UMU::Facultad de Informática
    The Internet of Things (IoT) aims to gather valuable data from our surroundings through resource-constrained networks and devices. For this reason, efficient and lightweight communication protocols are required to be developed and adopted. CORECONF, a network management protocol designed for constrained environments, provides a promising solution for IoT device configuration. This work introduces pycoreconf, an open-source implementation of CORECONF, with the goal of testing the protocol and making it more accessible to researchers and developers by enabling its use in real-world scenarios and experimental setups. In this paper, we evaluate its performance and applicability as a southbound interface in an SDN-based architecture, demonstrating its potential for configuring security contexts between IoT devices. Potential for other use cases remains to be explored in future work. Our results suggest that pycoreconf is a viable tool for those interested in exploring and adopting CORECONF in IoT scenarios.
  • Thumbnail Image
    Publication
    Open Access
    Towards a new standard for network access authentication: EAP-EDHOC
    (Elsevier, 2025-07-12) López Gómez, Francisco; Marín López, Rafael; López Millán, Gabriel; García Carrillo, Dan; Preuß Mattsson, John; Selander, Göran; Ingeniería de la Información y las Comunicaciones; Facultades de la UMU::Facultad de Informática
    The Extensible Authentication Protocol (EAP) has been a cornerstone of secure authentication in both wired and wireless networks, as well as enterprise systems, enabling integration with a wide range of authentication mechanisms. Recently, the IETF EAP Method Update (EMU) Working Group has adopted EAP-EDHOC, a method that combines EAP’s extensibility with the recent standard Ephemeral Diffie–Hellman Over COSE (EDHOC). EDHOC is a lightweight authentication and key exchange protocol designed to be supported in resource-constrained environments. This enhances EAP-EDHOC as a high-performance authentication method for EAP-based networks. This paper presents a comprehensive analysis of the standardization efforts surrounding EAP-EDHOC, including a first proof-of-concept implementation and performance evaluation conducted over Wi-Fi networks. Additionally, a new design that optimizes the existing protocol by reversing the roles of the communication parties is proposed. The original and optimized versions are evaluated and compared with each other, as well as with EAP-TLS 1.3 and EAP-PSK. The results demonstrate that EAP-EDHOC achieves more efficient authentication than EAP-TLS 1.3 in terms of execution time, number of messages, and data transmitted. Meanwhile, EAP-PSK, which is based on symmetric cryptography, serves as a performance baseline.