Malicious participants in group key exchange: key control and contributiveness in the shadow of trust

  • Authors:
  • Emmanuel Bresson;Mark Manulis

  • Affiliations:
  • DCSSI Crypto Lab Paris;Horst Görtz Institute, Ruhr-University of Bochum, Germany

  • Venue:
  • ATC'07 Proceedings of the 4th international conference on Autonomic and Trusted Computing
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

Group key exchange protocols allow their participants to compute a secret key which can be used to ensure security and privacy for various multiparty applications. The resulting group key should be computed through cooperation of all protocol participants such that none of them is trusted to have any advantage concerning the protocol's output. This trust relationship states the main difference between group key exchange and group key transport protocols. Obviously, misbehaving participants in group key exchange protocols may try to influence the resulting group key, thereby disrupting this trust relationship, and also causing further security threats. This paper analyzes the currently known security models for group key exchange protocols with respect to this kind of attacks by malicious participants and proposes an extended model to remove the identified limitations. Additionally, it proposes an efficient and provably secure generic solution, a compiler, to guarantee these additional security goals for group keys exchanged in the presence of malicious participants.