Paper 2021/424 Original: eprint.iacr.org/2021/424 ↗
Security Analysis of SFrame
Abstract
Increasing privacy consciousness has popularized the use of end-to-end encryption (E2EE). In this paper, we discuss the security of SFrame, an E2EE mechanism proposed to the Internet Engineering Task Force for video/audio group communications over the Internet. Despite being a quite recent project, SFrame has been deployed in several real-world applications. The original specification of SFrame is evaluated herein to find critical issues that can cause impersonation (forgery) attacks with a practical complexity by a malicious group member. Further investigations have revealed that these issues are present in several publicly available SFrame implementations. Therefore, we provide several countermeasures against all the proposed attacks and considerations from performance and security perspectives toward their implementation.
Metadata
- Available format(s)
PDF- Category
- Cryptographic protocols
- Publication info
- Preprint.
- History
- 2024-12-23: last updated
- 2021-04-06: published
- Short URL
- https://ia.cr/2021/424
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2021/424,
author = {Takanori Isobe and Ryoma Ito and Kazuhiko Minematsu},
title = {Security Analysis of SFrame},
howpublished = {Cryptology {ePrint} Archive, Paper 2021/424},
year = {2021},
url = {https://eprint.iacr.org/2021/424}
}