Problem

How to build secure channels between devices?

TLS

We want to use TLS, but we don't have a PKI in local network. We only can build a confidential connection without authentication.

How about use PAKE to authenticate?