Abstract
Contrary to conventional cryptographic wisdom, the NIST SP 800-56A standard explicitly allows the use of a static key pair in more than one of the key establishment protocols described in the standard. In this paper, we give examples of key establishment protocols that are individually secure, but which are insecure when static key pairs are reused in two of the protocols. We also propose an enhancement of the extended Canetti-Krawczyk security model and definition for the situation where static public keys are reused in two or more key agreement protocols. © 2009 Springer-Verlag.
Cite
CITATION STYLE
Chatterjee, S., Menezes, A., & Ustaoglu, B. (2009). Reusing static keys in key agreement protocols. In Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) (Vol. 5922 LNCS, pp. 39–56). https://doi.org/10.1007/978-3-642-10628-6_3
Register to see more suggestions
Mendeley helps you to discover research relevant for your work.
