Securing group key exchange against strong corruptions and key registration attacks
type: Item
instance of: scholarly article
title: Securing group key exchange against strong corruptions and key registration attacks
zbMATH Open document ID: 1154.94380
DOI: 10.1504/IJACT.2008.021083
author: Emmanuel Bresson
author: Mark Manulis
published in: International Journal of Applied Cryptography
publication date: 2009-02-24T00:00:00Z
review text: Summary: In Group Key Exchange (GKE) protocols, users usually extract the group key using some auxiliary (ephemeral) secret information generated during the execution. Strong corruptions are attacks by which an adversary can reveal these ephemeral secrets, in addition to the possibly used long-lived keys. Undoubtedly, security impact of strong corruptions is serious, and thus specifying appropriate security requirements and designing secure GKE protocols appears an interesting yet challenging task -- the aim of our article. We start by investigating the current setting of strong corruptions and derive some refinements like opening attacks that allow to reveal ephemeral secrets of users without their long-lived keys. This allows to consider even stronger attacks against honest, but `opened' users. Further, we define strong security goals for GKE protocols in the presence of such powerful adversaries and propose a 3-round GKE protocol, named TDH1, which remains immune to their attacks under standard cryptographic assumptions. Our security definitions allow adversaries to register users and specify their long-lived keys, thus, in particular capture attacks of malicious insiders for the appropriate security goals such as Mutual Authentication, key confirmation, contributiveness, key control and key-replication resilience.
Mathematics Subject Classification ID: 94A60
zbMATH DE Number: 5510722
zbMATH Keywords: authenticated group Key exchange
zbMATH Keywords: GKE protocols
zbMATH Keywords: contributiveness
zbMATH Keywords: insider attacks
zbMATH Keywords: Key registration
zbMATH Keywords: mutual authentication
zbMATH Keywords: strong corruptions
zbMATH Keywords: tree Diffie-Hellman
zbMATH Keywords: TDH1
zbMATH Keywords: security
zbMATH Keywords: cryptography
zbMATH Keywords: ephemeral secrets
zbMATH Keywords: malicious insiders
describes a project that uses: HMQV
describes a project that uses: NAXOS
MaRDI profile type: Publication
full work available at URL: ijact.2008.021083
OpenAlex ID: W2171800211
description: scientific article; zbMATH DE number 5510722