Augmented Secure Channels and the Goal of the TLS 1.3 Record Layer
Augmented Secure Channels and the Goal of the TLS 1.3 Record Layer
复制标题
增强的安全通道和 TLS 1.3 记录层的目标
DOI：
10.1007/978-3-319-26059-4_5
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
Björn Tackmann
中科院分区：
文献类型：
--
作者：
Christian Badertscher;Christian Matt;U. Maurer;P. Rogaway;Björn Tackmann
出于认证加密和TLS的广泛采用，我们建议一个基本的通道抽象，增强的安全通道？ASC，允许发送者向接收者发送由两部分组成的消息，其中一部分受隐私保护，两部分均受身份验证保护。在传统的建设性密码学的工作，我们形式化的想法，并提供了这种通道的建设使用较低级别的工具认证加密。
我们看看最近的提案TLSi？1.3并建议，判断其安全性的标准非常简单：它们是否构建了ASC？由于这个精确定义的目标，我们能够给出一个自然的结构，带有严格的安全性证明，并直接导致对TLSi？1.3这是可以证明安全的。
Motivated by the wide adoption of authenticated encryption and TLS, we suggest a basic channel abstraction, an augmented secure channeli¾?ASC, that allows a sender to send a receiver messages consisting of two parts, where one is privacy-protected and both are authenticity-protected. Working in the tradition of constructive cryptography, we formalize this idea and provide a construction of this kind of channel using the lower-level tool authenticated-encryption.
We look at recent proposals on TLSi¾?1.3 and suggest that the criterion by which their security can be judged is quite simple: do they construct an ASC? Due to this precisely defined goal, we are able to give a natural construction that comes with a rigorous security proof and directly leads to a proposal on TLSi¾?1.3 that is provably secure.