DTLS protocol version?

[Bjorn191023]

Hi,

What DTLS protocol version is implemented in nrf/zephyr? Do you support DTLS 1.3?

BR / Bjorn

[Heidi]

Hi!

DTLS versions 1.0 and 1.2 are both implemented. It does not support DTLS 1.3 unfortunately.

Best regards,

Heidi

[Johan]

Hi Heidi!

This question above was answered 12 long months ago.

Will DTLS 1.3 be supported any time soon?

TLS 1.2 seems to have some security flaws that attackers can use to get access and fake packet content.

https://calcomsoftware.com/leaving-tls1-2-using-tls1-3/#:~:text=Researchers%20have%20revealed%20two%20new,cipher%20block%20chaining%20(CBC).

https://securityboulevard.com/2020/09/raccoon-attack-researchers-find-a-vulnerability-in-tls-1-2/

access.redhat.com/.../2112261

How have Nordic mitigated those above cases in Nordics risk plan for encryption towards the cloud?


Johan

[Heidi]

Hi Johan!

I've forwarded this question to our developers and I'll update you along the way.

Best regards,

Heidi

[Johan]

Did they formulate an answer yet? What does the roadmap for getting TLS1.3 look like? I'm shocked if it's not in the roadmap yet.

[Heidi]

Hi, they have not formulated an answer yet. I'm so sorry about this.