The Fallout of Key Compromise in a Proxy-Mediated Key Agreement Protocol - Data and Applications Security and Privacy XXXI Access content directly
Conference Papers Year : 2017

The Fallout of Key Compromise in a Proxy-Mediated Key Agreement Protocol

Abstract

In this paper, we analyze how key compromise affects the protocol by Nguyen et al. presented at ESORICS 2016, an authenticated key agreement protocol mediated by a proxy entity, restricted to only symmetric encryption primitives and intended for IoT environments. This protocol uses long-term encryption tokens as intermediate values during encryption and decryption procedures, which implies that these can be used to encrypt and decrypt messages without knowing the corresponding secret keys. In our work, we show how key compromise (or even compromise of encryption tokens) allows to break forward security and leads to key compromise impersonation attacks. Moreover, we demonstrate that these problems cannot be solved even if the affected user revokes his compromised secret key and updates it to a new one. The conclusion is that this protocol cannot be used in IoT environments, where key compromise is a realistic risk.
Fichier principal
Vignette du fichier
453481_1_En_25_Chapter.pdf (531.92 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01684370 , version 1 (15-01-2018)

Licence

Attribution

Identifiers

Cite

David Nuñez, Isaac Agudo, Javier Lopez. The Fallout of Key Compromise in a Proxy-Mediated Key Agreement Protocol. 31th IFIP Annual Conference on Data and Applications Security and Privacy (DBSEC), Jul 2017, Philadelphia, PA, United States. pp.453-472, ⟨10.1007/978-3-319-61176-1_25⟩. ⟨hal-01684370⟩
75 View
106 Download

Altmetric

Share

Gmail Facebook X LinkedIn More