3 ms·
The problem is that constrained devices with planned lifetimes of 20-30 years being specified today already are getting requests for inclusion, usage of PQC as
by JoachimS 3y ago
The problem is that constrained devices with planned lifetimes of 20-30 years being specified today already are getting requests for inclusion, usage of PQC as well as classical algorithms.
Pre-shared only works for deployments with low-ish number of devices. We are talking about 1000+ devices.
- adrian_b 3y agoThat is why I have said that if updating the pre-shared authentication keys through separate communication channels is impractical, they can be updated through hybrid public-key based key exchange methods. If a hybrid key exchange method is used e.g. only after one thousand or even after one hundred of connections made with pre-shared keys, then the hybrid method can be very slow without significant impact. This is the same like reusing in TLS 1.3 a previously computed shared secret for a new connection, just using this for a large enough number of successive connections so that the slowness of the constrained device does not matter.
- michaelt 3y agoTLS-PSK is used in some of the largest volume resource constrained internet-connected devices in the world. You buy a $5 wifi-controlled lightbulb? There's a good chance it talks to its backend servers with TLS-PSK.