SPAKE: a single-party public-key authenticated key exchange protocol for contact-less applications

Authors:
Jean-Sébastien Coron;Aline Gouget;Pascal Paillier;Karine Villegas
Affiliations:
University of Luxembourg;CryptoExperts and Gemalto Security Labs;CryptoExperts and Gemalto Security Labs;Gemalto Security Labs
Venue:
FC'10 Proceedings of the 14th international conference on Financial cryptograpy and data security
Year:
2010

Citing 5
Cited 1

RSA-OAEP Is Secure under the RSA Assumption

CRYPTO '01 Proceedings of the 21st Annual International Cryptology Conference on Advances in Cryptology
Relations Among Notions of Security for Public-Key Encryption Schemes

CRYPTO '98 Proceedings of the 18th Annual International Cryptology Conference on Advances in Cryptology
The Random Oracle Model and the Ideal Cipher Model Are Equivalent

CRYPTO 2008 Proceedings of the 28th Annual conference on Cryptology: Advances in Cryptology
Authenticated key exchange secure against dictionary attacks

EUROCRYPT'00 Proceedings of the 19th international conference on Theory and application of cryptographic techniques
20 years of ECM

ANTS'06 Proceedings of the 7th international conference on Algorithmic Number Theory

Practical and post-quantum authenticated key exchange from one-way secure key encapsulation mechanism

Proceedings of the 8th ACM SIGSAC symposium on Information, computer and communications security

Quantified Score

Hi-index	0.00

Visualization

Abstract

SPAKE is a cryptographic protocol that provides lightweight transactions in contact-less applications. In this protocol a verifier (a reader or terminal) authenticates a prover (a contact-less card) relative to a certification authority. Additionally, the prover and the verifier must establish a session key for secure messaging. Contrarily to previous solutions such as MIFARE, the protocol is asymmetric in order to allow SAM1-less, low cost readers. Because contact-less transactions are subject to very strong time limitations, the protocol also achieves high-speed computations while providing a customizable security level.