Session-State Reveal Is Stronger Than Ephemeral Key Reveal: Attacking the NAXOS Authenticated Key Exchange Protocol

Download Now Free registration required

Executive Summary

In the paper "Stronger Security of Authenticated Key Exchange", a new security model for authenticated key exchange protocols (eCK) is proposed. The new model is suggested to be at least as strong as previous models for key exchange protocols. The model includes a new notion of an Ephemeral Key Reveal adversary query, which is claimed to be at least as strong as the Session-state Reveal query. The authors show that Session-state Reveal is stronger than Ephemeral Key Reveal, implying that the eCK security model is incomparable to the CK model. In particular they show that the proposed NAXOS protocol does not meet its security requirements if the Session-state Reveal query is allowed in the eCK model.

  • Format: PDF
  • Size: 253.39 KB