Anzeige
Erschienen in:
2012 | OriginalPaper | Buchkapitel
Beyond eCK: Perfect Forward Secrecy under Actor Compromise and Ephemeral-Key Reveal
verfasst von : Cas Cremers, Michèle Feltz
Erschienen in: Computer Security – ESORICS 2012
Verlag: Springer Berlin Heidelberg
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
We show that it is possible to achieve perfect forward secrecy in two-message key exchange (KE) protocols that satisfy even stronger security properties than provided by the extended Canetti-Krawczyk (eCK) security model. In particular, we consider perfect forward secrecy in the presence of adversaries that can reveal the long-term secret keys of the actor of a session and reveal ephemeral secret keys.
We propose two new game-based security models for KE protocols. First, we formalize a slightly stronger variant of the eCK security model that we call eCK
w
. Second, we integrate perfect forward secrecy into eCK
w
, which gives rise to the even stronger eCK-PFS model. We propose a security-strengthening transformation (i.e., a
compiler
) between our new models. Given a two-message Diffie-Hellman type protocol secure in eCK
w
, our transformation yields a two-message protocol that is secure in eCK-PFS. As an example, we show how our transformation can be applied to the NAXOS protocol.