Quantcast
Channel: Cryptology ePrint Archive
Viewing all articles
Browse latest Browse all 30207

On the Security of the Pre-Shared Key Ciphersuites of TLS, by Yong Li and Sven Schäge and Zheng Yang and Florian Kohlar and Jörg Schwenk

$
0
0
TLS is by far the most important protocol on the Internet for negotiating secure session keys and providing authentication. Only very recently, the standard ciphersuites of TLS have been shown to provide provably secure guarantees under a new notion called authenticated and Confidential Channel Establishment (ACCE) introduced by Jager et al. at CRYPTO'12. In this work, we analyse the variants of TLS that make use of pre-shared keys (TLS-PSK). In various environments, TLS-PSK is an interesting alternative for remote authentication between servers and constrained clients like smart cards, for example for mobile phone authentication, EMV-based payment transactions or authentication via electronic ID cards. First, we introduce a new and strong definition of ACCE security that covers protocols with pre-shared keys. Next, we prove that all ciphersuite families of TLS-PSK meet our strong notion of ACCE security. Our results do not rely on random oracles nor on any non-standard assumption.

Viewing all articles
Browse latest Browse all 30207

Trending Articles