The Fallout of Key Compromise in a Proxy-Mediated Key Agreement Protocol - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2017

The Fallout of Key Compromise in a Proxy-Mediated Key Agreement Protocol

Résumé

In this paper, we analyze how key compromise affects the protocol by Nguyen et al. presented at ESORICS 2016, an authenticated key agreement protocol mediated by a proxy entity, restricted to only symmetric encryption primitives and intended for IoT environments. This protocol uses long-term encryption tokens as intermediate values during encryption and decryption procedures, which implies that these can be used to encrypt and decrypt messages without knowing the corresponding secret keys. In our work, we show how key compromise (or even compromise of encryption tokens) allows to break forward security and leads to key compromise impersonation attacks. Moreover, we demonstrate that these problems cannot be solved even if the affected user revokes his compromised secret key and updates it to a new one. The conclusion is that this protocol cannot be used in IoT environments, where key compromise is a realistic risk.
Fichier principal
Vignette du fichier
453481_1_En_25_Chapter.pdf (531.92 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01684370 , version 1 (15-01-2018)

Licence

Paternité

Identifiants

Citer

David Nuñez, Isaac Agudo, Javier Lopez. The Fallout of Key Compromise in a Proxy-Mediated Key Agreement Protocol. 31th IFIP Annual Conference on Data and Applications Security and Privacy (DBSEC), Jul 2017, Philadelphia, PA, United States. pp.453-472, ⟨10.1007/978-3-319-61176-1_25⟩. ⟨hal-01684370⟩
75 Consultations
106 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More