355 reputation
14
bio website
location
age
visits member for 1 year, 8 months
seen Dec 6 '13 at 21:40

Dec
27
awarded  Yearling
Sep
18
awarded  Critic
Sep
16
comment Automated security protocol verification tool for eCK model
Most security models for key exchange protocols, including eCK, are descendants of [Bellare Rogaway 1993][1]. The differences among these variants are subtle and AFAIK there is no agreement on which one you should use. This is still a topic of active research so don't expect a definite answer here. [1]: cseweb.ucsd.edu/~mihir/papers/eakd.pdf
Sep
16
answered Automated security protocol verification tool for eCK model
Aug
3
revised Does there exist a two-pass AKE protocol that is secure in eCK model and also has PFS?
deleted 27 characters in body
Aug
1
revised Does there exist a two-pass AKE protocol that is secure in eCK model and also has PFS?
added 110 characters in body
Aug
1
answered Does there exist a two-pass AKE protocol that is secure in eCK model and also has PFS?
Jul
8
comment Authenticated DH, what protocols are secure?
There has been a lot of debate about the exact relation/improvements of HMQV over MQV, but IMO these discussions do not have significant practical impact. Especially since most standards require that the group element checks are included. This however reduces some of its claimed efficiency gains. These debates mostly concern the provable security claims and/or the precision of the security models.
Jul
7
revised Authenticated DH, what protocols are secure?
minor rephrase
Jul
7
answered Authenticated DH, what protocols are secure?
Jun
30
comment Formal definition of (perfect) forward security/secrecy
If the protocol stores the session key for law enforcement (or, say, encrypts it with the public key of law enforcement agencies and includes this in a transmission) then of course perfect forward secrecy is not satisfied wrt those agencies.
Jun
28
comment Formal definition of (perfect) forward security/secrecy
Possibly they mean shielding the communications from adversaries on the network; but of course on their servers your communication is in plaintext. Legislations for storing data/wiretapping are a very different threat model. I would guess that their statement simply means that they're using SSL/TLS in a Diffie-Hellman mode.
Jun
28
comment Formal definition of (perfect) forward security/secrecy
I agree, and I doubt that the formal definitions you will find will have any relation to the claims made by such companies.
Jun
28
awarded  Supporter
Jun
28
answered Formal definition of (perfect) forward security/secrecy
Dec
28
revised Public keys and their protocols
added 549 characters in body
Dec
28
answered Public keys and their protocols
Dec
27
revised Tools for modelling and analysis of cryptographic protocols
edited body
Dec
27
revised Tools for modelling and analysis of cryptographic protocols
added 41 characters in body
Dec
27
revised Tools for modelling and analysis of cryptographic protocols
Added links