802.1ARce - Secure Device Identity Amendment 1: SHA-384 and P-384 Elliptic Curve
This standard specifies unique per-device identifiers (DevID) and the management and cryptographic binding of a device to its identifiers, the relationship between an initially installed identity and subsequent locally significant identities, and interfaces and methods for use of DevIDs with existing and new provisioning and authentication protocols. Amendment 1 specifies the optional use of the secure hash algorithm SHA-384 and the P-384 elliptic curve for use in Elliptic Curve Digital Signature Algorithm (ECDSA), and SHA-384 for hashing by the DevID module.
This standard defines a standard identifier for IEEE 802 devices that is cryptographically bound to that device, and defines a standard mechanism to authenticate a device's identity. A verifiable unique device identity allows establishment of the trustworthiness of devices. This facilitates secure device provisioning.
The cybersecurity community wants to take advantage of recent improvements in cryptographic technology to use a stronger digital signature algorithm with IEEE Std 802.1AR, and in particular to use SHA-384 and the P-384 elliptic curve to align with the Suite B Certificate Profile (IETF RFC 5759) and with expected updates to the TPM 2.0 specification in the Trusted Computing Group. To promote interoperability and ensure cryptographic quality, IEEE Standard 802.1AR requires that the cryptography used while claiming conformance is limited to that which is specified in the standard. This project will add the support for SHA-384 hash and P-384 elliptic curve as options.
| Status | PAR approved Aug 21st, 2014 |
| Editor | Mick Seaman |
| Date | Document |
|---|---|
| 28 Oct 2013 | 802.1ARce, initial editor's draft 0.1 |
| 15 Oct 2014 | ce.drafts/802, Draft d0-4 |
| 30 Oct 2014 | ce.drafts/802, Draft d0-5 |
| 06 Jan 2015 | 802.1ARce, Draft 0.7 |
| 11 Jul 2016 | 802.1ARce, Draft 0.7 proposed comment dispositions |
| 02 Sep 2016 | 802.1ARce, Draft 1.0 |
| 21 Oct 2016 | 802.1ARce, Draft 1.1 |
| 08 Dec 2016 | 802.1ARce, Draft 1.1 comment dispositions |
| 08 Dec 2016 | 802.1ARce, Draft 1.2 |
| Date | Document |
|---|---|
| 21 May 2014 | Presentation ce-draft-arce-csd-0514-v2.pdf |
| 16 Jul 2014 | Presentation ce-draft-arce-par-0714-v3.pdf |
| 16 Jul 2014 | Presentation ce-draft-arce-par-v2-0714.pdf |
| 14 Sep 2016 | Presentation ce-moskowitz-newusecases-0916-v01.pdf |
Pages copyright © Institute of Electrical and Electronics Engineers, Inc. Please read the rules on Confidentiality Statements and Copyright Notices on Communications. Information on Privacy and opting out of cookies is available. If you have any comments on these pages, please send them to me.
