Paper 2004/345 Original: eprint.iacr.org/2004/345 ↗

On Session Identifiers in Provably Secure Protocols: The Bellare-Rogaway Three-Party Key Distribution Protocol Revisited

Kim-Kwang Raymond Choo
Colin Boyd
Yvonne Hitchcock
Greg Maitland
Abstract

We examine the role of session identifiers (SIDs) in security proofs for key establishment protocols. After reviewing the practical importance of SIDs we use as a case study the three-party server-based key distribution (3PKD) protocol of Bellare and Rogaway, proven secure in 1995. We show incidentally that the partnership function used in the existing security proof is flawed. There seems to be no way to define a SID for the 3PKD protocol that will preserve the proof of security. A small change to the protocol allows a natural definition for a SID and we prove that the new protocol is secure using this SID to define partnering.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Preprint.
History
2004-12-11: last updated
2004-12-11: published
Short URL
https://ia.cr/2004/345
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2004/345,
      author = {Kim-Kwang Raymond Choo and Colin Boyd and Yvonne Hitchcock and Greg Maitland},
      title = {On Session Identifiers in Provably Secure Protocols: The Bellare-Rogaway Three-Party Key Distribution Protocol Revisited},
      howpublished = {Cryptology {ePrint} Archive, Paper 2004/345},
      year = {2004},
      url = {https://eprint.iacr.org/2004/345}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.