Comparison of OSCORE-NG with Requests for Comments (RFCs)

Feature	IPsec	DTLS	OSCORE	OSCORE-NG
Authenticated encryption	✅	✅	✅	✅
Sequential freshness	✅	✅	✅	✅
True end-to-end security	❌	❌	✅	✅
Resistance to mismatch attacks	⚪*	⚪*	✅	✅
Resilience to delay attacks	⚪*	⚪*	⚪*	✅
Resistance to denial-of-sleep attacks	✅	✅	❌	✅

* RFC 9175 mitigates at the cost of communication overhead

Further Reading

• Paper