Paper 2022/1090 Original: eprint.iacr.org/2022/1090 ↗

How fast do you heal? A taxonomy for post-compromise security in secure-channel establishment

Olivier Blazy
Ioana Boureanu
Pascal Lafourcade
Cristina Onete
Léo Robert
Abstract

Post-Compromise Security (PCS) is a property of secure-channel establishment schemes, which limits the security breach of an adversary that has compromised one of the endpoint to a certain number of messages, after which the channel heals. An attractive property, especially in view of Snowden's revelation of mass-surveillance, PCS was pioneered by the Signal messaging protocol, and is present in OTR. In this paper, we introduce a framework for quantifying and comparing PCS security, with respect to a broad taxonomy of adversaries. The generality and flexibility of our approach allows us to model the healing speed of a broad class of protocols, including Signal, but also an identity-based messaging protocol named SAID, and even a composition of 5G handover protocols.

Metadata
Available format(s)
PDF
Category
Foundations
Publication info
Preprint.
History
2022-09-05: last updated
2022-08-23: published
Short URL
https://ia.cr/2022/1090
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2022/1090,
      author = {Olivier Blazy and Ioana Boureanu and Pascal Lafourcade and Cristina Onete and Léo Robert},
      title = {How fast do you heal? A taxonomy for post-compromise security in secure-channel establishment},
      howpublished = {Cryptology {ePrint} Archive, Paper 2022/1090},
      year = {2022},
      url = {https://eprint.iacr.org/2022/1090}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.