Issue link: https://read.uberflip.com/i/1448193
17 END OF YEAR REPORT 2018 Approved for distribution outside of the LoRa Alliance™ LoRaWAN ™ SECURITY • Security is a fundamental need in all IoT applications, yet few LPWAN implement end-to-end encryption, however, it has been designed into the LoRaWAN™ specification from the very beginning • Designed to fit the general LoRaWAN design criteria: low power consumption, low implementation complexity, low cost and high scalability - LoRaWAN security design adheres to state-of-the-art principles: use of standard, well-vetted algorithms, and end-to-end security - LoRaWAN security supports these fundamental properties: mutual authentication, integrity protection and confidentiality • Mutual authentication is established between a LoRaWAN end-device and the LoRaWAN network as part of the network join procedure to ensures only genuine and authorized devices will be joined to genuine and authentic networks • LoRaWAN MAC and application messaging are origin authenticated, integrity protected, replay protected, and encrypted - Combined with mutual authentication, this ensures that network traffic has not been altered, is coming from a legitimate device, is not comprehensible to eavesdroppers and has not been captured and replayed by rogue actors • LoRaWAN security further implements end-to-end encryption for application payloads exchanged between the end-devices and application servers. • As a comparison, some traditional cellular networks, encrypt traffic using an over the air interface, but it is transported as plain text in the operator's core network. Consequently, end users are burdened by selecting, deploying and managing an additional security layer (generally implemented by some type of VPN or application layer encryption security such as TLS) - This approach is not suited in LPWANs where over-the-top security layers add considerable additional power consumption, complexity and cost. More information is available here: https://lora-alliance.org/sites/default/files/2018-04/lora_alliance_security_whitepaper.pdf