Efficient eCK-Secure Authenticated Key Exchange Protocols in the Standard Model
- 1.7k Downloads
The extended CanettiKrawczyk (eCK) security model, is widely used to provide security arguments for authenticated key exchange protocols that capture leakage of various kinds of secret information like the long-term private key and session-specific secret state. In this paper, we study the open problem on constructing eCK secure AKE protocol without random oracles and NAXOS like trick. A generic construction GC-KKN satisfying those requirements is first given relying on standard cryptographic primitives. On the second a concrete protocol is proposed which is the first eCK secure protocol in the standard model under both standard assumptions and post-specified peer setting. Both proposed schemes can be more efficiently implemented with secure device than previous eCK secure protocols in the standard model, where the secure device might be normally used to store the long-term private key and implement algorithms of protocol which require to be resilience of state leakage.
KeywordseCK model authenticated key exchange standard model key encapsulation mechanism non-interactive key exchange
- 2.Blake-Wilson, S., Johnson, D., Menezes, A.: Key agreement protocols and their security analysis. In: Darnell, M. (ed.) Cryptography and Coding 1997. LNCS, vol. 1355, pp. 30–45. Springer, Heidelberg (1997)Google Scholar
- 13.Yang, Z.: Efficient eck-secure authenticated key exchange protocols in the standard model (full version). Cryptology ePrint Archive, Report 2013/365 (2013), http://eprint.iacr.org/