Show simple item record

dc.contributor.authorWu, Jiang
dc.contributor.authorUstaoğlu, Berkant
dc.date.accessioned2017-02-02T11:02:54Z
dc.date.available2017-02-02T11:02:54Z
dc.date.issued2009
dc.identifier.citationWu, J., and Ustaoğlu, B. (2009). Efficient key exchange with tight security reduction. Cryptology ePrint Archive, Report 2009/288. http://eprint.iacr.org/2009/288en_US
dc.identifier.urihttp://eprint.iacr.org/2009/288
dc.identifier.urihttp://hdl.handle.net/11147/4785
dc.description.abstractIn this paper, we propose two authenticated key exchange (AKE) protocols, SMEN and SMEN−, which have efficient online computation and tight security proof in the extended Canetti-Krawczyk (eCK) model. SMEN takes 1.25 exponentiations in online computation, close to that (1.17 exponentiations) of the most efficient AKEs MQV and its variants HMQV and CMQV. SMEN has a security reduction as tight as that of NAXOS, which is the first AKE having a tight security reduction in the eCK model. As a comparison, MQV does not have a security proof; both HMQV and CMQV have a highly non-tight security reduction, and HMQV needs a non-standard assumption; NAXOS takes 2.17 exponentiations in online computation; NETS, a NAXOS variant, takes two online exponentiations in online computation. SMEN simultaneously achieves online efficiency and a tight security proof at a cost of 0.17 more exponentiations in offline computation and the restriction that one party is not allowed to establish a key with itself. SMEN− takes 1.29 exponentiations in online computation, but SMEN− does not use the static private key to compute the ephemeral public key (as does in SMEN, NAXOS, CMQV, and NETS), and hence reduces the risk of leaking the static private key.en_US
dc.language.isoengen_US
dc.publisherInternational Association for Cryptologic Researchen_US
dc.rightsinfo:eu-repo/semantics/openAccessen_US
dc.subjectCryptographic protocolsen_US
dc.subjectAuthenticated key exchangeen_US
dc.subjectHMQVen_US
dc.subjectSMENen_US
dc.titleEfficient key exchange with tight security reductionen_US
dc.typearticleen_US
dc.contributor.authorIDTR102756en_US
dc.relation.journalCryptology ePrint Archiveen_US
dc.identifier.volumeReport 2009/288en_US
dc.relation.publicationcategoryMakale - Uluslararası Hakemli Dergi - Kurum Öğretim Elemanıen_US


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record