Security for Key Management Interfaces - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2011

Security for Key Management Interfaces


We propose a much-needed formal definition of security for cryptographic key management APIs. The advantages of our definition are that it is general, intuitive, and applicable to security proofs in both symbolic and computational models of cryptography. Our definition relies on an idealized API which allows only the most essential functions for generating, exporting and importing keys, and takes into account dynamic corruption of keys. Based on this we can define the security of more expressive APIs which support richer functionality. We illustrate our approach by showing the security of APIs both in symbolic and computational models.
Fichier principal
Vignette du fichier
KSW-csf11.pdf (307.78 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

inria-00636734 , version 1 (08-10-2015)



Steve Kremer, Graham Steel, Bogdan Warinschi. Security for Key Management Interfaces. 24th IEEE Computer Security Foundations Symposium (CSF'11), Jun 2011, Cernay-la-Ville, France. ⟨10.1109/CSF.2011.25⟩. ⟨inria-00636734⟩
81 View
218 Download



Gmail Facebook X LinkedIn More