A Commitment-based Authentication model for Key Exchange protocols

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Sánchez-Ledesma, Rodrigo Martín, Martín, David Domingo, Chacón, Iván Blanco, Velasco, Ignacio Luengo
Natura: Preprint
Pubblicazione: 2023
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866913155812163584
author Sánchez-Ledesma, Rodrigo Martín
Martín, David Domingo
Chacón, Iván Blanco
Velasco, Ignacio Luengo
author_facet Sánchez-Ledesma, Rodrigo Martín
Martín, David Domingo
Chacón, Iván Blanco
Velasco, Ignacio Luengo
contents In this work we construct an alternative model for Authenticated Key Exchange, intended to build a theoretic security framework for protocols whose characteristics may not always concur with the specifics of already existing models for authenticated exchanges. This model is constructed in a modular way, from the notion of commitment schemes and employing ephemeral information, therefore avoiding the exchange of long-term cryptographic material. From this model, we propose a number of Commitment-based protocols to establish a shared secret between two parties, and study their resistance over unauthenticated channels. This means analyzing the security of the protocol itself, and its robustness against Man-in-the-Middle attacks, by formalizing their security under this model. The protocols are constructed from Key Agreement (KA) and Key Encapsulation (KEM) primitives, to show that this model can be applied to both established and new paradigms. We highlight the differences that arise naturally, due to the nature of KEM constructions, in terms of the protocol itself and the types of attacks that they are subject to. We provide practical go-to protocols instances to migrate to, both for KEM-based and KA-based cryptographic primitives.
format Preprint
id arxiv_https___arxiv_org_abs_2307_15465
institution arXiv
publishDate 2023
record_format arxiv
spellingShingle A Commitment-based Authentication model for Key Exchange protocols
Sánchez-Ledesma, Rodrigo Martín
Martín, David Domingo
Chacón, Iván Blanco
Velasco, Ignacio Luengo
Cryptography and Security
In this work we construct an alternative model for Authenticated Key Exchange, intended to build a theoretic security framework for protocols whose characteristics may not always concur with the specifics of already existing models for authenticated exchanges. This model is constructed in a modular way, from the notion of commitment schemes and employing ephemeral information, therefore avoiding the exchange of long-term cryptographic material. From this model, we propose a number of Commitment-based protocols to establish a shared secret between two parties, and study their resistance over unauthenticated channels. This means analyzing the security of the protocol itself, and its robustness against Man-in-the-Middle attacks, by formalizing their security under this model. The protocols are constructed from Key Agreement (KA) and Key Encapsulation (KEM) primitives, to show that this model can be applied to both established and new paradigms. We highlight the differences that arise naturally, due to the nature of KEM constructions, in terms of the protocol itself and the types of attacks that they are subject to. We provide practical go-to protocols instances to migrate to, both for KEM-based and KA-based cryptographic primitives.
title A Commitment-based Authentication model for Key Exchange protocols
topic Cryptography and Security
url https://arxiv.org/abs/2307.15465