Mind the Gap: Ceremonies for Applied Secret Sharing
Mind the Gap: Ceremonies for Applied Secret Sharing
复制标题
注意差距：应用秘密共享仪式
DOI：
--
复制
发表时间：
2020
影响因子：
--
通讯作者：
I. Goldberg
中科院分区：
文献类型：
--
作者：
Bailey Kacsmar;C. Komlo;F. Kerschbaum;I. Goldberg
摘要 由于秘密共享方案可以提供安全性和隐私属性，例如可用性和特权分离，因此在各种现实环境中都需要秘密共享方案。然而，将秘密共享方案从理论研究过渡到实际使用必须考虑到由于具体实现、威胁模型和用例的现实而出现的实现这些属性的差距。我们使用埃里森的仪式概念提出了形式化和分析，证明了秘密共享方案用例中的简单变化如何导致某些安全属性的潜在损失，而这一结果不能仅从底层加密协议的分析中得出。我们的框架通过提供更详细的以用户为中心的流程并定义先前被忽视的有关方案中用户角色和操作的假设来解释秘密共享实现的设计和分析中的这种变化，以在设计此类仪式时支持分析。我们确定现有机制，当将其应用于适当的实施时，可以弥补我们确定的安全漏洞。我们展示了我们的实现，包括这些机制以及使用我们的框架进行的相应安全评估。
Abstract Secret sharing schemes are desirable across a variety of real-world settings due to the security and privacy properties they can provide, such as availability and separation of privilege. However, transitioning secret sharing schemes from theoretical research to practical use must account for gaps in achieving these properties that arise due to the realities of concrete implementations, threat models, and use cases. We present a formalization and analysis, using Ellison’s notion of ceremonies, that demonstrates how simple variations in use cases of secret sharing schemes result in the potential loss of some security properties, a result that cannot be derived from the analysis of the underlying cryptographic protocol alone. Our framework accounts for such variations in the design and analysis of secret sharing implementations by presenting a more detailed user-focused process and defining previously overlooked assumptions about user roles and actions within the scheme to support analysis when designing such ceremonies. We identify existing mechanisms that, when applied to an appropriate implementation, close the security gaps we identified. We present our implementation including these mechanisms and a corresponding security assessment using our framework.
Callisto：检测性行为不端连环犯罪者的密码学方法
DOI：
10.1145/3209811.3212699
发表时间：
2018
期刊：
Proceedings of the 1st ACM SIGCAS Conference on Computing and Sustainable Societies
影响因子：
--
作者：
Rajan, Anjana;Qin, Lucy;Archer, David W.;Boneh, Dan;Lepoint, Tancrede;Varia, Mayank
通讯作者：
Varia, Mayank