In the Constrained Application Protocol (CoAP), protected requests allow the server to identify the client, also across different and unrelated data exchanges. This document defines Oblivious CoAP, wh...

In the Constrained Application Protocol (CoAP), protected requests allow the server to identify the client, also across different and unrelated data exchanges. This document defines Oblivious CoAP, which enables oblivious protected exchanges of CoAP messages for use cases where the identification of the client at the server is not desirable.

libcoap contains out-of-bounds read vulnerabilities in OSCORE Appendix B.2 CBOR unwrap handling where get_byte_inc() in src/oscore/oscore_cbor.c relies solely on assert() for bounds checking, which is removed in release builds compiled with NDEBUG. Attackers can send crafted CoAP requests with malformed OSCORE options or responses during OSCORE negotiation to trigger out-of-bounds …

A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches. An out-of-bounds read may occur when parsing certain configuration values, allowing an attacker to infer or read memory beyond string boundaries in the .rodata section. This could potentially lead to information disclosure or denial of service.

In this paper, we present the design, implementation, and analysis of DNS over CoAP~(DoC), a new proposal for secure and privacy-friendly name resolution of constrained IoT devices. We implement diffe...

This document describes JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) serializations with Ascon which received a lot of attention in the area of lightweight cryptography. In 2019, as a part of CAESAR competition, Ascon-128 and Ascon-128a were selected as the first choice for the lightweight authenticated encryption [asconv1.2-caesar]. After, in 2023, National Institute of Standards and Technology (NIST) selected Ascon family of cryptographic algorithms to be the standard for lightweight cryptography [asconv1.2-nist]. This recognition makes it particularly interesting to use Ascon with COSE and JOSE structures. This document does not define any new cryptography, only serializations of existing cryptographic systems described in [NIST.SP.800-232].

Donald Trump Administration Days sent to fit the oscore companies in historical laws, restricts their legal defenses and find ways to form the radically changing politicial. The first Trump moves showed you to use a wider instruments kit to implement their agenda, even commercials indicating as and when putting in action its punitive fees. At the end of a vertical week that started with 100 executive orders after the trump's inauguration they say that a window is open to influence the politics - but only for those capable of keeping .