Towards Bidirectional Ratcheted Key Exchange
Towards Bidirectional Ratcheted Key Exchange
复制标题
走向双向棘轮密钥交换
DOI：
--
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
Paul Rösler
中科院分区：
文献类型：
--
作者：
Bertram Poettering;Paul Rösler
棘轮密钥交换(RKE)是一种加密技术，用于Signal和WhatsApp Messenger等即时消息系统，以在面临国家曝光攻击时获得强大的安全性。在Cohn-Gordon等人最近的著作中，RKE受到了学术界的关注。(欧元&P2017)和贝拉雷等人。(密码2017)。虽然前者是分析性的，因为它主要旨在评估某个特定协议确实实现的安全性(这可能弱于它应该实现的概念)，但后者的作者从头开始开发和实例化了一个安全概念，独立于现有的实现。然而，不幸的是，他们的模型受到很大的限制，例如只考虑单向沟通和双方中只有一方的曝光。
Ratcheted key exchange (RKE) is a cryptographic technique used in instant messaging systems like Signal and the WhatsApp messenger for attaining strong security in the face of state exposure attacks. RKE received academic attention in the recent works of Cohn-Gordon et al. (EuroS&P 2017) and Bellare et al. (CRYPTO 2017). While the former is analytical in the sense that it aims primarily at assessing the security that one particular protocol does achieve (which might be weaker than the notion that it should achieve), the authors of the latter develop and instantiate a notion of security from scratch, independently of existing implementations. Unfortunately, however, their model is quite restricted, e.g. for considering only unidirectional communication and the exposure of only one of the two parties.