Paper 2002/065

Secure Channels based on Authenticated Encryption Schemes: A Simple Characterization

Chanathip Namprempre

Abstract

We consider communication sessions in which a pair of parties begin by running an authenticated key-exchange protocol to obtain a shared session key, and then secure successive data transmissions between them via an authenticated encryption scheme based on the session key. We show that such a communication session meets the notion of a secure channel protocol proposed by Canetti and Krawczyk if and only if the underlying authenticated encryption scheme meets two new, simple definitions of security that we introduce, and the key-exchange protocol is secure. In other words, we reduce the secure channel requirements of Canetti and Krawczyk to easier to use, stand-alone security requirements on the underlying authenticated encryption scheme.

Metadata
Available format(s)
PDF PS
Category
Secret-key cryptography
Publication info
Published elsewhere. Advances in Cryptography --- Asiacrypt 2002
Keywords
Secure Channelsauthenticated encryptionsecurity notions
Contact author(s)
meaw @ cs ucsd edu
History
2002-08-29: last of 3 revisions
2002-05-29: received
See all versions
Short URL
https://ia.cr/2002/065
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2002/065,
      author = {Chanathip Namprempre},
      title = {Secure Channels based on Authenticated Encryption Schemes: A Simple Characterization},
      howpublished = {Cryptology {ePrint} Archive, Paper 2002/065},
      year = {2002},
      url = {https://eprint.iacr.org/2002/065}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.