Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

OSCORE over coap at server side

See original GitHub issue

Here we discuss about how integrate OSCORE over coap at server side.

Some ideas I have in mind : A Leshan server user want to say that a device with the endpoint “mydevice” should communicate in OSCORE. So he creates a new SecurityInfo(“mydevice”, oscore indentifier …) and I add it to the security store.

When a device use OSCORE, we could image that this is visible in endpoint context. From this we create the corresponding identity, then the authorizer is responsible to check if this device should connect itself using oscore and if it use the right oscore parameter (looking in security store).

For sending request we should also put pertinent data in endpointcontext like we do here

The idea is to make pretty much the same as we did for DTLS with PSK.

(@rikard-sics tell me if it makes senses)

Issue Analytics

State:
Created 4 years ago
Comments:6 (6 by maintainers)

Top GitHub Comments

1reaction

rikard-sicscommented, Jul 11, 2022

Maybe we can close this one too ? @rikard-sics WDYT ?

Yeah, I think so. There are other issues like #725 we can continue the discussions in.

0reactions

sbernard31commented, Jul 8, 2022

With https://github.com/eclipse/leshan/pull/1277 integrated in master and missing work listed at https://github.com/eclipse/leshan/issues/725#issuecomment-1179021294.

Maybe we can close this one too ? @rikard-sics WDYT ?

Top Results From Across the Web

draft-ietf-core-dns-over-coap-01

DNS over CoAP (DoC). Abstract. This document defines a protocol for sending DNS messages over the Constrained Application Protocol (CoAP).

Trialing OSCORE for end-to-end IoT security in resource ...

OSCORE is based on symmetric pre-shared keys which are shared only between the end devices (the server and the sensor node in our...

OSCORE in aiocoap - Read the Docs

OSCORE (RFC8613) is an end-to-end security mechanism available for CoAP and implemented in aiocoap. Its main advantage over lower-layer protection (IPsec, ...

OSCORE: A look at the new IoT security protocol - Ericsson

CoAP in itself is designed for extremely lightweight operations and can be run on tiny sensor platforms. OSCORE is defined as an extension...

Evaluating the performance of the OSCORE security protocol ...

Based on the intended operation to perform, CoAP Requests can be of ... a resource-constrained CoAP server that securely communicate through a CoAP...