A Universally Composable Secure Channel Based on the KEM-DEM Framework*A preliminary version of this paper was presented at Theory of Cryptography Conference (TCC), LNCS, vol.3378, pp.426--444, February 2005.

  • Authors:

  • Waka Nagao;Yoshifumi Manabe;Tatsuaki Okamoto

  • Affiliations:

  • The authors are with the Graduate School of Informatics, Kyoto University, Kyoto-shi, 606-8501 Japan. E-mail: w-nagao@lab7.kuis.kyoto-u.ac.jp,;The authors are with the Graduate School of Informatics, Kyoto University, Kyoto-shi, 606-8501 Japan. E-mail: w-nagao@lab7.kuis.kyoto-u.ac.jp,;The authors are with the Graduate School of Informatics, Kyoto University, Kyoto-shi, 606-8501 Japan. E-mail: w-nagao@lab7.kuis.kyoto-u.ac.jp,

  • Venue:
  • IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

As part of ISO standards on public-key encryption, Shoup introduced the framework of KEM (Key Encapsulation Mechanism), and DEM (Data Encapsulation Mechanism), for formalizing and realizing one-directional hybrid encryption; KEM is a formalization of asymmetric encryption specified for key distribution, which DEM is a formalization of symmetric encryption. This paper investigates a more general hybrid protocol, secure channel, that uses KEM and DEM, while KEM supports distribution of a session key and DEM, along with the session key, is used for multiple bi-directional encrypted transactions in a session. This paper shows that KEM, which is semantically secure against adaptively chosen ciphertext attacks (IND-CCA2), and DEM, which is semantically secure against adaptively chosen plaintext/ciphertext attacks (IND-P2-C2), along with secure signatures and ideal certification authority are sufficient to realize a universally composable (UC) secure channel. To obtain the main result, this paper also shows several equivalence results: UC KEM, IND-CCA2 KEM and NM-CCA2 (non-malleable against CCA2) KEM are equivalent, and UC DEM, IND-P2-C2 DEM and NM-P2-C2 DEM are equivalent.