Reputation
535
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
2 5
Newest
 Nice Answer
Impact
~4k people reached

  • 0 posts edited
  • 0 helpful flags
  • 7 votes cast
Apr
28
answered Modelling crypto protocols using Formal methods
Feb
24
awarded  Nice Answer
Sep
10
answered Definition of authenticity
Jul
24
comment Favor hash size or field size when systems are disparate?
Note that both MQV and HMQV are patented.
Jul
20
comment Favor hash size or field size when systems are disparate?
I disagree with the standardization/difference between theoretical and practical crypto. MQV was standardized in IEEE P1363, and there has been an attempt made to also have HMQV included. I can't seem to quickly find what came out, but it does imply the information you are looking for is out there. IEEE P1363 reference: en.wikipedia.org/wiki/IEEE_P1363 Proposal to add HMQV: grouper.ieee.org/groups/1363/P1363-Reaffirm/submissions/…
Jul
16
answered Is this hypothetical key-exchange secure?
Jul
15
comment Is this hypothetical key-exchange secure?
In the message flow, you use small k in the first message, where I would think it might mean a pre-shared key. In the third message, you encrypt k, which suggests it is something else.
Jul
15
comment Is this hypothetical key-exchange secure?
What is small k? Is it a pre-shared key between A and B?
Jul
4
awarded  Yearling
Jul
3
answered Does anyone still use BAN or GNY logic in practice?
Dec
27
awarded  Yearling
Sep
18
awarded  Critic
Sep
16
comment Automated security protocol verification tool for eCK model
Most security models for key exchange protocols, including eCK, are descendants of [Bellare Rogaway 1993][1]. The differences among these variants are subtle and AFAIK there is no agreement on which one you should use. This is still a topic of active research so don't expect a definite answer here. [1]: cseweb.ucsd.edu/~mihir/papers/eakd.pdf
Sep
16
answered Automated security protocol verification tool for eCK model
Aug
3
revised Does there exist a two-pass AKE protocol that is secure in eCK model and also has PFS?
deleted 27 characters in body
Aug
1
revised Does there exist a two-pass AKE protocol that is secure in eCK model and also has PFS?
added 110 characters in body
Aug
1
answered Does there exist a two-pass AKE protocol that is secure in eCK model and also has PFS?
Jul
8
comment Authenticated DH, what protocols are secure?
There has been a lot of debate about the exact relation/improvements of HMQV over MQV, but IMO these discussions do not have significant practical impact. Especially since most standards require that the group element checks are included. This however reduces some of its claimed efficiency gains. These debates mostly concern the provable security claims and/or the precision of the security models.
Jul
7
revised Authenticated DH, what protocols are secure?
minor rephrase
Jul
7
answered Authenticated DH, what protocols are secure?