Activities & Related News
It’s a wrap!
01.12.2023. Our project has run its course. Long live follow-ups! See our software which keeps on being maintained and developed. See our publications which layed the ground for follow-up research activities, as well as diverse IETF specifications that are in the process of being standardized. And there’s more! Among others, a startup is born in the process: Cryspen.
New SUIT draft Specification Released
01.11.2023. We have published a new version (-24) of the IETF draft specification for the SUIT manifest which secures IoT software updates metadata by re-using CBOR and COSE, end-to-end while in transit from the authorized software OEM to the IoT device, in a low-power manner.
New Report on our Software Launched in Space
29.09.2023. We published a new report on how our IoT secure update software integrated in RIOT is used on a nano-satellite recently launched in near-Earth orbit. See the preprint here! The paper will also be presented at IEEE PEMWN 2023.
We are a Real World Crypto 2023
27.03.2023. Our work on hax, a tool-independent spec language for formal verification, was presented at Real Workd Crypto 2023. See the slides here!
New Publication on Formally-verified eBPF-based Femto-Container Hosting Engine
22.08.2022. We published and presented our work on this topic in the 34th International Conference on Computer Aided Verification (CAV 2022). The paper reports on our proof of fault isolation on an implementation of femto-containers integrated in RIOT and experimentally evaluated on commodity IoT microcontrollers. Check out the preprint!
New SUIT draft Specification Released
22.04.2022. We have published a new version (-17) of the IETF draft specification for the SUIT manifest which secures IoT software updates metadata by re-using CBOR and COSE, end-to-end while in transit from the authorized software OEM to the IoT device, in a low-power manner.
New Publication on Post-Quantum Security for Low-power IoT Software Updates
18.03.2022. Our work on analyzing key aspects of quantum-resistance for security primitives enabling software updates on low-power IoT devices has been accepted for publication at ACNS 2022. In this study, taking SUIT and its open source implementation in RIOT as case study, we experimentally evaluate and compare post-quantum schemes that are currently available for digital signature schemes (Lattice-based with Falcon, or Dilithium, and hash-based with LMS), against typical pre-quantum options (ed25519, P-256) and we cover also post-quantum considerations concerning hash functions (SHA-2 and SHA-3) use as specified within SUIT. Preprint
Speed Record for Isogeny-based Cryptosystems
26.05.2021. We extended our work on isogeny-based cryptosystems. We established a new speed-record-breaking constant-time implementation of the CSIDH algorithm for non-interactive key exchange. Check out the details of these results, published in this preprint.
EDHOC Embedded C Implementation OS Integration
27.04.2021. Our open source implementation of EDHOC has been updated, and integrated upstream in the operating system RIOT.
Transport-Layer Security over 6TiSCH Low-power Link-layer
21.03.2021. We published a new study on the performance of the Transport Layer Security handshakes over 6TiSCH. Check out the details in this article.
New SUIT Manifest Draft Specification
22.02.2021. We published a new version of the draft SUIT manifest specification.
Towards a Formally Verified RIOT Bootloader Using Rust and Hacspec
18.01.2021. We are developing further Hacspec combined with a rewrite of the RIOT bootloader in Rust towards producing a formally verified bootloader for RIOT applicable on low-power microcontrollers. Potential perspectives with this workflow include formally verifying other modules in RIOT core, provided by RIOT-rs, an experimental drop-in replacement core for RIOT, based on the Rust embedded ecosystem.
Minimal Virtual Machines for Low-power Microcontrollers with rBPF
03.12.2020. Virtual machines (VM) are widely used to host and isolate software modules. However, extremely small memory and low-energy budgets have so far prevented wide use of VMs on typical microcontroller-based IoT devices. We just published a paper showing that a register-based VM using extended Berkeley Packet Filters (eBPF) is a promising approach to host small software modules, isolated from OS software, and updatable on-demand, over low-power networks. Execution time and memory overhead with our prototype design and implementation rBPF seem quite tolerable for microcontroller-based IoT devices.
First EDHOC Implementations and First Interop Tests!
19.11.2020. We published the first EDHOC implementation! This implementation is in Python. In parallel we are already hard at work on a separate EDHOC implementation in C. We next plan to publish EDHOC-C integration in RIOT and OpenWSN, and to participate in interoperability fests in the context of IETF (LAKE working group). Check out EDHOC draft specifications!
Formal Verification of Elliptic Curve Cryptography (at ECC 2020)
28.10.2020. We participate in ECC 2020: several RIOT-fp contributors take part in a panel dedicated to formal verification of Elliptic Curve Cryptography. Tune in!
RIOT Summit 2020
15.09.2020. The yearly meetup for the RIOT community took place online this year. Featuring 170 registered participants from 4 continents, a keynote from Andrew S. Tanenbaum, and a variety of talks covering virtually all aspects of IoT, including security. In retrospect: you can check out the slides of plenary talks & breakout sessions, as well as their video recordings on Youtube.
Tutorial at IEEE Euro S&P Conference
11.09.2020. We have conducted online the IEEE Security & Privacy tutorial on Microcontroller-based IoT Security based on the RIOT-fp prototype software platform, and leveraging our open access testbed FIT IoT-lab for remote participants.
EDHOC Draft Specification
02.08.2020. Following the formation of the LAKE working group at IETF, a preliminary draft specification is out fro Ephemeral Diffie-Hellman Over COSE (EDHOC). By reusing COSE for cryptography, CBOR for encoding, and CoAP for transport, the aim is to keep additional code footprint very low – a goal we certainly value in RIOT-fp, in the context of which work is about to start implementating EDHOC.
OpenWSN Network Stack Support in New RIOT Release
24.07.2020. The latest RIOT release 2020.07 has been released. New network protocols were ported for RIOT such as MQTT and the lookup clientcomponent for CoRE RD. The OpenWSN network stack with 6TiSCH support is now also supported in RIOT. 546 pull requests, composed of 10452 commits, have been merged since the last release 3 months ago, and 84 issues have been solved. 64 people contributed with code in 106 days!
New SUIT draft Specification Released
15.07.2020. We have published a new version (-09) of the IETF draft specification for the SUIT manifest which secures IoT software updates metadata by re-using CBOR and COSE, end-to-end while in transit from the authorized software OEM to the IoT device, in a low-power manner.
Faster Isogeny-based Cryptosystems
28.06.2020. We have a new publication on isogeny-based cryptosystems, which offer particularly small key-sizes. In particular, we focused on CSIDH, which appeared after the initial deadline for the NIST process. While CSIDH has some important potential applications, it currently imposes an inconvenient computational cost, and adapting it to IoT devices is a significant challenge. We have made an important algorithmic advance: in our publication at ANTS-XIV, we give an algorithm which computes large-degree isogenies in square-root (rather than linear) time. This kindles hope for producing efficient, side-channel-aware CSIDH implementations for microcontrollers!
MooC on IoT and Security with Microcontrollers
04.06.2020. The first season of the MooC is a wrap! We have co-authored and released a new massive online course on low-power IoT, featuring a large part with hands-on activities using RIOT. Of course, there was a module dedicated to IoT security featuring SUIT-compliant IoT software udates! There were 6,757 participants from 110 countries for this first session this semester. Next session in Feb. 2021. Be there!
Information Flow Control with LIO*
27.04.2020. In the larger context of our work on composing formal guarantees on embedded code, we have published a new report on low-level information flow control with F*.
New IETF Draft Standard Specification for Secure IoT software Updates
09.03.2020. We have published a new version (-04) of the IETF draft specification for the SUIT manifest which secures IoT software updates metadata, end-to-end while in transit from the authorized software OEM to the IoT device, in a low-power manner.
Demo of Early RIOT-fp Prototype at European Commission (Brussels)
28.02.2020. At H2020 SPARTA project review at Brussels European Commission, a preliminary prototype demo of RIOT-fp was presented, demonstrating secure low-power IoT firmware update on an indoor air quality monitor.
Draft Requirements Document for the LAKE protocol
19.02.2020. The IETF has issued its last call for our draft requirements for the LAKE protocol.
Preliminary Design of a Zero-touch Enrollment Protocol
06.02.2020. We have published a preliminary design for a zero-touch enrollment protocol based on LAKE.
New RIOT Release with Initial SUIT Support
15.11.2019. The latest release (Release-2019.10) of RIOT is now available. This release brings a number of improvements and additional features, including initial support for SUIT-compliant secure IoT firmware updates, over the network. Check out this example which you could reproduce on your favorite low-power hardware!
RIOT-fp Workshop Fall 2019
19.09.2019. The first RIOT-fp workshop takes place in Paris on Sept. 19th 2019. Here is the agenda.
Applicability of Refinement Type Theory for Embedded IoT Logic
10.09.2019. We have published a paper investigating the applicability of refinement type theory to IoT devices. In practice, we consider the simple yet challenging verification of a stepper motor controller. The paper overviews the constraints which challenge thorough verification using F*. This study encompasses not only software artefacts such as the OS running on the device, but also physical artefacts, including a discrete real-time abstraction of its hardware architecture. A version of the paper not behind a paywall is also available.
IETF steps Towards Authenticated Key Exchange for OSCORE
27.08.2019. A new working group called LAKE (Lightweight Authenticated Key Exchange) is being chartered in the IETF aiming to design a key exchange protocol for OSCORE. OSCORE is an application-layer protection mechanism for CoAP used in 6TiSCH networks. The LAKE outcome is important for RIOT-fp as one of our objectives is to design a zero-touch secure joining protocol for Internet of Things networks, with dependency on both OSCORE and LAKE.
New Publication on secure IoT Firmware Update
07.06.2019. Together with ARM, we published a new article in IEEE Access, which describes the guts of our preliminary prototype for secure firmware update on microcontroller-based IoT devices, using RIOT and the upcoming SUIT specification from IETF.
New RIOT release!
02.05.2019. RIOT 2019.04 is now available, which includes a number of new features including porting of riotboot to a number of new platforms, and the ability for firmware to flash images into a separate boot slot. Basic IEEE 802.15.4 support was added on the nRF52840, as well as support for several new boards and new sensors.
New website
26.04.2019. The RIOT-fp website launched!
RIOT-fp project start
20.03.2019. The RIOT-fp project launched!