Notes: Lightweight certificate revocation for low-power IoT with end-to-end security

A few months ago I ran across Lightweight certificate revocation for low-power IoT with end-to-end security (2023), a proposal to make PKI-style revocation viable in constrained devices using slimmed-down, CBOR-based TinyOCSP and compressed Bloom filters.

Revocation isn’t just an IoT issue. It connects to many topics, from membership proofs—à la Automatic Bill of Materials—to transparency log auditing. I liked that this paper goes all the way down to practical implementation details but still takes time to introduce basic concepts for the reader.