(2018) Strengthening the Security of Authenticated Key Exchange against Bad Randomness.
|
Text
strengthening_the_security_of_authenticated_key_exchange_against_bad_randomness.pdf Download (519kB) | Preview |
Abstract
Recent history has revealed that many random number generators (RNGs) used in cryptographic algorithms and protocols were not providing appropriate randomness, either by accident or on purpose. Subsequently, researchers have proposed new algorithms and protocols that are less dependent on the random number generator. One exception is that all prominent authenticated key exchange (AKE) protocols are insecure given bad randomness, even when using good long-term keying material. We analyse the security of AKE protocols in the presence of adversaries that can perform attacks based on chosen randomness, i. e., attacks in which the adversary controls the randomness used in protocol sessions. We propose novel stateful protocols, which modify memory shared among a user’s sessions, and show in what sense they are secure against this worst case randomness failure. We develop a stronger security notion for AKE protocols that captures the security that we can achieve under such failures, and prove that our main protocol is correct in this model. Our protocols make substantially weaker assumptions on the RNG than existing protocols.
| Item Type: | Article |
|---|---|
| Divisions: | Cas Cremers (CC) |
| Depositing User: | Benjamin Kiesl |
| Date Deposited: | 27 Feb 2020 13:06 |
| Last Modified: | 27 Feb 2020 13:06 |
| Primary Research Area: | NRA3: Threat Detection and Defenses |
| URI: | https://publications.cispa.saarland/id/eprint/2993 |
Actions
Actions (login required)
 |
View Item |