Internet-Draft Additional Private Use Ranges for LAKE September 2026
Tiloca Expires 21 March 2027 [Page]
Workgroup:
LAKE Working Group
Internet-Draft:
draft-tiloca-lake-private-use-ranges-00
Published:
Intended Status:
Informational
Expires:
Author:
M. Tiloca
RISE AB

Additional Private Use Ranges in the IANA Registries of the Lightweight Authenticated Key Exchange (LAKE) Protocol

Abstract

This document adds Private Use ranges to IANA registries that pertain to the Lightweight Authenticated Key Exchange (LAKE) protocol.

Discussion Venues

This note is to be removed before publishing as an RFC.

Discussion of this document takes place on the Lightweight Authenticated Key Exchange Working Group mailing list (lake@ietf.org), which is archived at https://mailarchive.ietf.org/arch/browse/lake/.

Source for this draft and an issue tracker can be found at https://gitlab.com/crimson84/draft-tiloca-lake-private-use-ranges.

Status of This Memo

This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.

Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at https://datatracker.ietf.org/drafts/current/.

Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."

This Internet-Draft will expire on 21 March 2027.

Table of Contents

1. Introduction

The Lightweight Authenticated Key Exchange (LAKE) protocol [RFC9528] provides points of extensibility, for which related IANA registries exist.

When they were created, some of those registries did not include ranges with registration procedure "Private Use" (see Section 4.1 of [RFC8126]). Later on, it was brought to attention that having such ranges available would be convenient for private deployments.

This document rectifies this situation by adding Private Use ranges to three IANA registries missing those, as specified in Section 3.

1.1. Terminology

This document uses the acronym "LAKE", expanded to "Lightweight Authenticated Key Exchange", to denote the protocol specified as "EDHOC" in [RFC9528]. Identifiers defined literally in [RFC9528] or in IANA registries (e.g., the names of the EDHOC registries themselves) are unchanged.

2. Security Considerations

This document and the Private Use ranges defined in Section 3 do not impact the security of the LAKE protocol. When using values from such Private Use ranges, the security considerations compiled in Section 9 of [RFC9528] still apply.

3. IANA Considerations

This document has the following actions for IANA.

3.1. EDHOC Method Types Registry

IANA is asked to add the following two ranges to the "EDHOC Method Types" registry [Method.Types] within the "Ephemeral Diffie-Hellman Over COSE (EDHOC)" registry group:

  • -4294967296 to -65537

  • 65536 to 4294967295

For both ranges, the registration procedure is "Private Use" per Section 4.1 of [RFC8126].

3.2. EDHOC Error Codes Registry

IANA is asked to add the following two ranges to the "EDHOC Error Codes" registry [Error.Codes] within the "Ephemeral Diffie-Hellman Over COSE (EDHOC)" registry group.

  • -4294967296 to -65537

  • 65536 to 4294967295

For both ranges, the registration procedure is "Private Use" per Section 4.1 of [RFC8126].

3.3. EDHOC External Authorization Data Registry

IANA is asked to add the following range to the "EDHOC External Authorization Data" registry [External.Authorization.Data] within the "Ephemeral Diffie-Hellman Over COSE (EDHOC)" registry group:

  • 65536 to 4294967295

For this range, the registration procedure is "Private Use" per Section 4.1 of [RFC8126].

4. Normative References

[Error.Codes]
IANA, "EDHOC Error Codes", <https://www.iana.org/assignments/edhoc/edhoc.xhtml#edhoc-error-codes>.
[External.Authorization.Data]
IANA, "EDHOC External Authorization Data", <https://www.iana.org/assignments/edhoc/edhoc.xhtml#edhoc-ead>.
[Method.Types]
IANA, "EDHOC Method Types", <https://www.iana.org/assignments/edhoc#edhoc-method-types>.
[RFC8126]
Cotton, M., Leiba, B., and T. Narten, "Guidelines for Writing an IANA Considerations Section in RFCs", BCP 26, RFC 8126, DOI 10.17487/RFC8126, , <https://www.rfc-editor.org/rfc/rfc8126>.
[RFC9528]
Selander, G., Preuß Mattsson, J., and F. Palombini, "Ephemeral Diffie-Hellman Over COSE (EDHOC)", RFC 9528, DOI 10.17487/RFC9528, , <https://www.rfc-editor.org/rfc/rfc9528>.

Acknowledgments

Tobias Müller pointed out the usefulness of a Private Use range for External Authorization Data (EAD) labels, which triggered the development of this document.

The author thanks Göran Selander and Mališa Vučinić for their early feedback during the preparation of this document.

Author's Address

Marco Tiloca
RISE AB
Isafjordsgatan 22
SE-164 40 Kista
Sweden