Session Date/Time: 22 Jul 2025 09:30

lake

Summary

The Llake working group meeting at IETF 123 covered updates to several adopted documents, including Remote Attestation over Ad Hoc, Ad Hoc with Preset Key Authentication, and Lightweight Authorization over Ad Hoc (ELLA). New individual draft submissions were discussed, with a focus on post-quantum cryptography (PQC) solutions for ad hoc. A discussion was held on the potential rechartering of the working group to include PQC efforts.

Key Discussion Points

Remote Attestation over Ad Hoc: Updates included adding a section for the verifier role, deleting the ad-hoc error handling section, and clarifying instantiation examples.
Ad Hoc with Preset Key Authentication: Changes were made to mitigate reflection attacks and enable resumption, along with terminology updates for credentials (CRAT PSK). Formal verification was discussed.
Lightweight Authorization over Ad Hoc (ELLA): Editorial updates and merged pull requests were presented. Open issues include a generic use case for augmenting ad hoc and supporting post-quantum algorithms.
Implementation Considerations Document: More input from implementers was requested, particularly regarding ELA and remote attestation.
Lake Up Profiles Draft: Feedback from Michael Richardson was incorporated, and error handling was defined.
Exporter Output Length Negotiation: A new EAD item for in-band negotiation of exporter output length was presented, with discussion on whether it should be integrated into the Lake Up Profiles draft.
Post-Quantum Cipher Suites: John presented a draft for registering new quantum-resistant cipher suites for existing ad hoc methods, including ML Chem and MLDSA.
Kem-Based Authentication: Lydia presented a kem-based authentication method for edhoc, based on a 5-message exchange.
Post-Quantum Authenticated Key Exchange: Yuri presented a formally proven, minimalist post-quantum authenticated key exchange protocol.
Working Group Scope: A consensus was reached that the group should work on post-quantum resistant ad hoc. Discussions were held on the scope of this work, specifically regarding cipher suites and kem-based authentication methods.

Decisions and Action Items

Formal Verification: Elsa to merge the PSK auth updates as soon as possible. Group chairs will trigger formal verification soon after.
Implementation Considerations Document: Giovanni and Christian volunteered to review the implementation considerations document.
Lake Up Profiles Draft: Marco will work on integrating the EAD item into the profile draft or keep them separate based on feedback.
Charter Revision: Chairs will create a thread on the mailing list with the proposed new charter language including PQC items for discussion. The new Charter should be general enough to accommodate all KEM/SIG authentication methods.

Next Steps

Elsa to update the ad hoc with PSK draft to reflect the discussed modifications.
Implementers to review and provide feedback on the implementation considerations document.
Working group to discuss and provide input on the revised charter text on the mailing list.
Continue discussion on the PQC solutions on the mailing list.