Security analysis of IKE’s signature-based key-exchange protocol

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2442, Issue , 2002, Pages 143-161

  Canetti, Ran ^a   Krawczyk, Hugo ^b  

^a IBM T J WATSON RESEARCH CENTER   (United States)

^b TECHNION ISRAEL INSTITUTE OF TECHNOLOGY   (Israel)

Author keywords

[No Author keywords available]

Indexed keywords

CRYPTOGRAPHY; NETWORK SECURITY; SECURITY SYSTEMS;

DIFFIE HELLMAN; FORMAL STUDIES; INTERNET KEY EXCHANGE; KEY EXCHANGE; KEY EXCHANGE PROTOCOLS; KEY-EXCHANGE PROTOCOL; SECURITY ANALYSIS;

INTERNET PROTOCOLS;

EID: 84869635960     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/3-540-45708-9_10     Document Type: Conference Paper

References (22)

1. M. Bellare, R. Canetti and H. Krawczyk, “A modular approach to the design and analysis of authentication and key-exchange protocols”, 30th STOC, 1998.
2. M. Bellare and P. Rogaway, “Entity authentication and key distribution”, Advances in Cryptology, - CRYPTO’93, Lecture Notes in Computer Science Vol. 773, D. Stinson ed, Springer-Verlag, 1994, pp. 232-249.
3. R. Canetti, “Universally Composable Security: A New paradigm for Cryptographic Protocols”, 42nd FOCS, 2001. Full version available at http://eprint.iacr.org/2000/067.
4. Canetti, R., and Krawczyk, H., “Security Analysis of IKE’s Signature-based Key- Exchange Protocol”, full version. Cryptology ePrint Archive (http://eprint.iacr.org/), 2002.
5. Canetti, R., and Krawczyk, H., “Analysis of Key-Exchange Protocols and Their Use for Building Secure Channels”, Advances in Cryptology – EUROCRYPT 2001, Full version in: http://eprint.iacr.org/2001/040.
6. Canetti, R., and Krawczyk, H., “Universally Composable Notions of Key Exchange and Secure Channels”, Eurocrypt 02, 2002. Full version available at http://eprint.iacr.org/2002/059.
7. R. Cramer and V. Shoup, “A Practical Public Key Cryptosystem Provable Secure Against Adaptive Chosen Ciphertext Attack”, In Crypto ’98, LNCS No. 1462, pages 13–25, 1998.
8. W. Diffie, P. van Oorschot and M. Wiener, “Authentication and authenticated key exchanges”, Designs, Codes and Cryptography, 2, 1992, pp. 107–125.
9. Gennaro, R., Krawczyk H., and Rabin, T., “Hashed Diffie-Hellman: A Hierarchy of Diffie-Hellman Assumptions”, manuscript, Feb 2002.
10. O. Goldreich, “Foundations of Cryptography: Basic Tools”, Cambridge Press, 2001.
11. D. Harkins and D. Carrel, ed., “The Internet Key Exchange (IKE)”, RFC 2409, Nov. 1998.
12. ISO/IEC IS 9798-3, “Entity authentication mechanisms — Part 3: Entity authentication using asymmetric techniques”, 1993.
13. Karn, P., and Simpson W.A., “The Photuris Session Key Management Protocol”, draft-ietf-ipsec-photuris-03.txt, Sept. 1995.
14. S. Kent and R. Atkinson, “Security Architecture for the Internet Protocol”, Request for Comments 2401, Nov. 1998.
15. Krawczyk, H., “SKEME: A Versatile Secure Key Exchange Mechanism for Internet,”, Proceedings of the 1996 Internet Society Symposium on Network and Distributed System Security, Feb. 1996, pp. 114-127.
16. Krawczyk, H., IPsec mailing list archives, http://www.vpnc.org/ietf-ipsec/, April-June 1995.
17. Krawczyk, H., “The order of encryption and authentication for protecting communications (Or: how secure is SSL?)”, Crypto’2001. Full version in: Cryptology ePrint Archive (http://eprint.iacr.org/), Report 2001/045.
18. Krawczyk, H., “SIGMA: the ‘SIGn-and-MAc’ Approach to Authenticated Diffie- Hellman Protocols”, http://www.ee.technion.ac.il/˜hugo/sigma.html
19. Meadows, C., “Analysis of the Internet Key Exchange Protocol Using the NRL Protocol Analyzer”, Proceedings of the 1999 IEEE Symposium on Security and Privacy, IEEE Computer Society Press, May 1999.
20. A. Menezes, P. Van Oorschot and S. Vanstone, “Handbook of Applied Cryptography,” CRC Press, 1996.
21. Orman, H., “The OAKLEY Key Determination Protocol”, Request for Comments 2412, Nov. 1998.
22. V. Shoup, “On Formal Models for Secure Key Exchange”, Theory of Cryptography Library, 1999. Available at: http://philby.ucsd.edu/cryptolib/1999/99-12.html.