Matter was created with security and privacy as key design tenets and provides a baseline for building secure IoT devices. The following are key principles of Matter security.
Data privacy aims to protect consumers whose personal information is consumed and transacted. Matter embeds data privacy principles for all interactions between devices and software agents that handle personal information. For complete protection, additional support from the environment and infrastructure that Matter devices operate in is needed.
Matter uses the highest possible level of civilian cryptographic standards for network communications to ensure that unauthorized entities cannot easily access or tamper with data communicated between Matter devices
Required for Matter devices with cryptographic certificates so data is shared only between known Matter entities
Enables anyone to inspect the template for Matter interactions between legitimate Matter nodes
Data shared within Matter interactions is minimized, thereby reducing the potential for inadvertent leakage of information
Data shared between Matter nodes is strictly for a defined purpose, namely, for the specific operations of devices as required by the Matter protocol
Encryption to ensure that messages or identities of communicating parties are not in cleartext on the network