On reusing ephemeral keys in Diffie-Hellman key agreement protocols

International Journal of Applied Cryptography

Volumn 2, Issue 2, 2010, Pages 154-158

  Menezes, Alfred ^a   Ustaoglu, Berkant ^b  

^a UNIVERSITY OF WATERLOO   (Canada)

^b NTT CORPORATION   (Japan)

Author keywords

Diffie Hellman; Key agreement protocols

Indexed keywords

EID: 84857829372     PISSN: 17530563     EISSN: 17530571     Source Type: Journal    
DOI: 10.1504/IJACT.2010.038308     Document Type: Article

References (23)

1. Aiello, W., Bellovin, S., Blaze, M., Canetti, R., Ionnidis, J., Keromytis, A. and Reingold, O. (2004) 'Just fast keying: key agreement in a hostile internet', ACM Transactions on Information and Systems Security, Vol. 7, No. 2, pp.1-30.
2. ANSI X9.42 (2001) Public Key Cryptography for the Financial Services Industry: Agreement of Symmetric Keys Using Discrete Logarithm Cryptography, American National Standards Institute.
3. Antipa, A., Brown, D., Menezes, A., Struik, R. and Vanstone, S. (2003) 'Validation of elliptic curve public keys', in Desmedt, Y. (Ed.): Public Key Cryptography - PKC 2003, Lecture Notes in Computer Science, Vol. 2567, pp.211-223, Springer-Verlag. (Pubitemid 137638353)
4. Banks, W. and Shparlinski, I. (2007) 'Integers with a large smooth divisor', Integers: Electronic Journal of Combinatorial Number Theory, Vol. 7, No. A17.
5. Biehl, I., Meyer, B. and Müller, V. (2000) 'Differential fault analysis on elliptic curve cryptosystems', in Bellare, M. (Ed.): Advances in Cryptology - CRYPTO 2000, Lecture Notes in Computer Science, Vol. 1880, pp.131-146, Springer-Verlag.
6. Brown, D. (2006) 'Additional ECC groups for IKE and IKEv2', 10 October, Internet draft, IPSec Working Group.
7. Canetti, R. and Krawczyk, H. (2001) 'Analysis of key-exchange protocols and their use for building secure channels', in Pfitzmann, B. (Ed.): Advances in Cryptology - EUROCRYPT 2001, Lecture Notes in Computer Science, Vol. 2045, pp.453-474, Springer-Verlag, available athttp://eprint.iacr.org/2001/040/. (Pubitemid 33275848)
8. Fu, D. and Solinas, J. (2007) 'ECP groups for IKE and IKEv2', RFC 4753, Internet Engineering Task Force.
9. Housley, R. (2001) 'Triple-DES and RC2 key wrapping', RFC 3217, Internet Engineering Task Force.
10. Housley, R. (2002) 'Cryptographic message syntax (CMS) algorithms', RFC 3370, Internet Engineering Task Force.
11. Housley, R. (2004) 'Cryptographic message syntax (CMS)', RFC 3852, Internet Engineering Task Force.
12. Kaufman, C. (2005) 'Internet key exchange (IKEv2) protocol', RFC 4306, Internet Engineering Task Force.
13. Krawczyk, H. (2003) 'SIGMA: the 'SIGn-and-MAc' approach to authenticated Diffie-Hellman and its use in the IKE protocols', in Boneh, D. (Ed.): Advances in Cryptology -CRYPTO 2003, Lecture Notes in Computer Science, Vol. 2729, pp.400-425, Springer-Verlag. (Pubitemid 137636955)
14. Krawczyk, H. (2005) 'HMQV: a high-performance secure Diffie-Hellman protocol', in Shoup, V. (Ed.): Advances in Cryptology - CRYPTO 2005, Lecture Notes in Computer Science, Vol. 3621, pp.546-566, Springer-Verlag, available athttp://eprint.iacr.org/2005/176/.
15. Krawczyk, H. (2006) 'HMQV in IEEE P1363', Submission to the IEEE P1363 working group, 7 July, available at http://grouper.ieee.org/groups/1363/P1363- Reaffirm/submissions/ krawczyk-hmqv-spec.pdf.
16. Law, L., Menezes, A., Qu, M., Solinas, J. and Vanstone, S. (2003) 'An efficient protocol for authenticated key agreement', Designs, Codes and Cryptography, Vol. 28, pp.119-134.
17. Lim, C. and Lee, P. (1997) 'A key recovery attack on discrete log-based schemes using a prime order subgroup', in Kaliski, B. (Ed.): Advances in Cryptology - CRYPTO '97, Lecture Notes in Computer Science, Vol. 1294, pp.249-263, Springer-Verlag.
18. Matsumoto, T., Takashima, Y. and Imai, H. (1986) 'On seeking smart public-key distribution systems', The Transactions of the IECE of Japan, Vol. E69, pp.99-106. (Pubitemid 16539156)
19. Ramsdell, B. (2004) 'Secure/multipurpose internet mail extensions (S/MIME) version 3.1 - message specification', RFC 3851, Internet Engineering Task Force.
20. Rescorla, E. (1999) 'Diffie-Hellman key agreement method', RFC 2631, Internet Engineering Task Force.
21. Schiller, J. (2005) 'Cryptographic algorithms for use in the Internet Key Exchange Version 2 (IKEv2)', RFC 4307, Internet Engineering Task Force.
22. SP 800-56A (2006) Special Publication 800-56A, Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography, National Institute of Standards and Technology.
23. Zuccherato, R. (2000) 'Methods for avoiding the 'small-subgroup' attacks on the Diffie-Hellman key agreement method for S/MIME', RFC 2785, Internet Engineering Task Force.