Timeline for variant of Diffie–Hellman key exchange protocol
Current License: CC BY-SA 3.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 20, 2015 at 9:26 | history | edited | Yevgeny Rosenthal | CC BY-SA 3.0 |
added 329 characters in body
|
| Aug 20, 2015 at 9:16 | vote | accept | Yevgeny Rosenthal | ||
| Aug 20, 2015 at 8:20 | answer | added | user2552 | timeline score: 3 | |
| Aug 19, 2015 at 19:22 | comment | added | Yevgeny Rosenthal | you are right regarding the meaning of 'security'. the problem in my first reduction -as I think- is that in both cases (when $g_3=g^{xy}$ and $g_3=g^z$ ) the difference was in the $Transport$ and not in the $Key$, while in the definition of security, the adversary should receive in both cases a valid $Transport$ and in first case real key while in the other it should receive a key distributed uniformly | |
| Aug 19, 2015 at 15:33 | comment | added | user2552 | By "security", I presume that you mean the real key is indistinguishable from a random one to a passive attacker - I don't think this protocol is actively/MITM secure, for example. Your first reduction actually looks ok to me, I don't understand what the problem is? | |
| Aug 19, 2015 at 12:59 | review | First posts | |||
| Aug 19, 2015 at 13:37 | |||||
| Aug 19, 2015 at 12:55 | history | asked | Yevgeny Rosenthal | CC BY-SA 3.0 |