On session identifiers in provably secure protocols: the Bellare-Rogaway three-party key distribution protocol revisited

Authors:
Kim-Kwang Raymond Choo;Colin Boyd;Yvonne Hitchcock;Greg Maitland
Affiliations:
Information Security Research Centre, Queensland University of Technology, Brisbane, QLD, Australia;Information Security Research Centre, Queensland University of Technology, Brisbane, QLD, Australia;Information Security Research Centre, Queensland University of Technology, Brisbane, QLD, Australia;Information Security Research Centre, Queensland University of Technology, Brisbane, QLD, Australia
Venue:
SCN'04 Proceedings of the 4th international conference on Security in Communication Networks
Year:
2004

Citing 17
Cited 15

A digital signature scheme secure against adaptive chosen-message attacks

SIAM Journal on Computing - Special issue on cryptography
Augmented encrypted key exchange: a password-based protocol secure against dictionary attacks and password file compromise

CCS '93 Proceedings of the 1st ACM conference on Computer and communications security
Entity authentication and key distribution

CRYPTO '93 Proceedings of the 13th annual international cryptology conference on Advances in cryptology
Provably secure session key distribution: the three party case

STOC '95 Proceedings of the twenty-seventh annual ACM symposium on Theory of computing
The security of the cipher block chaining message authentication code

Journal of Computer and System Sciences
Provably authenticated group Diffie-Hellman key exchange

CCS '01 Proceedings of the 8th ACM conference on Computer and Communications Security
Authenticated Diffie-Hellman Key Agreement Protocols

SAC '98 Proceedings of the Selected Areas in Cryptography
Analysis of Key-Exchange Protocols and Their Use for Building Secure Channels

EUROCRYPT '01 Proceedings of the International Conference on the Theory and Application of Cryptographic Techniques: Advances in Cryptology
Dynamic Group Diffie-Hellman Key Exchange under Standard Assumptions

EUROCRYPT '02 Proceedings of the International Conference on the Theory and Applications of Cryptographic Techniques: Advances in Cryptology
Provably Authenticated Group Diffie-Hellman Key Exchange - The Dynamic Case

ASIACRYPT '01 Proceedings of the 7th International Conference on the Theory and Application of Cryptology and Information Security: Advances in Cryptology
Entity Authentication and Authenticated Key Transport Protocols Employing Asymmetric Techniques

Proceedings of the 5th International Workshop on Security Protocols
Mutual Authentication for Low-Power Mobile Devices

FC '01 Proceedings of the 5th International Conference on Financial Cryptography
Round-Optimal Contributory Conference Key Agreement

PKC '03 Proceedings of the 6th International Workshop on Theory and Practice in Public Key Cryptography: Public Key Cryptography
Encrypted Key Exchange: Password-Based Protocols SecureAgainst Dictionary Attacks

SP '92 Proceedings of the 1992 IEEE Symposium on Security and Privacy
Session key distribution using smart cards

EUROCRYPT'96 Proceedings of the 15th annual international conference on Theory and application of cryptographic techniques
Authenticated key exchange secure against dictionary attacks

EUROCRYPT'00 Proceedings of the 19th international conference on Theory and application of cryptographic techniques
Public-key encryption in a multi-user setting: security proofs and improvements

EUROCRYPT'00 Proceedings of the 19th international conference on Theory and application of cryptographic techniques

Security weakness in a three-party pairing-based protocol for password authenticated key exchange

Information Sciences: an International Journal
An improved identity-based key agreement protocol and its security proof

Information Sciences: an International Journal
Partnership in key exchange protocols

Proceedings of the 4th International Symposium on Information, Computer, and Communications Security
Password-based authenticated key distribution in the three-party setting with forward security

International Journal of Communication Networks and Distributed Systems
The importance of proofs of security for key establishment protocols

Computer Communications
Traceable privacy of recent provably-secure RFID protocols

ACNS'08 Proceedings of the 6th international conference on Applied cryptography and network security
Modeling and analyzing security in the presence of compromising adversaries

ESORICS'10 Proceedings of the 15th European conference on Research in computer security
Automating computational proofs for public-key-based key exchange

ProvSec'10 Proceedings of the 4th international conference on Provable security
Examining indistinguishability-based security models for key exchange protocols: the case of CK, CK-HMQV, and eCK

Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security
Security improvement on a group key exchange protocol for mobile networks

ICCSA'11 Proceedings of the 2011 international conference on Computational science and its applications - Volume Part IV
Examining indistinguishability-based proof models for key establishment protocols

ASIACRYPT'05 Proceedings of the 11th international conference on Theory and Application of Cryptology and Information Security
On the role definitions in and beyond cryptography

ASIAN'04 Proceedings of the 9th Asian Computing Science conference on Advances in Computer Science: dedicated to Jean-Louis Lassez on the Occasion of His 5th Cycle Birthday
Security requirements for key establishment proof models: revisiting Bellare–Rogaway and Jeong–Katz–Lee protocols

ACISP'05 Proceedings of the 10th Australasian conference on Information Security and Privacy
Design of secure key establishment protocols: successes, failures and prospects

INDOCRYPT'04 Proceedings of the 5th international conference on Cryptology in India
A framework for robust group key agreement

ICCSA'06 Proceedings of the 2006 international conference on Computational Science and Its Applications - Volume Part III

Quantified Score

Hi-index	0.00

Visualization

Abstract

We examine the role of session identifiers (SIDs) in security proofs for key establishment protocols. After reviewing the practical importance of SIDs we use as a case study the three-party server-based key distribution (3PKD) protocol of Bellare and Rogaway, proven secure in 1995. We show incidentally that the partnership function used in the existing security proof is flawed. There seems to be no way to define a SID for the 3PKD protocol that will preserve the proof of security. A small change to the protocol allows a natural definition for a SID and we prove that the new protocol is secure using this SID to define partnering.