A forward-secure e-mail protocol without certificated public keys

  • Authors:
  • Jeong Ok Kwon;Ik Rae Jeong;Dong Hoon Lee

  • Affiliations:
  • Information Security Center, Samsung SDS, Seocho 2-dong, Seocho-gu, 137-857 Seoul, Republic of Korea;Graduate School of Information Security, CIST, Korea University, 1, 5-Ka, Anam-dong Sungbuk-ku, 136-701 Seoul, Republic of Korea;Graduate School of Information Security, CIST, Korea University, 1, 5-Ka, Anam-dong Sungbuk-ku, 136-701 Seoul, Republic of Korea

  • Venue:
  • Information Sciences: an International Journal
  • Year:
  • 2009

Quantified Score

Hi-index 0.07

Visualization

Abstract

Forward secrecy in an e-mail system means that compromising of the long-term secret keys of the mail users and mail servers does not affect the confidentiality of the e-mail messages. Previous forward-secure e-mail protocols used the certified public keys of the users using PKI (Public Key Infrastructure). In this paper, we propose a password-based authenticated e-mail protocol providing forward secrecy. The proposed protocol does not require certified public keys and is sufficiently efficient to be executed on resource-restricted mobile devices.