Cryptology ePrint Archive: Report 2014/037
On the Security of the Pre-Shared Key Ciphersuites of TLS
Yong Li and Sven Schäge and Zheng Yang and Florian Kohlar and Jörg Schwenk
Abstract: TLS is by far the most important protocol on the Internet for negotiating secure session keys and providing authentication.
Only very recently, the standard ciphersuites of TLS have been shown to provide provably secure guarantees under a new notion called authenticated and Confidential Channel Establishment (ACCE) introduced by Jager et al. at CRYPTO'12.
In this work, we analyse the variants of TLS that make use of pre-shared keys (TLS-PSK). In various environments, TLS-PSK is an interesting alternative for remote authentication between servers and constrained clients like smart cards, for example for mobile phone authentication, EMV-based payment transactions or authentication via electronic ID cards.
First, we introduce a new and strong definition of ACCE security that covers protocols with pre-shared keys. Next, we prove that all ciphersuite families of TLS-PSK meet our strong notion of ACCE security. Our results do not rely on random oracles nor on any non-standard assumption.
Category / Keywords: cryptographic protocols / TLS, TLS-PSK, ACCE, Pre-Shared Keys, Authenticated Key Exchange, Secure Channels
Original Publication (with major differences): IACR-PKC-2014
Date: received 13 Jan 2014, last revised 2 Apr 2015
Contact author: sschaege at gmail com
Available format(s): PDF | BibTeX Citation
Version: 20150402:141326 (All versions of this report)
Discussion forum: Show discussion | Start new discussion
[ Cryptology ePrint archive ]