Protocols for authentication and key establishment:
Gespeichert in:
| Hauptverfasser: | , , |
|---|---|
| Format: | Buch |
| Sprache: | English |
| Veröffentlicht: |
Berlin
Springer
[2020]
|
| Ausgabe: | Second edition |
| Schriftenreihe: | Information security and cryptography
|
| Schlagworte: | |
| Online-Zugang: | Inhaltstext http://www.springer.com/ Inhaltsverzeichnis Inhaltsverzeichnis |
| Beschreibung: | XXVIII, 521 Seiten 24 cm, 986 g |
| ISBN: | 9783662581452 3662581450 |
Internformat
MARC
| LEADER | 00000nam a2200000 c 4500 | ||
|---|---|---|---|
| 001 | BV046710946 | ||
| 003 | DE-604 | ||
| 005 | 20200805 | ||
| 007 | t| | ||
| 008 | 200507s2020 gw |||| 00||| eng d | ||
| 015 | |a 18,N34 |2 dnb | ||
| 015 | |a 20,A09 |2 dnb | ||
| 016 | 7 | |a 1164799010 |2 DE-101 | |
| 020 | |a 9783662581452 |c Festeinband : circa EUR 106.99 (DE) (freier Preis), circa EUR 109.99 (AT) (freier Preis), circa CHF 110.00 (freier Preis) |9 978-3-662-58145-2 | ||
| 020 | |a 3662581450 |9 3-662-58145-0 | ||
| 024 | 3 | |a 9783662581452 | |
| 035 | |a (OCoLC)1153998696 | ||
| 035 | |a (DE-599)DNB1164799010 | ||
| 040 | |a DE-604 |b ger |e rda | ||
| 041 | 0 | |a eng | |
| 044 | |a gw |c XA-DE-BE | ||
| 049 | |a DE-573 |a DE-83 |a DE-739 | ||
| 082 | 0 | |a 005.8 |2 23/ger | |
| 084 | |a ST 276 |0 (DE-625)143642: |2 rvk | ||
| 084 | |a ST 277 |0 (DE-625)143643: |2 rvk | ||
| 084 | |a 004 |2 sdnb | ||
| 100 | 1 | |a Boyd, Colin |d 1959- |e Verfasser |0 (DE-588)1036721086 |4 aut | |
| 245 | 1 | 0 | |a Protocols for authentication and key establishment |c Colin Boyd, Anish Mathuria, Douglas Stebila |
| 250 | |a Second edition | ||
| 264 | 1 | |a Berlin |b Springer |c [2020] | |
| 264 | 4 | |c © 2020 | |
| 300 | |a XXVIII, 521 Seiten |c 24 cm, 986 g | ||
| 336 | |b txt |2 rdacontent | ||
| 337 | |b n |2 rdamedia | ||
| 338 | |b nc |2 rdacarrier | ||
| 490 | 0 | |a Information security and cryptography | |
| 650 | 0 | 7 | |a Datensicherung |0 (DE-588)4011144-1 |2 gnd |9 rswk-swf |
| 650 | 0 | 7 | |a Diffie-Hellman-Algorithmus |0 (DE-588)4739863-2 |2 gnd |9 rswk-swf |
| 650 | 0 | 7 | |a Authentifikation |0 (DE-588)4330656-1 |2 gnd |9 rswk-swf |
| 650 | 0 | 7 | |a Kommunikationsprotokoll |0 (DE-588)4128252-8 |2 gnd |9 rswk-swf |
| 650 | 0 | 7 | |a Schlüsselverwaltung |0 (DE-588)4625230-7 |2 gnd |9 rswk-swf |
| 653 | |a Cryptographic Protocols | ||
| 653 | |a Cryptography | ||
| 653 | |a Group Key Establishment | ||
| 653 | |a Identity-Based Key Agreement | ||
| 653 | |a Key Establishment | ||
| 653 | |a Key Exchange | ||
| 653 | |a Networking | ||
| 653 | |a Password-Based Protocols | ||
| 653 | |a Public-Key Cryptography | ||
| 653 | |a Shared-Key Cryptography | ||
| 653 | |a Transport-Layer Security (TLS) Protocol | ||
| 689 | 0 | 0 | |a Authentifikation |0 (DE-588)4330656-1 |D s |
| 689 | 0 | 1 | |a Schlüsselverwaltung |0 (DE-588)4625230-7 |D s |
| 689 | 0 | 2 | |a Kommunikationsprotokoll |0 (DE-588)4128252-8 |D s |
| 689 | 0 | 3 | |a Datensicherung |0 (DE-588)4011144-1 |D s |
| 689 | 0 | 4 | |a Diffie-Hellman-Algorithmus |0 (DE-588)4739863-2 |D s |
| 689 | 0 | |5 DE-604 | |
| 700 | 1 | |a Mathuria, Anish |d ca. 20./21. Jahrhundert |e Verfasser |0 (DE-588)120493231X |4 aut | |
| 700 | 1 | |a Stebila, Douglas |e Verfasser |0 (DE-588)1204932549 |4 aut | |
| 710 | 2 | |a Springer-Verlag GmbH |0 (DE-588)1065168780 |4 pbl | |
| 776 | 0 | 8 | |i Erscheint auch als |n Online-Ausgabe |z 9783662581469 |
| 780 | 0 | 0 | |i Vorangegangen ist |z 3-540-43107-1 |w (DE-604)BV017515092 |
| 856 | 4 | 2 | |m X:MVB |q text/html |u http://deposit.dnb.de/cgi-bin/dokserv?id=2181c6fa978f4e7880c41c9405072f7d&prov=M&dok_var=1&dok_ext=htm |3 Inhaltstext |
| 856 | 4 | 2 | |m X:MVB |u http://www.springer.com/ |
| 856 | 4 | 2 | |m B:DE-101 |q application/pdf |u https://d-nb.info/1164799010/04 |3 Inhaltsverzeichnis |
| 856 | 4 | 2 | |m DNB Datenaustausch |q application/pdf |u http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=032121352&sequence=000001&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA |3 Inhaltsverzeichnis |
| 943 | 1 | |a oai:aleph.bib-bvb.de:BVB01-032121352 | |
Datensatz im Suchindex
| _version_ | 1817968130958295040 |
|---|---|
| adam_text |
CONTENTS
LIST
OF
PROTOCOLS
.
XXI
LIST
OF
ATTACKS
.
XXVII
1
INTRODUCTION
TO
AUTHENTICATION
AND
KEY
ESTABLISHMENT
.
1
1.1
INTRODUCTION
.
1
1.2
PROTOCOL
ARCHITECTURES
.
2
1.2.1
CRYPTOGRAPHIC
KEYS
.
2
1.2.2
METHOD
OF
SESSION
KEY
GENERATION
.
3
1.2.3
NUMBER
OF
PARTIES
.
4
1.2.4
EXAMPLE
.
4
1.3
CRYPTOGRAPHIC
TOOLS
.
5
1.3.1
CONFIDENTIALITY
.
6
1.3.2
DATA
ORIGIN
AUTHENTICATION
AND
DATA
INTEGRITY
.
8
1.3.3
AUTHENTICATED
ENCRYPTION
.
9
1.3.4
NON-REPUDIATION
.
9
1.3.5
EXAMPLES
OF
CRYPTOGRAPHIC
ALGORITHMS
.
10
1.3.6
SECRET
SHARING
.
11
1.3.7
FRESHNESS
MECHANISMS
.
12
1.4
ADVERSARY
CAPABILITIES
.
14
1.4.1
EAVESDROPPING
.
15
1.4.2
MODIFICATION
.
15
1.4.3
REPLAY
.
16
1.4.4
PREPLAY
.
16
1.4.5
REFLECTION
.
16
1.4.6
DENIAL
OF
SERVICE
.
17
1.4.7
TYPING
ATTACKS
.
18
1.4.8
CRYPTANALYSIS
.
20
1.4.9
CERTIFICATE
MANIPULATION
.
20
1.4.10
PROTOCOL
INTERACTION
.
22
1.5
GOALS
FOR
AUTHENTICATION
AND
KEY
ESTABLISHMENT
.
22
1.5.1
MODELS
OF
SECURITY
.
24
XII
CONTENTS
1.5.2
KEY
ESTABLISHMENT
OR
AUTHENTICATION?
.
24
1.5.3
ENTITY
AUTHENTICATION
.
26
1.5.4
KEY
ESTABLISHMENT
.
28
1.5.5
KEY
CONFIRMATION
.
29
1.5.6
EXAMPLE:
STS
PROTOCOL
.
31
1.5.7
FORWARD
SECRECY
.
33
1.5.8
WEAK
FORWARD
SECRECY
.
35
1.5.9
KEY
COMPROMISE
IMPERSONATION
.
36
1.5.10
DENIABILITY
.
37
1.5.11
ANONYMITY
.
39
1.5.12
PROTOCOL
EFFICIENCY
.
41
1.6
TOOLS
FOR
VERIFICATION
OF
PROTOCOLS
.
43
1.6.1
FDR
.
44
1.6.2
NRL
ANALYZER
AND
MAUDE-NPA
.
47
1.6.3
PROVERIF
.
48
1.6.4
SCYTHER
AND
TAMARIN
.
48
1.6.5
TOOLS
FOR
COMPUTATIONAL
MODELS
.
50
1.6.6
COMPARISON
OF
TOOLS
.
51
1.7
CONCLUSION
.
52
2
COMPUTATIONAL
SECURITY
MODELS
.
53
2.1
INTRODUCTION
.
53
2.1.1
THE
SIGNIFICANCE
OF
A
COMPUTATIONAL
PROOF
OF
SECURITY
.
54
2.1.2
ELEMENTS
OF
COMPUTATIONAL
MODELS
.
55
2.2
BELLARE-ROGAWAY
MODEL
.
58
2.2.1
BR93:
THE
FIRST
COMPUTATIONAL
MODEL
.
58
2.2.2
BR95:
SERVER-BASED
PROTOCOLS
.
65
2.2.3
THE
PUBLIC
KEY
SETTING:
THE
BWM
AND
BWJM
MODELS
.
66
2.2.4
BPR00:
FORWARD
SECRECY
AND
PASSWORDS
.
67
2.2.5
SUMMARISING
THE
BR
MODEL
VARIANTS
.
69
2.3
CANETTI-KRAWCZYK
MODEL
.
69
2.3.1
BCK98
MODEL
.
69
2.3.2
CK01
MODEL
.
70
2.3.3
HMQV
MODEL
.
75
2.4
ECK
MODEL
.
76
2.4.1
MU08
MODEL
.
78
2.4.2
ECK-PFS
MODEL
.
78
2.4.3
SECK
MODEL
.
79
2.5
COMPARING
COMPUTATIONAL
MODELS
FOR
KEY
EXCHANGE
.
79
2.5.1
COMPARING
THE
BR
AND
CK
MODELS
.
80
2.5.2
COMPARING
ECK
AND
OTHER
MODELS
.
81
2.5.3
SESSIONS
AND
SESSION
IDENTIFIERS
.
82
2.5.4
INCORPORATING
PUBLIC
KEY
INFRASTRUCTURE
.
83
2.6
SHOUP
*
S
SIMULATION
MODEL
.
84
2.7
MODELS
FOR
ENHANCED
SCENARIOS
.
85
CONTENTS
XIII
2.7.1
MODELS
FOR
GROUP
KEY
EXCHANGE
.
86
2.7.2
MODELS
FOR
MULTI-FACTOR
KEY
EXCHANGE
.
87
2.8
SECURE
CHANNELS
.
88
2.8.1
CKO
1
SECURE
CHANNELS
.
89
2.8.2
CK02
SECURE
CHANNELS
.
91
2.8.3
AUTHENTICATED
AND
CONFIDENTIAL
CHANNEL
ESTABLISHMENT
(ACCE)
PROTOCOLS
.
91
2.9
CONCLUSION
.
93
3
PROTOCOLS
USING
SHARED
KEY
CRYPTOGRAPHY
.
95
3.1
INTRODUCTION
.
95
3.2
ENTITY
AUTHENTICATION
PROTOCOLS
.
96
3.2.1
BIRD-GOPAL-HERZBERG-JANSON-KUTTEN-MOLVA-YUNG
PROTOCOLS
.
97
3.2.2
BELLARE-ROGAWAY
MAPI
PROTOCOL
.
98
3.2.3
ISO/IEC
9798-2
PROTOCOLS
.
99
3.2.4
ISO/IEC
9798-4
PROTOCOLS
.
101
3.2.5
WOO-LAM
AUTHENTICATION
PROTOCOL
.
102
3.2.6
COMPARISON
OF
ENTITY
AUTHENTICATION
PROTOCOLS
.
103
3.3
SERVER-LESS
KEY
ESTABLISHMENT
.
104
3.3.1
ANDREW
SECURE
RPC
PROTOCOL
.
104
3.3.2
JANSON-TSUDIK
2PKDP
PROTOCOL
.
106
3.3.3
BOYD
TWO-PASS
PROTOCOL
.
107
3.3.4
ISO/IEC
11770-2
SERVER-LESS
PROTOCOLS
.
108
3.3.5
COMPARISON
OF
SERVER-LESS
PROTOCOLS
.
110
3.4
SERVER-BASED
KEY
ESTABLISHMENT
.
110
3.4.1
NEEDHAM-SCHROEDER
SHARED
KEY
PROTOCOL
.
ILL
3.4.2
OTWAY-REES
PROTOCOL
.
113
3.4.3
KERBEROS
PROTOCOL
.
115
3.4.4
ISO/IEC
11770-2
SERVER-BASED
PROTOCOLS
.
117
3.4.5
WIDE-MOUTHED-FROG
PROTOCOL
.
122
3.4.6
YAHALOM
PROTOCOL
.
122
3.4.7
JANSON-TSUDIK
3PKDP
PROTOCOL
.
125
3.4.8
BELLARE-ROGAWAY
3PKD
PROTOCOL
.
126
3.4.9
WBO-LAM
KEY
TRANSPORT
PROTOCOL
.
126
3.4.10
GONG
KEY
AGREEMENT
PROTOCOLS
.
127
3.4.11
BOYD
KEY
AGREEMENT
PROTOCOL
.
129
3.4.12
GONG
HYBRID
PROTOCOL
.
129
3.4.13
COMPARISON
OF
SERVER-BASED
PROTOCOLS
.
130
3.5
KEY
ESTABLISHMENT
USING
MULTIPLE
SERVERS
.
132
3.5.1
GONG
*
S
MULTIPLE
SERVER
PROTOCOL
.
132
3.5.2
CHEN-GOLLMANN-MITCHELL
PROTOCOL
.
133
3.6
CONCLUSION
.
134
XIV
CONTENTS
4
AUTHENTICATION
AND
KEY
TRANSPORT
USING
PUBLIC
KEY
CRYPTOGRAPHY
.
135
4.1
INTRODUCTION
.
135
4.1.1
NOTATION
.
136
4.1.2
DESIGN
PRINCIPLES
FOR
PUBLIC
KEY
PROTOCOLS
.
137
4.2
ENTITY
AUTHENTICATION
PROTOCOLS
.
137
4.2.1
PROTOCOLS
IN
ISO/IEC
9798-3
.
138
4.2.2
PROTOCOLS
IN
ISO/IEC
9798-5
.
142
4.2.3
SPLICE/AS
.
142
4.2.4
COMPARISON
OF
ENTITY
AUTHENTICATION
PROTOCOLS
.
143
4.3
KEY
TRANSPORT
PROTOCOLS
.
144
4.3.1
PROTOCOLS
IN
ISO/IEC
11770-3
.
144
4.3.2
BLAKE-WILSON
AND
MENEZES
KEY
TRANSPORT
PROTOCOL
.
149
4.3.3
NEEDHAM-SCHROEDER
PUBLIC
KEY
PROTOCOL
.
150
4.3.4
NEEDHAM-SCHROEDER
PROTOCOL
USING
KEY
SERVER
.
152
4.3.5
PROTOCOLS
IN
THE
X.509
STANDARD
.
153
4.3.6
PUBLIC
KEY
KERBEROS
.
155
4.3.7
BELLER-CHANG-YACOBI
PROTOCOLS
.
156
4.3.8
TMN
PROTOCOL
.
160
4.3.9
AKA
PROTOCOL
.
161
4.3.10
COMPARISON
OF
KEY
TRANSPORT
PROTOCOLS
.
163
4.4
CONCLUSION
.
164
5
KEY
AGREEMENT
PROTOCOLS
.
165
5.1
INTRODUCTION
.
165
5.1.1
KEY
DERIVATION
FUNCTIONS
.
166
5.1.2
KEY
CONTROL
.
167
5.1.3
UNKNOWN
KEY-SHARE
ATTACKS
.
167
5.1.4
CLASSES
OF
KEY
AGREEMENT
.
168
5.1.5
PROTOCOL
COMPILERS
FOR
KEY
AGREEMENT
.
169
5.2
DIFFIE-HELLMAN
KEY
AGREEMENT
.
169
5.2.1
SMALL
SUBGROUP
ATTACKS
.
173
5.2.2
ELGAMAL
ENCRYPTION
AND
ONE-PASS
KEY
ESTABLISHMENT
.
173
5.2.3
LIM-LEE
PROTOCOL
USING
STATIC
DIFFIE-HELLMAN
.
175
5.3
MTI
PROTOCOLS
.
176
5.3.1
SMALL
SUBGROUP
ATTACK
.
178
5.3.2
UNKNOWN
KEY-SHARE
ATTACKS
.
179
5.3.3
LIM-LEE
ATTACK
.
181
5.3.4
IMPERSONATION
ATTACK
OF
JUST
AND
VAUDENAY
.
182
5.3.5
TRIANGLE
ATTACKS
.
182
5.3.6
YACOBI
*
S
PROTOCOL
.
183
5.3.7
FORWARD
SECRECY
AND
KEY
COMPROMISE
IMPERSONATION
.
184
5.4
DIFFIE-HELLMAN-BASED
PROTOCOLS
WITH
BASIC
MESSAGE
FORMAT
.
185
5.4.1
KEA
PROTOCOL
.
186
5.4.2
ATENIESE-STEINER-TSUDIK
PROTOCOL
.
187
5.4.3
JUST-VAUDENAY-SONG-KIM
PROTOCOL
.
188
CONTENTS
XV
5.4.4
UNIFIED
MODEL
PROTOCOL
.
190
5.4.5
MQV
PROTOCOL
.
191
5.4.6
HMQV
PROTOCOL
.
193
5.4.7
NAXOS
PROTOCOL
.
196
5.4.8
CMQV
PROTOCOL
.
198
5.4.9
NETS
AND
SMEN
.
199
5.4.10
PROTOCOL
OF
KIM,
FUJIOKA,
AND
USTAOGLU
.
201
5.4.11
OAKE
PROTOCOL
.
202
5.4.12
MORIYAMA-OKAMOTO
PROTOCOLS
.
203
5.4.13
ADDING
KEY
CONFIRMATION
.
204
5.4.14
COMPARISON
OF
BASIC
DIFFIE-HELLMAN
PROTOCOLS
.
205
5.5
DIFFIE-HELLMAN
PROTOCOLS
WITH
EXPLICIT
AUTHENTICATION
.
207
5.5.1
GENERIC
CONSTRUCTIONS
FOR
AUTHENTICATED
DIFFIE-HELLMAN
.
208
5.5.2
STS
PROTOCOL
.
209
5.5.3
OAKLEY
PROTOCOL
.
212
5.5.4
SKEME
PROTOCOL
.
215
5.5.5
INTERNET
KEY
EXCHANGE
.
216
5.5.6
SIGMA
AND
INTERNET
KEY
EXCHANGE
V2
(IKEV2)
.
221
5.5.7
JUST
FAST
KEYING
.
223
5.5.8
ARAZI
*
S
PROTOCOL
.
225
5.5.9
LIM-LEE
PROTOCOLS
.
226
5.5.10
HIROSE-YOSHIDA
PROTOCOL
.
228
5.5.11
JEONG-KATZ-LEE
TS3
PROTOCOL
.
229
5.5.12
YAK
PROTOCOL
.
229
5.5.13
DIKE
PROTOCOL
.
231
5.5.14
COMPARISON
OF
AUTHENTICATED
DIFFIE-HELLMAN
PROTOCOLS
.
232
5.6
PROTOCOLS
IN
ISO/IEC
11770-3
.
233
5.7
DIFFIE-HELLMAN
KEY
AGREEMENT
IN
OTHER
GROUPS
.
234
5.8
PROTOCOLS
BASED
ON
ENCRYPTION
OR
ENCAPSULATION
.
235
5.8.1
SKEME
WITHOUT
FORWARD
SECRECY
.
236
5.8.2
BOYD-CLIFF-GONZALEZ-NIETO-PATERSON
PROTOCOL
.
237
5.8.3
FUJIOKA-SUZUKI-XAGAWA-YONEYAMA
PROTOCOL
.
238
5.8.4
ALAWATUGODA
PROTOCOL
.
239
5.9
CONCLUSION
.
240
6
TRANSPORT
LAYER
SECURITY
PROTOCOL
.
241
6.1
INTERNET
SECURITY
PROTOCOLS
.
241
6.2
BACKGROUND
ON
TLS
.
242
6.3
PROTOCOL
STRUCTURE
.
243
6.3.1
HANDSHAKE
PROTOCOL
.
244
6.3.2
RECORD
LAYER
PROTOCOL
.
249
6.4
ADDITIONAL
FUNCTIONALITY
.
250
6.4.1
COMPRESSION
.
251
6.4.2
SESSION
RESUMPTION
.
251
6.4.3
RENEGOTIATION
.
252
XVI
CONTENTS
6.5
VARIANTS
.
252
6.6
IMPLEMENTATIONS
.
254
6.7
SECURITY
ANALYSES
.
255
6.7.1
PROVABLE
SECURITY
.
255
6.7.2
FORMAL
METHODS
.
257
6.8
ATTACKS:
OVERVIEW
.
258
6.9
ATTACKS:
CORE
CRYPTOGRAPHY
.
259
6.9.1
BLEICHENBACHER
*
S
ATTACK
ON
PKCS#LVL.5
RSA
KEY
TRANSPORT259
6.9.2
BLEICHENBACHER
*
S
ATTACK
ON
PKCS#LVL.5
RSA
SIGNATURE
VERIFICATION
.
262
6.9.3
WEAKNESSES
IN
DES,
TRIPLE-DES,
MD5,
AND
SHA-1
.
263
6.9.4
RC4
BIASES
.
264
6.9.5
WEAK
RSA
AND
DIFFIE-HELLMAN:
FREAK
AND
LOGJAM
ATTACKS266
6.10
ATTACKS:
CRYPTO
USAGE
IN
CIPHERSUITES
.
268
6.10.1
BEAST
ADAPTIVE
CHOSEN
PLAINTEXT
ATTACK
AND
POODLE
.
268
6.10.2
CROSS-PROTOCOL
ATTACK
ON
DIFFIE-HELLMAN
PARAMETERS
.
271
6.10.3
LUCKY
13
ATTACK
ON
MAC-THEN-ENCODE-THEN-ENCRYPT
.
272
6.11
ATTACKS:
PROTOCOL
FUNCTIONALITY
.
273
6.11.1
DOWNGRADE
ATTACKS
.
273
6.11.2
RENEGOTIATION
ATTACK
.
274
6.11.3
COMPRESSION-RELATED
ATTACKS:
CRIME,
BREACH
.
277
6.11.4
TERMINATION
ATTACK
.
278
6.11.5
TRIPLE
HANDSHAKE
ATTACK
.
279
6.12
ATTACKS:
IMPLEMENTATIONS
.
280
6.12.1
SIDE
CHANNEL
ATTACKS
.
280
6.12.2
TLS-SPECIFIC
IMPLEMENTATION
FLAWS
.
281
6.12.3
CERTIFICATE
VALIDATION
.
281
6.12.4
BAD
RANDOM
NUMBER
GENERATORS
.
282
6.13
ATTACKS:
OTHER
.
283
6.13.1
APPLICATION-LEVEL
PROTOCOLS
.
283
6.13.2
CERTIFICATE
AUTHORITY
BREACHES
AND
RELATED
FLAWS
.
284
6.14
TLS
VERSION
1.3
.
285
7
IDENTITY-BASED
KEY
AGREEMENT
.
289
7.1
INTRODUCTION
.
289
7.1.1
SECURITY
MODEL
FOR
IDENTITY-BASED
CRYPTOSYSTEMS
.
290
7.1.2
ELLIPTIC
CURVE
PAIRINGS
.
291
7.1.3
SAKAI-OHGISHI-KASAHARA
PROTOCOL
.
293
7.2
IDENTITY-BASED
PROTOCOLS
WITHOUT
PAIRINGS
.
294
7.2.1
OKAMOTO
*
S
SCHEME
.
295
7.2.2
GUNTHER
*
S
SCHEME
.
297
7.2.3
FIORE-GENNARO
SCHEME
.
299
7.2.4
COMPARISON
.
301
7.3
PAIRING-BASED
KEY
AGREEMENT
WITH
BASIC
MESSAGE
FORMAT
.
302
7.3.1
SMART
*
S
PROTOCOL
.
303
CONTENTS
XVII
7.3.2
VARIANTS
OF
SMART
*
S
PROTOCOL
.
304
7.3.3
RYU-YOON-YOO
PROTOCOL
.
305
7.3.4
SHIM
*
S
PROTOCOL
.
306
7.3.5
SCOTT
*
S
PROTOCOL
.
308
7.3.6
CHEN-KUDLA
PROTOCOL
.
309
7.3.7
WANG
*
S
PROTOCOL
(IDAK)
.
310
7.3.8
MCCULLAGH-BARRETO
PROTOCOL
.
311
7.3.9
COMPARISON
.
313
7.4
PAIRING-BASED
KEY
AGREEMENT
WITH
EXPLICIT
AUTHENTICATION
.
315
7.4.1
BOYD-MAO-PATERSON
PROTOCOL
.
315
7.4.2
ASYMMETRIC
PROTOCOL
OF
CHOI
ET
AL.
.
316
7.4.3
IDENTITY-BASED
KEY
AGREEMENT
WITHOUT
RANDOM
ORACLES
.
317
7.4.4
COMPARISON
.
318
7.5
IDENTITY-BASED
PROTOCOLS
WITH
ADDITIONAL
PROPERTIES
.
319
7.5.1
USING
MULTIPLE
KGCS
.
319
7.5.2
GIRAULT
*
S
THREE
LEVELS
.
321
7.5.3
CERTIFICATELESS
KEY
AGREEMENT
.
324
7.5.4
PROTOCOLS
WITH
GENERALISED
POLICIES
.
325
7.5.5
ONE-PASS
IDENTITY-BASED
PROTOCOLS
.
325
7.6
CONCLUSION
.
327
8
PASSWORD-BASED
PROTOCOLS
.
329
8.1
INTRODUCTION
.
329
8.2
ENCRYPTED
KEY
EXCHANGE
USING
DIFFIE-HELLMAN
.
332
8.2.1
BELLOVIN
AND
MERRITT
*
S
ORIGINAL
EKE
.
332
8.2.2
AUGMENTED
EKE
.
335
8.3
TWO-PARTY
PAKE
PROTOCOLS
.
337
8.3.1
PAK
.
337
8.3.2
SPEKE
.
340
8.3.3
DRAGONFLY
PROTOCOL
.
342
8.3.4
SPAKE
.
343
8.3.5
J-PAKE
.
345
8.3.6
KATZ-OSTROVSKY-YUNG
PROTOCOL
.
347
8.3.7
PROTOCOL
OF
JIANG
AND
GONG
.
347
8.3.8
PROTOCOLS
USING
SMOOTH
PROJECTIVE
HASHING
.
348
8.3.9
PROTOCOLS
USING
A
SERVER
PUBLIC
KEY
.
351
8.3.10
COMPARING
TWO-PARTY
PAKE
PROTOCOLS
.
354
8.4
TWO-PARTY
AUGMENTED
PAKE
PROTOCOLS
.
356
8.4.1
PAK-X,
PAK-Y
AND
PAK-Z
.
357
8.4.2
B-SPEKE
.
357
8.4.3
SRP
.
359
8.4.4
AMP
.
362
8.4.5
AUGPAKE
PROTOCOL
.
363
8.4.6
USING
MULTIPLE
SERVERS
.
364
8.4.7
COMPARING
TWO-PARTY
AUGMENTED
PAKE
PROTOCOLS
.
365
XVIII
CONTENTS
8.5
RSA-BASED
PROTOCOLS
.
365
8.5.1
RSA-BASED
EKE
.
366
8.5.2
OKE
AND
SNAPI
.
367
8.6
THREE-PARTY
PARE
PROTOCOLS
.
369
8.6.1
GLNS
SECRET
PUBLIC
KEY
PROTOCOLS
.
369
8.6.2
STEINER,
TSUDIK
AND
WAIDNER
THREE-PARTY
EKE
.
373
8.6.3
GLNS
PROTOCOLS
WITH
SERVER
PUBLIC
KEYS
.
375
8.6.4
THREE-PARTY
PROTOCOL
OF
YEN
AND
LIU
.
376
8.6.5
GENERIC
PROTOCOL
OF
ABDALLA,
FOUQUE
AND
POINTCHEVAL
.
377
8.6.6
STRONGER
SECURITY
MODELS
FOR
THREE-PARTY
PAKE
.
378
8.6.7
THREE-PARTY
PROTOCOL
OF
YONEYAMA
.
379
8.6.8
CROSS-REALM
PAKE
PROTOCOLS
.
380
8.6.9
COMPARING
THREE-PARTY
PAKE
PROTOCOLS
.
383
8.7
GROUP
PAKE
PROTOCOLS
.
383
8.7.1
CONCRETE
PROTOCOL
CONSTRUCTIONS
.
384
8.7.2
GENERIC
CONSTRUCTIONS
.
386
8.8
CONCLUSION
.
387
9
GROUP
KEY
ESTABLISHMENT
.
389
9.1
INTRODUCTION
.
389
9.1.1
EFFICIENCY
IN
GROUP
KEY
ESTABLISHMENT
.
390
9.1.2
GENERALISED
SECURITY
GOALS
.
390
9.1.3
STATIC
AND
DYNAMIC
GROUPS
.
392
9.1.4
INSIDER
ATTACKS
.
393
9.1.5
NOTATION
.
394
9.2
GENERALISING
DIFFIE-HELLMAN
KEY
AGREEMENT
.
394
9.2.1
INGEMARSSON-TANG-WONG
KEY
AGREEMENT
.
395
9.2.2
STEINER-TSUDIK-WAIDNER
KEY
AGREEMENT
.
396
9.2.3
STEER-STRAWCZYNSKI-DIFFIE-WIENER
KEY
AGREEMENT
.
399
9.2.4
KIM-PERRIG-TSUDIK
TREE
DIFFIE-HELLMAN
.
400
9.2.5
BECKER
AND
WILLE
*
S
OCTOPUS
PROTOCOL
.
402
9.2.6
BURMESTER-DESMEDT
KEY
AGREEMENT
.
404
9.2.7
ONE-ROUND
TRIPARTITE
AND
MULTI-PARTY
DIFFIE-HELLMAN
.
407
9.2.8
SECURITY
OF
GENERALISED
DIFFIE-HELLMAN
.
407
9.2.9
EFFICIENCY
OF
GENERALISED
DIFFIE-HELLMAN
.
408
9.3
GROUP
KEY
AGREEMENT
PROTOCOLS
.
410
9.3.1
AUTHENTICATING
GENERALISED
DIFFIE-HELLMAN
.
410
9.3.2
KLEIN-OTTEN-BETH
PROTOCOL
.
411
9.3.3
AUTHENTICATED
GDH
PROTOCOLS
.
412
9.3.4
AUTHENTICATED
TREE
DIFFIE-HELLMAN
.
416
9.3.5
KATZ-YUNG
COMPILER
.
416
9.3.6
PROTOCOL
OF
BOHLI,
GONZALEZ
VASCO
AND
STEINWANDT
.
419
9.3.7
AUTHENTICATED
TRIPARTITE
DIFFIE-HELLMAN
.
421
9.3.8
COMPARING
AUTHENTICATED
GROUP
DIFFIE-HELLMAN
.
422
9.4
IDENTITY-BASED
GROUP
KEY
ESTABLISHMENT
PROTOCOLS
.
423
CONTENTS
XIX
9.4.1
KOYAMA
AND
OHTA
PROTOCOLS
.
424
9.4.2
PROTOCOLS
OF
SAEEDNIA
AND
SAFAVI-NAINI
.
427
9.4.3
ID-BASED
GROUP
KEY
AGREEMENT
AND
PAIRINGS
.
428
9.5
GROUP
KEY
AGREEMENT
WITHOUT
DIFFIE-HELLMAN
.
429
9.5.1
PIEPRZYK
AND
LI
*
S
KEY
AGREEMENT
PROTOCOL
.
429
9.5.2
TZENG-TZENG
PROTOCOLS
. . .
430
9.5.3
BOYD-GONZALEZ
NIETO
GROUP
KEY
AGREEMENT
.
432
9.5.4
GENERIC
ONE-ROUND
GROUP
KEY
AGREEMENT
FROM
MULTI-KEM433
9.5.5
ASYMMETRIC
GROUP
KEY
AGREEMENT
.
434
9.6
GROUP
KEY
TRANSPORT
PROTOCOLS
.
434
9.6.1
BURMESTER-DESMEDT
STAR
AND TREE
PROTOCOLS
.
434
9.6.2
MAYER
AND
YUNG
*
S
PROTOCOLS
. . .
437
9.6.3
KEY
HIERARCHIES
.
439
9.7
CONCLUSION
.
440
A
STANDARDS
FOR
AUTHENTICATION
AND
KEY
ESTABLISHMENT
.
441
A.L
ISO
STANDARDS
.
441
A.1.1
ISO/IEC
9798
.
441
A.
1.2
ISO/IEC
11770
.
442
A.
1.3
ISO
9594-8/ITU
X.509
.
443
A.2
IETF
STANDARDS
.
443
A.3
IEEE
P1363
STANDARDS
.
444
A.4
NIST
STANDARDS
.
444
A.
5
OTHER
STANDARDS
AND
PROTOCOLS
.
446
A.5.1
ANSI
.
446
A.5.
2
WIDELY
DEPLOYED
PROTOCOLS
.
447
B
TUTORIAL:
BUILDING
A
KEY
ESTABLISHMENT
PROTOCOL
.
449
B.
L
CONFIDENTIALITY
.
451
B.2
AUTHENTICATION
.
453
B.3
REPLAY
.
455
B.4
DESIGN
PRINCIPLES
FOR
CRYPTOGRAPHIC
PROTOCOLS
.
459
C
SUMMARY
OF
NOTATION
.
461
REFERENCES
.
463
GENERAL
INDEX
.
513
PROTOCOL
INDEX
.
519 |
| adam_txt |
CONTENTS
LIST
OF
PROTOCOLS
.
XXI
LIST
OF
ATTACKS
.
XXVII
1
INTRODUCTION
TO
AUTHENTICATION
AND
KEY
ESTABLISHMENT
.
1
1.1
INTRODUCTION
.
1
1.2
PROTOCOL
ARCHITECTURES
.
2
1.2.1
CRYPTOGRAPHIC
KEYS
.
2
1.2.2
METHOD
OF
SESSION
KEY
GENERATION
.
3
1.2.3
NUMBER
OF
PARTIES
.
4
1.2.4
EXAMPLE
.
4
1.3
CRYPTOGRAPHIC
TOOLS
.
5
1.3.1
CONFIDENTIALITY
.
6
1.3.2
DATA
ORIGIN
AUTHENTICATION
AND
DATA
INTEGRITY
.
8
1.3.3
AUTHENTICATED
ENCRYPTION
.
9
1.3.4
NON-REPUDIATION
.
9
1.3.5
EXAMPLES
OF
CRYPTOGRAPHIC
ALGORITHMS
.
10
1.3.6
SECRET
SHARING
.
11
1.3.7
FRESHNESS
MECHANISMS
.
12
1.4
ADVERSARY
CAPABILITIES
.
14
1.4.1
EAVESDROPPING
.
15
1.4.2
MODIFICATION
.
15
1.4.3
REPLAY
.
16
1.4.4
PREPLAY
.
16
1.4.5
REFLECTION
.
16
1.4.6
DENIAL
OF
SERVICE
.
17
1.4.7
TYPING
ATTACKS
.
18
1.4.8
CRYPTANALYSIS
.
20
1.4.9
CERTIFICATE
MANIPULATION
.
20
1.4.10
PROTOCOL
INTERACTION
.
22
1.5
GOALS
FOR
AUTHENTICATION
AND
KEY
ESTABLISHMENT
.
22
1.5.1
MODELS
OF
SECURITY
.
24
XII
CONTENTS
1.5.2
KEY
ESTABLISHMENT
OR
AUTHENTICATION?
.
24
1.5.3
ENTITY
AUTHENTICATION
.
26
1.5.4
KEY
ESTABLISHMENT
.
28
1.5.5
KEY
CONFIRMATION
.
29
1.5.6
EXAMPLE:
STS
PROTOCOL
.
31
1.5.7
FORWARD
SECRECY
.
33
1.5.8
WEAK
FORWARD
SECRECY
.
35
1.5.9
KEY
COMPROMISE
IMPERSONATION
.
36
1.5.10
DENIABILITY
.
37
1.5.11
ANONYMITY
.
39
1.5.12
PROTOCOL
EFFICIENCY
.
41
1.6
TOOLS
FOR
VERIFICATION
OF
PROTOCOLS
.
43
1.6.1
FDR
.
44
1.6.2
NRL
ANALYZER
AND
MAUDE-NPA
.
47
1.6.3
PROVERIF
.
48
1.6.4
SCYTHER
AND
TAMARIN
.
48
1.6.5
TOOLS
FOR
COMPUTATIONAL
MODELS
.
50
1.6.6
COMPARISON
OF
TOOLS
.
51
1.7
CONCLUSION
.
52
2
COMPUTATIONAL
SECURITY
MODELS
.
53
2.1
INTRODUCTION
.
53
2.1.1
THE
SIGNIFICANCE
OF
A
COMPUTATIONAL
PROOF
OF
SECURITY
.
54
2.1.2
ELEMENTS
OF
COMPUTATIONAL
MODELS
.
55
2.2
BELLARE-ROGAWAY
MODEL
.
58
2.2.1
BR93:
THE
FIRST
COMPUTATIONAL
MODEL
.
58
2.2.2
BR95:
SERVER-BASED
PROTOCOLS
.
65
2.2.3
THE
PUBLIC
KEY
SETTING:
THE
BWM
AND
BWJM
MODELS
.
66
2.2.4
BPR00:
FORWARD
SECRECY
AND
PASSWORDS
.
67
2.2.5
SUMMARISING
THE
BR
MODEL
VARIANTS
.
69
2.3
CANETTI-KRAWCZYK
MODEL
.
69
2.3.1
BCK98
MODEL
.
69
2.3.2
CK01
MODEL
.
70
2.3.3
HMQV
MODEL
.
75
2.4
ECK
MODEL
.
76
2.4.1
MU08
MODEL
.
78
2.4.2
ECK-PFS
MODEL
.
78
2.4.3
SECK
MODEL
.
79
2.5
COMPARING
COMPUTATIONAL
MODELS
FOR
KEY
EXCHANGE
.
79
2.5.1
COMPARING
THE
BR
AND
CK
MODELS
.
80
2.5.2
COMPARING
ECK
AND
OTHER
MODELS
.
81
2.5.3
SESSIONS
AND
SESSION
IDENTIFIERS
.
82
2.5.4
INCORPORATING
PUBLIC
KEY
INFRASTRUCTURE
.
83
2.6
SHOUP
*
S
SIMULATION
MODEL
.
84
2.7
MODELS
FOR
ENHANCED
SCENARIOS
.
85
CONTENTS
XIII
2.7.1
MODELS
FOR
GROUP
KEY
EXCHANGE
.
86
2.7.2
MODELS
FOR
MULTI-FACTOR
KEY
EXCHANGE
.
87
2.8
SECURE
CHANNELS
.
88
2.8.1
CKO
1
SECURE
CHANNELS
.
89
2.8.2
CK02
SECURE
CHANNELS
.
91
2.8.3
AUTHENTICATED
AND
CONFIDENTIAL
CHANNEL
ESTABLISHMENT
(ACCE)
PROTOCOLS
.
91
2.9
CONCLUSION
.
93
3
PROTOCOLS
USING
SHARED
KEY
CRYPTOGRAPHY
.
95
3.1
INTRODUCTION
.
95
3.2
ENTITY
AUTHENTICATION
PROTOCOLS
.
96
3.2.1
BIRD-GOPAL-HERZBERG-JANSON-KUTTEN-MOLVA-YUNG
PROTOCOLS
.
97
3.2.2
BELLARE-ROGAWAY
MAPI
PROTOCOL
.
98
3.2.3
ISO/IEC
9798-2
PROTOCOLS
.
99
3.2.4
ISO/IEC
9798-4
PROTOCOLS
.
101
3.2.5
WOO-LAM
AUTHENTICATION
PROTOCOL
.
102
3.2.6
COMPARISON
OF
ENTITY
AUTHENTICATION
PROTOCOLS
.
103
3.3
SERVER-LESS
KEY
ESTABLISHMENT
.
104
3.3.1
ANDREW
SECURE
RPC
PROTOCOL
.
104
3.3.2
JANSON-TSUDIK
2PKDP
PROTOCOL
.
106
3.3.3
BOYD
TWO-PASS
PROTOCOL
.
107
3.3.4
ISO/IEC
11770-2
SERVER-LESS
PROTOCOLS
.
108
3.3.5
COMPARISON
OF
SERVER-LESS
PROTOCOLS
.
110
3.4
SERVER-BASED
KEY
ESTABLISHMENT
.
110
3.4.1
NEEDHAM-SCHROEDER
SHARED
KEY
PROTOCOL
.
ILL
3.4.2
OTWAY-REES
PROTOCOL
.
113
3.4.3
KERBEROS
PROTOCOL
.
115
3.4.4
ISO/IEC
11770-2
SERVER-BASED
PROTOCOLS
.
117
3.4.5
WIDE-MOUTHED-FROG
PROTOCOL
.
122
3.4.6
YAHALOM
PROTOCOL
.
122
3.4.7
JANSON-TSUDIK
3PKDP
PROTOCOL
.
125
3.4.8
BELLARE-ROGAWAY
3PKD
PROTOCOL
.
126
3.4.9
WBO-LAM
KEY
TRANSPORT
PROTOCOL
.
126
3.4.10
GONG
KEY
AGREEMENT
PROTOCOLS
.
127
3.4.11
BOYD
KEY
AGREEMENT
PROTOCOL
.
129
3.4.12
GONG
HYBRID
PROTOCOL
.
129
3.4.13
COMPARISON
OF
SERVER-BASED
PROTOCOLS
.
130
3.5
KEY
ESTABLISHMENT
USING
MULTIPLE
SERVERS
.
132
3.5.1
GONG
*
S
MULTIPLE
SERVER
PROTOCOL
.
132
3.5.2
CHEN-GOLLMANN-MITCHELL
PROTOCOL
.
133
3.6
CONCLUSION
.
134
XIV
CONTENTS
4
AUTHENTICATION
AND
KEY
TRANSPORT
USING
PUBLIC
KEY
CRYPTOGRAPHY
.
135
4.1
INTRODUCTION
.
135
4.1.1
NOTATION
.
136
4.1.2
DESIGN
PRINCIPLES
FOR
PUBLIC
KEY
PROTOCOLS
.
137
4.2
ENTITY
AUTHENTICATION
PROTOCOLS
.
137
4.2.1
PROTOCOLS
IN
ISO/IEC
9798-3
.
138
4.2.2
PROTOCOLS
IN
ISO/IEC
9798-5
.
142
4.2.3
SPLICE/AS
.
142
4.2.4
COMPARISON
OF
ENTITY
AUTHENTICATION
PROTOCOLS
.
143
4.3
KEY
TRANSPORT
PROTOCOLS
.
144
4.3.1
PROTOCOLS
IN
ISO/IEC
11770-3
.
144
4.3.2
BLAKE-WILSON
AND
MENEZES
KEY
TRANSPORT
PROTOCOL
.
149
4.3.3
NEEDHAM-SCHROEDER
PUBLIC
KEY
PROTOCOL
.
150
4.3.4
NEEDHAM-SCHROEDER
PROTOCOL
USING
KEY
SERVER
.
152
4.3.5
PROTOCOLS
IN
THE
X.509
STANDARD
.
153
4.3.6
PUBLIC
KEY
KERBEROS
.
155
4.3.7
BELLER-CHANG-YACOBI
PROTOCOLS
.
156
4.3.8
TMN
PROTOCOL
.
160
4.3.9
AKA
PROTOCOL
.
161
4.3.10
COMPARISON
OF
KEY
TRANSPORT
PROTOCOLS
.
163
4.4
CONCLUSION
.
164
5
KEY
AGREEMENT
PROTOCOLS
.
165
5.1
INTRODUCTION
.
165
5.1.1
KEY
DERIVATION
FUNCTIONS
.
166
5.1.2
KEY
CONTROL
.
167
5.1.3
UNKNOWN
KEY-SHARE
ATTACKS
.
167
5.1.4
CLASSES
OF
KEY
AGREEMENT
.
168
5.1.5
PROTOCOL
COMPILERS
FOR
KEY
AGREEMENT
.
169
5.2
DIFFIE-HELLMAN
KEY
AGREEMENT
.
169
5.2.1
SMALL
SUBGROUP
ATTACKS
.
173
5.2.2
ELGAMAL
ENCRYPTION
AND
ONE-PASS
KEY
ESTABLISHMENT
.
173
5.2.3
LIM-LEE
PROTOCOL
USING
STATIC
DIFFIE-HELLMAN
.
175
5.3
MTI
PROTOCOLS
.
176
5.3.1
SMALL
SUBGROUP
ATTACK
.
178
5.3.2
UNKNOWN
KEY-SHARE
ATTACKS
.
179
5.3.3
LIM-LEE
ATTACK
.
181
5.3.4
IMPERSONATION
ATTACK
OF
JUST
AND
VAUDENAY
.
182
5.3.5
TRIANGLE
ATTACKS
.
182
5.3.6
YACOBI
*
S
PROTOCOL
.
183
5.3.7
FORWARD
SECRECY
AND
KEY
COMPROMISE
IMPERSONATION
.
184
5.4
DIFFIE-HELLMAN-BASED
PROTOCOLS
WITH
BASIC
MESSAGE
FORMAT
.
185
5.4.1
KEA
PROTOCOL
.
186
5.4.2
ATENIESE-STEINER-TSUDIK
PROTOCOL
.
187
5.4.3
JUST-VAUDENAY-SONG-KIM
PROTOCOL
.
188
CONTENTS
XV
5.4.4
UNIFIED
MODEL
PROTOCOL
.
190
5.4.5
MQV
PROTOCOL
.
191
5.4.6
HMQV
PROTOCOL
.
193
5.4.7
NAXOS
PROTOCOL
.
196
5.4.8
CMQV
PROTOCOL
.
198
5.4.9
NETS
AND
SMEN
.
199
5.4.10
PROTOCOL
OF
KIM,
FUJIOKA,
AND
USTAOGLU
.
201
5.4.11
OAKE
PROTOCOL
.
202
5.4.12
MORIYAMA-OKAMOTO
PROTOCOLS
.
203
5.4.13
ADDING
KEY
CONFIRMATION
.
204
5.4.14
COMPARISON
OF
BASIC
DIFFIE-HELLMAN
PROTOCOLS
.
205
5.5
DIFFIE-HELLMAN
PROTOCOLS
WITH
EXPLICIT
AUTHENTICATION
.
207
5.5.1
GENERIC
CONSTRUCTIONS
FOR
AUTHENTICATED
DIFFIE-HELLMAN
.
208
5.5.2
STS
PROTOCOL
.
209
5.5.3
OAKLEY
PROTOCOL
.
212
5.5.4
SKEME
PROTOCOL
.
215
5.5.5
INTERNET
KEY
EXCHANGE
.
216
5.5.6
SIGMA
AND
INTERNET
KEY
EXCHANGE
V2
(IKEV2)
.
221
5.5.7
JUST
FAST
KEYING
.
223
5.5.8
ARAZI
*
S
PROTOCOL
.
225
5.5.9
LIM-LEE
PROTOCOLS
.
226
5.5.10
HIROSE-YOSHIDA
PROTOCOL
.
228
5.5.11
JEONG-KATZ-LEE
TS3
PROTOCOL
.
229
5.5.12
YAK
PROTOCOL
.
229
5.5.13
DIKE
PROTOCOL
.
231
5.5.14
COMPARISON
OF
AUTHENTICATED
DIFFIE-HELLMAN
PROTOCOLS
.
232
5.6
PROTOCOLS
IN
ISO/IEC
11770-3
.
233
5.7
DIFFIE-HELLMAN
KEY
AGREEMENT
IN
OTHER
GROUPS
.
234
5.8
PROTOCOLS
BASED
ON
ENCRYPTION
OR
ENCAPSULATION
.
235
5.8.1
SKEME
WITHOUT
FORWARD
SECRECY
.
236
5.8.2
BOYD-CLIFF-GONZALEZ-NIETO-PATERSON
PROTOCOL
.
237
5.8.3
FUJIOKA-SUZUKI-XAGAWA-YONEYAMA
PROTOCOL
.
238
5.8.4
ALAWATUGODA
PROTOCOL
.
239
5.9
CONCLUSION
.
240
6
TRANSPORT
LAYER
SECURITY
PROTOCOL
.
241
6.1
INTERNET
SECURITY
PROTOCOLS
.
241
6.2
BACKGROUND
ON
TLS
.
242
6.3
PROTOCOL
STRUCTURE
.
243
6.3.1
HANDSHAKE
PROTOCOL
.
244
6.3.2
RECORD
LAYER
PROTOCOL
.
249
6.4
ADDITIONAL
FUNCTIONALITY
.
250
6.4.1
COMPRESSION
.
251
6.4.2
SESSION
RESUMPTION
.
251
6.4.3
RENEGOTIATION
.
252
XVI
CONTENTS
6.5
VARIANTS
.
252
6.6
IMPLEMENTATIONS
.
254
6.7
SECURITY
ANALYSES
.
255
6.7.1
PROVABLE
SECURITY
.
255
6.7.2
FORMAL
METHODS
.
257
6.8
ATTACKS:
OVERVIEW
.
258
6.9
ATTACKS:
CORE
CRYPTOGRAPHY
.
259
6.9.1
BLEICHENBACHER
*
S
ATTACK
ON
PKCS#LVL.5
RSA
KEY
TRANSPORT259
6.9.2
BLEICHENBACHER
*
S
ATTACK
ON
PKCS#LVL.5
RSA
SIGNATURE
VERIFICATION
.
262
6.9.3
WEAKNESSES
IN
DES,
TRIPLE-DES,
MD5,
AND
SHA-1
.
263
6.9.4
RC4
BIASES
.
264
6.9.5
WEAK
RSA
AND
DIFFIE-HELLMAN:
FREAK
AND
LOGJAM
ATTACKS266
6.10
ATTACKS:
CRYPTO
USAGE
IN
CIPHERSUITES
.
268
6.10.1
BEAST
ADAPTIVE
CHOSEN
PLAINTEXT
ATTACK
AND
POODLE
.
268
6.10.2
CROSS-PROTOCOL
ATTACK
ON
DIFFIE-HELLMAN
PARAMETERS
.
271
6.10.3
LUCKY
13
ATTACK
ON
MAC-THEN-ENCODE-THEN-ENCRYPT
.
272
6.11
ATTACKS:
PROTOCOL
FUNCTIONALITY
.
273
6.11.1
DOWNGRADE
ATTACKS
.
273
6.11.2
RENEGOTIATION
ATTACK
.
274
6.11.3
COMPRESSION-RELATED
ATTACKS:
CRIME,
BREACH
.
277
6.11.4
TERMINATION
ATTACK
.
278
6.11.5
TRIPLE
HANDSHAKE
ATTACK
.
279
6.12
ATTACKS:
IMPLEMENTATIONS
.
280
6.12.1
SIDE
CHANNEL
ATTACKS
.
280
6.12.2
TLS-SPECIFIC
IMPLEMENTATION
FLAWS
.
281
6.12.3
CERTIFICATE
VALIDATION
.
281
6.12.4
BAD
RANDOM
NUMBER
GENERATORS
.
282
6.13
ATTACKS:
OTHER
.
283
6.13.1
APPLICATION-LEVEL
PROTOCOLS
.
283
6.13.2
CERTIFICATE
AUTHORITY
BREACHES
AND
RELATED
FLAWS
.
284
6.14
TLS
VERSION
1.3
.
285
7
IDENTITY-BASED
KEY
AGREEMENT
.
289
7.1
INTRODUCTION
.
289
7.1.1
SECURITY
MODEL
FOR
IDENTITY-BASED
CRYPTOSYSTEMS
.
290
7.1.2
ELLIPTIC
CURVE
PAIRINGS
.
291
7.1.3
SAKAI-OHGISHI-KASAHARA
PROTOCOL
.
293
7.2
IDENTITY-BASED
PROTOCOLS
WITHOUT
PAIRINGS
.
294
7.2.1
OKAMOTO
*
S
SCHEME
.
295
7.2.2
GUNTHER
*
S
SCHEME
.
297
7.2.3
FIORE-GENNARO
SCHEME
.
299
7.2.4
COMPARISON
.
301
7.3
PAIRING-BASED
KEY
AGREEMENT
WITH
BASIC
MESSAGE
FORMAT
.
302
7.3.1
SMART
*
S
PROTOCOL
.
303
CONTENTS
XVII
7.3.2
VARIANTS
OF
SMART
*
S
PROTOCOL
.
304
7.3.3
RYU-YOON-YOO
PROTOCOL
.
305
7.3.4
SHIM
*
S
PROTOCOL
.
306
7.3.5
SCOTT
*
S
PROTOCOL
.
308
7.3.6
CHEN-KUDLA
PROTOCOL
.
309
7.3.7
WANG
*
S
PROTOCOL
(IDAK)
.
310
7.3.8
MCCULLAGH-BARRETO
PROTOCOL
.
311
7.3.9
COMPARISON
.
313
7.4
PAIRING-BASED
KEY
AGREEMENT
WITH
EXPLICIT
AUTHENTICATION
.
315
7.4.1
BOYD-MAO-PATERSON
PROTOCOL
.
315
7.4.2
ASYMMETRIC
PROTOCOL
OF
CHOI
ET
AL.
.
316
7.4.3
IDENTITY-BASED
KEY
AGREEMENT
WITHOUT
RANDOM
ORACLES
.
317
7.4.4
COMPARISON
.
318
7.5
IDENTITY-BASED
PROTOCOLS
WITH
ADDITIONAL
PROPERTIES
.
319
7.5.1
USING
MULTIPLE
KGCS
.
319
7.5.2
GIRAULT
*
S
THREE
LEVELS
.
321
7.5.3
CERTIFICATELESS
KEY
AGREEMENT
.
324
7.5.4
PROTOCOLS
WITH
GENERALISED
POLICIES
.
325
7.5.5
ONE-PASS
IDENTITY-BASED
PROTOCOLS
.
325
7.6
CONCLUSION
.
327
8
PASSWORD-BASED
PROTOCOLS
.
329
8.1
INTRODUCTION
.
329
8.2
ENCRYPTED
KEY
EXCHANGE
USING
DIFFIE-HELLMAN
.
332
8.2.1
BELLOVIN
AND
MERRITT
*
S
ORIGINAL
EKE
.
332
8.2.2
AUGMENTED
EKE
.
335
8.3
TWO-PARTY
PAKE
PROTOCOLS
.
337
8.3.1
PAK
.
337
8.3.2
SPEKE
.
340
8.3.3
DRAGONFLY
PROTOCOL
.
342
8.3.4
SPAKE
.
343
8.3.5
J-PAKE
.
345
8.3.6
KATZ-OSTROVSKY-YUNG
PROTOCOL
.
347
8.3.7
PROTOCOL
OF
JIANG
AND
GONG
.
347
8.3.8
PROTOCOLS
USING
SMOOTH
PROJECTIVE
HASHING
.
348
8.3.9
PROTOCOLS
USING
A
SERVER
PUBLIC
KEY
.
351
8.3.10
COMPARING
TWO-PARTY
PAKE
PROTOCOLS
.
354
8.4
TWO-PARTY
AUGMENTED
PAKE
PROTOCOLS
.
356
8.4.1
PAK-X,
PAK-Y
AND
PAK-Z
.
357
8.4.2
B-SPEKE
.
357
8.4.3
SRP
.
359
8.4.4
AMP
.
362
8.4.5
AUGPAKE
PROTOCOL
.
363
8.4.6
USING
MULTIPLE
SERVERS
.
364
8.4.7
COMPARING
TWO-PARTY
AUGMENTED
PAKE
PROTOCOLS
.
365
XVIII
CONTENTS
8.5
RSA-BASED
PROTOCOLS
.
365
8.5.1
RSA-BASED
EKE
.
366
8.5.2
OKE
AND
SNAPI
.
367
8.6
THREE-PARTY
PARE
PROTOCOLS
.
369
8.6.1
GLNS
SECRET
PUBLIC
KEY
PROTOCOLS
.
369
8.6.2
STEINER,
TSUDIK
AND
WAIDNER
THREE-PARTY
EKE
.
373
8.6.3
GLNS
PROTOCOLS
WITH
SERVER
PUBLIC
KEYS
.
375
8.6.4
THREE-PARTY
PROTOCOL
OF
YEN
AND
LIU
.
376
8.6.5
GENERIC
PROTOCOL
OF
ABDALLA,
FOUQUE
AND
POINTCHEVAL
.
377
8.6.6
STRONGER
SECURITY
MODELS
FOR
THREE-PARTY
PAKE
.
378
8.6.7
THREE-PARTY
PROTOCOL
OF
YONEYAMA
.
379
8.6.8
CROSS-REALM
PAKE
PROTOCOLS
.
380
8.6.9
COMPARING
THREE-PARTY
PAKE
PROTOCOLS
.
383
8.7
GROUP
PAKE
PROTOCOLS
.
383
8.7.1
CONCRETE
PROTOCOL
CONSTRUCTIONS
.
384
8.7.2
GENERIC
CONSTRUCTIONS
.
386
8.8
CONCLUSION
.
387
9
GROUP
KEY
ESTABLISHMENT
.
389
9.1
INTRODUCTION
.
389
9.1.1
EFFICIENCY
IN
GROUP
KEY
ESTABLISHMENT
.
390
9.1.2
GENERALISED
SECURITY
GOALS
.
390
9.1.3
STATIC
AND
DYNAMIC
GROUPS
.
392
9.1.4
INSIDER
ATTACKS
.
393
9.1.5
NOTATION
.
394
9.2
GENERALISING
DIFFIE-HELLMAN
KEY
AGREEMENT
.
394
9.2.1
INGEMARSSON-TANG-WONG
KEY
AGREEMENT
.
395
9.2.2
STEINER-TSUDIK-WAIDNER
KEY
AGREEMENT
.
396
9.2.3
STEER-STRAWCZYNSKI-DIFFIE-WIENER
KEY
AGREEMENT
.
399
9.2.4
KIM-PERRIG-TSUDIK
TREE
DIFFIE-HELLMAN
.
400
9.2.5
BECKER
AND
WILLE
*
S
OCTOPUS
PROTOCOL
.
402
9.2.6
BURMESTER-DESMEDT
KEY
AGREEMENT
.
404
9.2.7
ONE-ROUND
TRIPARTITE
AND
MULTI-PARTY
DIFFIE-HELLMAN
.
407
9.2.8
SECURITY
OF
GENERALISED
DIFFIE-HELLMAN
.
407
9.2.9
EFFICIENCY
OF
GENERALISED
DIFFIE-HELLMAN
.
408
9.3
GROUP
KEY
AGREEMENT
PROTOCOLS
.
410
9.3.1
AUTHENTICATING
GENERALISED
DIFFIE-HELLMAN
.
410
9.3.2
KLEIN-OTTEN-BETH
PROTOCOL
.
411
9.3.3
AUTHENTICATED
GDH
PROTOCOLS
.
412
9.3.4
AUTHENTICATED
TREE
DIFFIE-HELLMAN
.
416
9.3.5
KATZ-YUNG
COMPILER
.
416
9.3.6
PROTOCOL
OF
BOHLI,
GONZALEZ
VASCO
AND
STEINWANDT
.
419
9.3.7
AUTHENTICATED
TRIPARTITE
DIFFIE-HELLMAN
.
421
9.3.8
COMPARING
AUTHENTICATED
GROUP
DIFFIE-HELLMAN
.
422
9.4
IDENTITY-BASED
GROUP
KEY
ESTABLISHMENT
PROTOCOLS
.
423
CONTENTS
XIX
9.4.1
KOYAMA
AND
OHTA
PROTOCOLS
.
424
9.4.2
PROTOCOLS
OF
SAEEDNIA
AND
SAFAVI-NAINI
.
427
9.4.3
ID-BASED
GROUP
KEY
AGREEMENT
AND
PAIRINGS
.
428
9.5
GROUP
KEY
AGREEMENT
WITHOUT
DIFFIE-HELLMAN
.
429
9.5.1
PIEPRZYK
AND
LI
*
S
KEY
AGREEMENT
PROTOCOL
.
429
9.5.2
TZENG-TZENG
PROTOCOLS
. . .
430
9.5.3
BOYD-GONZALEZ
NIETO
GROUP
KEY
AGREEMENT
.
432
9.5.4
GENERIC
ONE-ROUND
GROUP
KEY
AGREEMENT
FROM
MULTI-KEM433
9.5.5
ASYMMETRIC
GROUP
KEY
AGREEMENT
.
434
9.6
GROUP
KEY
TRANSPORT
PROTOCOLS
.
434
9.6.1
BURMESTER-DESMEDT
STAR
AND TREE
PROTOCOLS
.
434
9.6.2
MAYER
AND
YUNG
*
S
PROTOCOLS
. . .
437
9.6.3
KEY
HIERARCHIES
.
439
9.7
CONCLUSION
.
440
A
STANDARDS
FOR
AUTHENTICATION
AND
KEY
ESTABLISHMENT
.
441
A.L
ISO
STANDARDS
.
441
A.1.1
ISO/IEC
9798
.
441
A.
1.2
ISO/IEC
11770
.
442
A.
1.3
ISO
9594-8/ITU
X.509
.
443
A.2
IETF
STANDARDS
.
443
A.3
IEEE
P1363
STANDARDS
.
444
A.4
NIST
STANDARDS
.
444
A.
5
OTHER
STANDARDS
AND
PROTOCOLS
.
446
A.5.1
ANSI
.
446
A.5.
2
WIDELY
DEPLOYED
PROTOCOLS
.
447
B
TUTORIAL:
BUILDING
A
KEY
ESTABLISHMENT
PROTOCOL
.
449
B.
L
CONFIDENTIALITY
.
451
B.2
AUTHENTICATION
.
453
B.3
REPLAY
.
455
B.4
DESIGN
PRINCIPLES
FOR
CRYPTOGRAPHIC
PROTOCOLS
.
459
C
SUMMARY
OF
NOTATION
.
461
REFERENCES
.
463
GENERAL
INDEX
.
513
PROTOCOL
INDEX
.
519 |
| any_adam_object | 1 |
| any_adam_object_boolean | 1 |
| author | Boyd, Colin 1959- Mathuria, Anish ca. 20./21. Jahrhundert Stebila, Douglas |
| author_GND | (DE-588)1036721086 (DE-588)120493231X (DE-588)1204932549 |
| author_facet | Boyd, Colin 1959- Mathuria, Anish ca. 20./21. Jahrhundert Stebila, Douglas |
| author_role | aut aut aut |
| author_sort | Boyd, Colin 1959- |
| author_variant | c b cb a m am d s ds |
| building | Verbundindex |
| bvnumber | BV046710946 |
| classification_rvk | ST 276 ST 277 |
| ctrlnum | (OCoLC)1153998696 (DE-599)DNB1164799010 |
| dewey-full | 005.8 |
| dewey-hundreds | 000 - Computer science, information, general works |
| dewey-ones | 005 - Computer programming, programs, data, security |
| dewey-raw | 005.8 |
| dewey-search | 005.8 |
| dewey-sort | 15.8 |
| dewey-tens | 000 - Computer science, information, general works |
| discipline | Informatik |
| discipline_str_mv | Informatik |
| edition | Second edition |
| format | Book |
| fullrecord | <?xml version="1.0" encoding="UTF-8"?><collection xmlns="http://www.loc.gov/MARC21/slim"><record><leader>00000nam a2200000 c 4500</leader><controlfield tag="001">BV046710946</controlfield><controlfield tag="003">DE-604</controlfield><controlfield tag="005">20200805</controlfield><controlfield tag="007">t|</controlfield><controlfield tag="008">200507s2020 gw |||| 00||| eng d</controlfield><datafield tag="015" ind1=" " ind2=" "><subfield code="a">18,N34</subfield><subfield code="2">dnb</subfield></datafield><datafield tag="015" ind1=" " ind2=" "><subfield code="a">20,A09</subfield><subfield code="2">dnb</subfield></datafield><datafield tag="016" ind1="7" ind2=" "><subfield code="a">1164799010</subfield><subfield code="2">DE-101</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">9783662581452</subfield><subfield code="c">Festeinband : circa EUR 106.99 (DE) (freier Preis), circa EUR 109.99 (AT) (freier Preis), circa CHF 110.00 (freier Preis)</subfield><subfield code="9">978-3-662-58145-2</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">3662581450</subfield><subfield code="9">3-662-58145-0</subfield></datafield><datafield tag="024" ind1="3" ind2=" "><subfield code="a">9783662581452</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(OCoLC)1153998696</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(DE-599)DNB1164799010</subfield></datafield><datafield tag="040" ind1=" " ind2=" "><subfield code="a">DE-604</subfield><subfield code="b">ger</subfield><subfield code="e">rda</subfield></datafield><datafield tag="041" ind1="0" ind2=" "><subfield code="a">eng</subfield></datafield><datafield tag="044" ind1=" " ind2=" "><subfield code="a">gw</subfield><subfield code="c">XA-DE-BE</subfield></datafield><datafield tag="049" ind1=" " ind2=" "><subfield code="a">DE-573</subfield><subfield code="a">DE-83</subfield><subfield code="a">DE-739</subfield></datafield><datafield tag="082" ind1="0" ind2=" "><subfield code="a">005.8</subfield><subfield code="2">23/ger</subfield></datafield><datafield tag="084" ind1=" " ind2=" "><subfield code="a">ST 276</subfield><subfield code="0">(DE-625)143642:</subfield><subfield code="2">rvk</subfield></datafield><datafield tag="084" ind1=" " ind2=" "><subfield code="a">ST 277</subfield><subfield code="0">(DE-625)143643:</subfield><subfield code="2">rvk</subfield></datafield><datafield tag="084" ind1=" " ind2=" "><subfield code="a">004</subfield><subfield code="2">sdnb</subfield></datafield><datafield tag="100" ind1="1" ind2=" "><subfield code="a">Boyd, Colin</subfield><subfield code="d">1959-</subfield><subfield code="e">Verfasser</subfield><subfield code="0">(DE-588)1036721086</subfield><subfield code="4">aut</subfield></datafield><datafield tag="245" ind1="1" ind2="0"><subfield code="a">Protocols for authentication and key establishment</subfield><subfield code="c">Colin Boyd, Anish Mathuria, Douglas Stebila</subfield></datafield><datafield tag="250" ind1=" " ind2=" "><subfield code="a">Second edition</subfield></datafield><datafield tag="264" ind1=" " ind2="1"><subfield code="a">Berlin</subfield><subfield code="b">Springer</subfield><subfield code="c">[2020]</subfield></datafield><datafield tag="264" ind1=" " ind2="4"><subfield code="c">© 2020</subfield></datafield><datafield tag="300" ind1=" " ind2=" "><subfield code="a">XXVIII, 521 Seiten</subfield><subfield code="c">24 cm, 986 g</subfield></datafield><datafield tag="336" ind1=" " ind2=" "><subfield code="b">txt</subfield><subfield code="2">rdacontent</subfield></datafield><datafield tag="337" ind1=" " ind2=" "><subfield code="b">n</subfield><subfield code="2">rdamedia</subfield></datafield><datafield tag="338" ind1=" " ind2=" "><subfield code="b">nc</subfield><subfield code="2">rdacarrier</subfield></datafield><datafield tag="490" ind1="0" ind2=" "><subfield code="a">Information security and cryptography</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Datensicherung</subfield><subfield code="0">(DE-588)4011144-1</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Diffie-Hellman-Algorithmus</subfield><subfield code="0">(DE-588)4739863-2</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Authentifikation</subfield><subfield code="0">(DE-588)4330656-1</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Kommunikationsprotokoll</subfield><subfield code="0">(DE-588)4128252-8</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Schlüsselverwaltung</subfield><subfield code="0">(DE-588)4625230-7</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">Cryptographic Protocols</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">Cryptography</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">Group Key Establishment</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">Identity-Based Key Agreement</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">Key Establishment</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">Key Exchange</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">Networking</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">Password-Based Protocols</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">Public-Key Cryptography</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">Shared-Key Cryptography</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">Transport-Layer Security (TLS) Protocol</subfield></datafield><datafield tag="689" ind1="0" ind2="0"><subfield code="a">Authentifikation</subfield><subfield code="0">(DE-588)4330656-1</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2="1"><subfield code="a">Schlüsselverwaltung</subfield><subfield code="0">(DE-588)4625230-7</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2="2"><subfield code="a">Kommunikationsprotokoll</subfield><subfield code="0">(DE-588)4128252-8</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2="3"><subfield code="a">Datensicherung</subfield><subfield code="0">(DE-588)4011144-1</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2="4"><subfield code="a">Diffie-Hellman-Algorithmus</subfield><subfield code="0">(DE-588)4739863-2</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2=" "><subfield code="5">DE-604</subfield></datafield><datafield tag="700" ind1="1" ind2=" "><subfield code="a">Mathuria, Anish</subfield><subfield code="d">ca. 20./21. Jahrhundert</subfield><subfield code="e">Verfasser</subfield><subfield code="0">(DE-588)120493231X</subfield><subfield code="4">aut</subfield></datafield><datafield tag="700" ind1="1" ind2=" "><subfield code="a">Stebila, Douglas</subfield><subfield code="e">Verfasser</subfield><subfield code="0">(DE-588)1204932549</subfield><subfield code="4">aut</subfield></datafield><datafield tag="710" ind1="2" ind2=" "><subfield code="a">Springer-Verlag GmbH</subfield><subfield code="0">(DE-588)1065168780</subfield><subfield code="4">pbl</subfield></datafield><datafield tag="776" ind1="0" ind2="8"><subfield code="i">Erscheint auch als</subfield><subfield code="n">Online-Ausgabe</subfield><subfield code="z">9783662581469</subfield></datafield><datafield tag="780" ind1="0" ind2="0"><subfield code="i">Vorangegangen ist</subfield><subfield code="z">3-540-43107-1</subfield><subfield code="w">(DE-604)BV017515092</subfield></datafield><datafield tag="856" ind1="4" ind2="2"><subfield code="m">X:MVB</subfield><subfield code="q">text/html</subfield><subfield code="u">http://deposit.dnb.de/cgi-bin/dokserv?id=2181c6fa978f4e7880c41c9405072f7d&prov=M&dok_var=1&dok_ext=htm</subfield><subfield code="3">Inhaltstext</subfield></datafield><datafield tag="856" ind1="4" ind2="2"><subfield code="m">X:MVB</subfield><subfield code="u">http://www.springer.com/</subfield></datafield><datafield tag="856" ind1="4" ind2="2"><subfield code="m">B:DE-101</subfield><subfield code="q">application/pdf</subfield><subfield code="u">https://d-nb.info/1164799010/04</subfield><subfield code="3">Inhaltsverzeichnis</subfield></datafield><datafield tag="856" ind1="4" ind2="2"><subfield code="m">DNB Datenaustausch</subfield><subfield code="q">application/pdf</subfield><subfield code="u">http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=032121352&sequence=000001&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA</subfield><subfield code="3">Inhaltsverzeichnis</subfield></datafield><datafield tag="943" ind1="1" ind2=" "><subfield code="a">oai:aleph.bib-bvb.de:BVB01-032121352</subfield></datafield></record></collection> |
| id | DE-604.BV046710946 |
| illustrated | Not Illustrated |
| index_date | 2024-07-03T14:30:48Z |
| indexdate | 2024-12-09T13:05:13Z |
| institution | BVB |
| institution_GND | (DE-588)1065168780 |
| isbn | 9783662581452 3662581450 |
| language | English |
| oai_aleph_id | oai:aleph.bib-bvb.de:BVB01-032121352 |
| oclc_num | 1153998696 |
| open_access_boolean | |
| owner | DE-573 DE-83 DE-739 |
| owner_facet | DE-573 DE-83 DE-739 |
| physical | XXVIII, 521 Seiten 24 cm, 986 g |
| publishDate | 2020 |
| publishDateSearch | 2020 |
| publishDateSort | 2020 |
| publisher | Springer |
| record_format | marc |
| series2 | Information security and cryptography |
| spelling | Boyd, Colin 1959- Verfasser (DE-588)1036721086 aut Protocols for authentication and key establishment Colin Boyd, Anish Mathuria, Douglas Stebila Second edition Berlin Springer [2020] © 2020 XXVIII, 521 Seiten 24 cm, 986 g txt rdacontent n rdamedia nc rdacarrier Information security and cryptography Datensicherung (DE-588)4011144-1 gnd rswk-swf Diffie-Hellman-Algorithmus (DE-588)4739863-2 gnd rswk-swf Authentifikation (DE-588)4330656-1 gnd rswk-swf Kommunikationsprotokoll (DE-588)4128252-8 gnd rswk-swf Schlüsselverwaltung (DE-588)4625230-7 gnd rswk-swf Cryptographic Protocols Cryptography Group Key Establishment Identity-Based Key Agreement Key Establishment Key Exchange Networking Password-Based Protocols Public-Key Cryptography Shared-Key Cryptography Transport-Layer Security (TLS) Protocol Authentifikation (DE-588)4330656-1 s Schlüsselverwaltung (DE-588)4625230-7 s Kommunikationsprotokoll (DE-588)4128252-8 s Datensicherung (DE-588)4011144-1 s Diffie-Hellman-Algorithmus (DE-588)4739863-2 s DE-604 Mathuria, Anish ca. 20./21. Jahrhundert Verfasser (DE-588)120493231X aut Stebila, Douglas Verfasser (DE-588)1204932549 aut Springer-Verlag GmbH (DE-588)1065168780 pbl Erscheint auch als Online-Ausgabe 9783662581469 Vorangegangen ist 3-540-43107-1 (DE-604)BV017515092 X:MVB text/html http://deposit.dnb.de/cgi-bin/dokserv?id=2181c6fa978f4e7880c41c9405072f7d&prov=M&dok_var=1&dok_ext=htm Inhaltstext X:MVB http://www.springer.com/ B:DE-101 application/pdf https://d-nb.info/1164799010/04 Inhaltsverzeichnis DNB Datenaustausch application/pdf http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=032121352&sequence=000001&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA Inhaltsverzeichnis |
| spellingShingle | Boyd, Colin 1959- Mathuria, Anish ca. 20./21. Jahrhundert Stebila, Douglas Protocols for authentication and key establishment Datensicherung (DE-588)4011144-1 gnd Diffie-Hellman-Algorithmus (DE-588)4739863-2 gnd Authentifikation (DE-588)4330656-1 gnd Kommunikationsprotokoll (DE-588)4128252-8 gnd Schlüsselverwaltung (DE-588)4625230-7 gnd |
| subject_GND | (DE-588)4011144-1 (DE-588)4739863-2 (DE-588)4330656-1 (DE-588)4128252-8 (DE-588)4625230-7 |
| title | Protocols for authentication and key establishment |
| title_auth | Protocols for authentication and key establishment |
| title_exact_search | Protocols for authentication and key establishment |
| title_exact_search_txtP | Protocols for authentication and key establishment |
| title_full | Protocols for authentication and key establishment Colin Boyd, Anish Mathuria, Douglas Stebila |
| title_fullStr | Protocols for authentication and key establishment Colin Boyd, Anish Mathuria, Douglas Stebila |
| title_full_unstemmed | Protocols for authentication and key establishment Colin Boyd, Anish Mathuria, Douglas Stebila |
| title_short | Protocols for authentication and key establishment |
| title_sort | protocols for authentication and key establishment |
| topic | Datensicherung (DE-588)4011144-1 gnd Diffie-Hellman-Algorithmus (DE-588)4739863-2 gnd Authentifikation (DE-588)4330656-1 gnd Kommunikationsprotokoll (DE-588)4128252-8 gnd Schlüsselverwaltung (DE-588)4625230-7 gnd |
| topic_facet | Datensicherung Diffie-Hellman-Algorithmus Authentifikation Kommunikationsprotokoll Schlüsselverwaltung |
| url | http://deposit.dnb.de/cgi-bin/dokserv?id=2181c6fa978f4e7880c41c9405072f7d&prov=M&dok_var=1&dok_ext=htm http://www.springer.com/ https://d-nb.info/1164799010/04 http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=032121352&sequence=000001&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA |
| work_keys_str_mv | AT boydcolin protocolsforauthenticationandkeyestablishment AT mathuriaanish protocolsforauthenticationandkeyestablishment AT stebiladouglas protocolsforauthenticationandkeyestablishment AT springerverlaggmbh protocolsforauthenticationandkeyestablishment |