DSKPP and PSKC, IETF Standard Protocol and Payload for Symmetric Key Provisioning

Abstract

This paper will describe the work currently being completed by the IETF ‘keyprov’ working group to create a standard online protocol and payload to provision symmetric keys. Dynamic Symmetric Key Provisioning Protocol - DSKPP provides an open and interoperable mechanism for initializing and configuring symmetric keys to cryptographic modules that are accessible over the Internet. The portable Symmetric Key Container - PSKC specifies a symmetric key XML format for transport and provisioning of symmetric keys (for example One Time Password (OTP) shared secrets or symmetric cryptographic keys) to different types of devices. The paper will outline the mechanisms of DSKPP and its main application use cases. It will also describe the PSKC payload format and its applicability for use within the DSKPP protocol or as a standalone format for off-line key provisioning and transport.