Improving secure server performance by Re-balancing SSL/TLS handshakes

Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, ASIACCS '06

Volumn 2006, Issue , 2006, Pages 26-34

  Castelluccia, Claude ^a   Mykletun, Einar ^b   Tsudik, Gene ^b  

^a ZIRST   (France)

^b UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Client puzzles; Denial of service; Hardware accelerators; Load balancing; Server aided RSA; Server aided secure computation

Indexed keywords

DISTRIBUTED COMPUTER SYSTEMS; MATHEMATICAL MODELS; PUBLIC KEY CRYPTOGRAPHY; RESOURCE ALLOCATION; SERVERS;

CLIENT PUZZLES; DENIAL-OF-SERVICE; HARDWARE ACCELERATORS; SERVER-AIDED RSA; SERVER-AIDED SECURE COMPUTATION;

SECURITY OF DATA;

EID: 34247378261     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1128817.1128826     Document Type: Conference Paper

References (32)

1. T. Matsumoto, K. Kato, and H. Imai, "Speeding up Secret Computations with Insecure Auxiliary Devices," Proceedings of Crypto '88, pp. 497-506, 1988.
2. Private communication, "Private communication with D. Wagner," 2005.
3. Network Working Group, "RFC 2246 - The TLS Protocol Version 1.0," Internet RFC/STD/FYI/BCP Archives, 1999, http://www.faqs.org/ rfcs/rfc2246.html.
4. BEA WebLogic, "BEA WebLogic Server Frequently Asked Questions," http: //e-docs.bea.com/wls/docs60/faq/security.html.
5. R. L. Rivest, A. Shamir, and L. M. Adleman, "A Method for Obtaining Digital Signatures and Public-Key Cryptosystems," Communications of the ACM, vol. 21, pp. 120-126, 1978.
6. 0.292," IEEE Transactions on Information Theory, vol. 46, pp. 1339-1349, 2000.
7. J. Quisquater and C. Couvreur, "Fast decipherment algorithm for RSA. public-key cryptosystem," Electronic Letters, vol. 18, pp. 1905-907, 1982.
8. A. J. Menezes, P. C. V. Oorschot, and S. A. Vanstone, "Handbook of Applied Cryptography," The CRC Press series on discrete mathematics and its applications, 1997.
9. B. Pfitzmann and M. Waidner, "Attacks on Protocols for Server-Aided RSA Computations," Proceedings of Eurocrypt '92, pp. 153-162, 1992.
10. R. J. Anderson, "Attack on Server Assisted Authentication Protocols," Electronic Letters, vol. 28, pp. 1473, 1992.
11. T. Matsumoto, H. Imai, C. S. Laih, arid S. M. Yen, "On verifiable implicit asking protocols for RSA computation," Advances in Cryptology - Proceedings of Auscrypt '92, vol. 718, pp. 296-307, 1992.
12. C. H. Lim and P. J. Lee, "Security and performance of server-aided RSA computation protocols," Advances in Cryptology - CRYPTO '95, pp. 70-83, 1995.
13. J. Burns and C. Mitchell, "Parameter Selection for Server-Aided RSA Computation Schemes," IEEE Transactions on Computing, vol. 4.3, pp. 163-174, 1994.
14. C. Laih and F. Tu, "Remarks on Parameter Selection for Server-Aided Secret RSA Computation Schemes," International Workshops on Parallel Processing, pp. 167-173, 1999.
15. P. Béguin and J.J. Quisquater, "Fast Server-Aided RSA Signatures Secure Against Active Attacks," Advances in Cryptology - 'CRYPTO '95, pp. 57-69, 1995.
16. S. Hong, J. Shin, and H. Lee-Kwang, "A new approach to server-aided secret computation," International Conference on Information Security and Cryptology, pp. 33-45, 1998.
17. J. Merkle, "Multi-round passive attacks on server-aided RSA protocols," Proceedings of the 7th ACM conference on Computer end Communications security, pp. 102-107, 2000.
18. P. Nguyen and I. Shparlinski, "On the insecurity of a server-aided RSA. protocol," Proceedings of Asiacrypt '01, vol. 2248, pp. 21-35, 2001.
19. A. K. Lenstra and E. R. Verheul, "Selecting cryptographic, key sizes," Journal of Cryptology: the journal of the International Association for Cryptologic Research, vol. 14, no. 4, pp. 255-293, 2001.
20. H. Shacham and D. Boneh, "Improving SSL Handshake Performance via Batching," Proceedings of RSA 2001, vol. 2020, pp. 28-43, 2001.
21. C. Coarfa, P. Druschel and D. S. Wallach, "Performance Analysis of TLS Web Servers," 9th Network and Systems Security Symposium, pp. 553-558, 2002.
22. R. Mraz, "Secure Blue: An Architecture for a High Volume SSL Internet Server," 17th Annual Computer Security Applications Conference, 2001.
23. SonicWALL, "SonicWALLE SSL-RX," http://www.sonicwall.com/ products/sslrx.html.
24. A. Juels and J. Brainard, "Client Puzzles: A Cryptographic Defense Against Connection Depletion," 5th Network and Systems Security Symposium, pp. 151-165, 1999.
25. D. Dean arid A. Stubblefield, "Using Client Puzzles to Protect TLS," Proceedings of the USENIX Security Symposium, 2001.
26. T. Berson, D. Dean, M. Franklin, D. Smetters, and M. Spreitzer, "Cryptography as a Network Service," 7th Network and Systems Security Symposium, 2001.
27. D. Boneh and H. Shacham, "Fast Variants of RSA," CryptoBytes (RSA Laboratories), vol. 5, pp. 1-9, 2002.
28. H. Cohen, "A Course in Computational Algebraic Number Theory," Graduate Texts in Mathematics, vol. 138, pp. 6, 1996.
29. M. Weiner, "Cryptanalysis of Short RSA Secret Exponents," IEEE Transactions on Information Theory, vol. 36(3), pp. 553-558, 1990.
30. A. Fiat, "Batch RSA," Proceedings of Crypto '89, pp. 175-185, 1989.
31. C. H. Lim and P. J. Lee, "More Flexible Exponentiation with Precomputation," Advances in Cryptology - CRYPTO '94, pp. 95-107, 1994.
32. V. Gupta and D. Stebila arid S. Fung, "Speeding Up Secure Web Transactions Using Elliptic Curve Cryptgraphy," 11th Network and Systems Security Symposium, pp. 231-239, 2004.