On the security of the canetti-krawczyk model

Authors:
Xinghua Li;Jianfeng Ma;SangJae Moon
Affiliations:
Key Laboratory of Computer Networks and Information Security(Ministry of Education) Xidian University, Xi’an, China;Key Laboratory of Computer Networks and Information Security(Ministry of Education) Xidian University, Xi’an, China;Mobile Network Security Technology Research Center, Kyungpook National University, Daegu, Korea
Venue:
CIS'05 Proceedings of the 2005 international conference on Computational Intelligence and Security - Volume Part II
Year:
2005

Citing 15
Cited 2

A logic of authentication

ACM Transactions on Computer Systems (TOCS)
Authentication and authenticated key exchanges

Designs, Codes and Cryptography
Entity authentication and key distribution

CRYPTO '93 Proceedings of the 13th annual international cryptology conference on Advances in cryptology
Provably secure session key distribution: the three party case

STOC '95 Proceedings of the twenty-seventh annual ACM symposium on Theory of computing
A modular approach to the design and analysis of authentication and key exchange protocols (extended abstract)

STOC '98 Proceedings of the thirtieth annual ACM symposium on Theory of computing
Handbook of Applied Cryptography

Handbook of Applied Cryptography
Efficient, DoS-resistant, secure key exchange for internet protocols

Proceedings of the 9th ACM conference on Computer and communications security
Security Analysis of IKE's Signature-Based Key-Exchange Protocol

CRYPTO '02 Proceedings of the 22nd Annual International Cryptology Conference on Advances in Cryptology
Formal Verification of Cryptographic Protocols: A Survey

ASIACRYPT '94 Proceedings of the 4th International Conference on the Theory and Applications of Cryptology: Advances in Cryptology
Analysis of Key-Exchange Protocols and Their Use for Building Secure Channels

EUROCRYPT '01 Proceedings of the International Conference on the Theory and Application of Cryptographic Techniques: Advances in Cryptology
Universally Composable Notions of Key Exchange and Secure Channels

EUROCRYPT '02 Proceedings of the International Conference on the Theory and Applications of Cryptographic Techniques: Advances in Cryptology
Key Agreement Protocols and Their Security Analysis

Proceedings of the 6th IMA International Conference on Cryptography and Coding
Provably secure key exchange: an engineering approach

ACSW Frontiers '03 Proceedings of the Australasian information security workshop conference on ACSW frontiers 2003 - Volume 21
SKEME: a versatile secure key exchange mechanism for Internet

SNDSS '96 Proceedings of the 1996 Symposium on Network and Distributed System Security (SNDSS '96)
Security requirements for key establishment proof models: revisiting Bellare–Rogaway and Jeong–Katz–Lee protocols

ACISP'05 Proceedings of the 10th Australasian conference on Information Security and Privacy

Security analysis of the authentication modules of Chinese WLAN standard and its implementation plan

NPC'07 Proceedings of the 2007 IFIP international conference on Network and parallel computing
Multi-tag and multi-owner RFID ownership transfer in supply chains

Decision Support Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

The Canetti-Krawczyk (CK) model is a formal method to design and analyze of key agreement protocols, and these protocols should have some desirable security attributes. In this paper, the relationship between the CK model and the desirable security attributes for a key agreement protocol is analyzed. The conclusions indicate that: (1) protocols designed and proved secure by the CK model offer almost all the security attributes, such as perfect forward secrecy (PFS), loss of information, known-key security, key-compromise impersonation and unknown key-share, but the attribute of key control; (2) loss of information and key-compromise impersonation can be guaranteed by the first requirement of the security definition (SK-security) in the CK model, while PFS and known-key security by the second requirement, and unknown key-share can be ensured by either the requirement. Thereafter, the advantages and disadvantages of the CK model are presented.