Reusing Static Keys in Key Agreement Protocols

Authors:
Sanjit Chatterjee;Alfred Menezes;Berkant Ustaoglu
Affiliations:
Department of Combinatorics & Optimization, University of Waterloo,;Department of Combinatorics & Optimization, University of Waterloo,;NTT Information Sharing Platform Laboratories, Tokyo, Japan
Venue:
INDOCRYPT '09 Proceedings of the 10th International Conference on Cryptology in India: Progress in Cryptology
Year:
2009

Citing 16
Cited 3

Handbook of Applied Cryptography

Handbook of Applied Cryptography
An Efficient Protocol for Authenticated Key Agreement

Designs, Codes and Cryptography
Efficient Identity Based Signature Schemes Based on Pairings

SAC '02 Revised Papers from the 9th Annual International Workshop on Selected Areas in Cryptography
Identity-Based Encryption from the Weil Pairing

CRYPTO '01 Proceedings of the 21st Annual International Cryptology Conference on Advances in Cryptology
Universal Padding Schemes for RSA

CRYPTO '02 Proceedings of the 22nd Annual International Cryptology Conference on Advances in Cryptology
Robustness Principles for Public Key Protocols

CRYPTO '95 Proceedings of the 15th Annual International Cryptology Conference on Advances in Cryptology
Secure Integration of Asymmetric and Symmetric Encryption Schemes

CRYPTO '99 Proceedings of the 19th Annual International Cryptology Conference on Advances in Cryptology
Analysis of Key-Exchange Protocols and Their Use for Building Secure Channels

EUROCRYPT '01 Proceedings of the International Conference on the Theory and Application of Cryptographic Techniques: Advances in Cryptology
Protocol Interactions and the Chosen Protocol Attack

Proceedings of the 5th International Workshop on Security Protocols
Key Agreement Protocols and Their Security Analysis

Proceedings of the 6th IMA International Conference on Cryptography and Coding
Security arguments for the UM key agreement protocol in the NIST SP 800-56A standard

Proceedings of the 2008 ACM symposium on Information, computer and communications security
Comparing the Pre- and Post-specified Peer Models for Key Agreement

ACISP '08 Proceedings of the 13th Australasian conference on Information Security and Privacy
Efficient One-Round Key Exchange in the Standard Model

ACISP '08 Proceedings of the 13th Australasian conference on Information Security and Privacy
Stronger security of authenticated key exchange

ProvSec'07 Proceedings of the 1st international conference on Provable security
On the importance of the key separation principle for different modes of operation

ISPEC'08 Proceedings of the 4th international conference on Information security practice and experience
Security analysis of KEA authenticated key exchange protocol

PKC'06 Proceedings of the 9th international conference on Theory and Practice of Public-Key Cryptography

Ephemeral key leakage resilient and efficient ID-AKEs that can share identities, private and master keys

Pairing'10 Proceedings of the 4th international conference on Pairing-based cryptography
A generic variant of NIST's KAS2 key agreement protocol

ACISP'11 Proceedings of the 16th Australasian conference on Information security and privacy
On forward secrecy in one-round key exchange

IMACC'11 Proceedings of the 13th IMA international conference on Cryptography and Coding

Quantified Score

Hi-index	0.00

Visualization

Abstract

Contrary to conventional cryptographic wisdom, the NIST SP 800-56A standard explicitly allows the use of a static key pair in more than one of the key establishment protocols described in the standard. In this paper, we give examples of key establishment protocols that are individually secure, but which are insecure when static key pairs are reused in two of the protocols. We also propose an enhancement of the extended Canetti-Krawczyk security model and definition for the situation where static public keys are reused in two or more key agreement protocols.