What do we mean by entity authentication?

  • Authors:
  • Dieter Gollmann

  • Affiliations:
  • Department of Computer Science, Royal Holloway, University of London, Egham, Surrey, United Kingdom

  • Venue:
  • SP'96 Proceedings of the 1996 IEEE conference on Security and privacy
  • Year:
  • 1996

Quantified Score

Hi-index 0.00

Visualization

Abstract

The design of authentication protocols has proven to be surprisingly error prone. We suggest that this is partly due to a language problem. The objectives of entity authentication are usually given in terms of human encounters while we actually implement message passing protocols. We propose various translations of the high level objectives into a language appropriate for communication protocols. In addition, protocols are often specified at too low a level of abstraction. We will argue that encryption should not be used as a general primitive as it does not capture the specific purpose for using a cryptographic function in a particular protocol.