Provable security for cryptographic protocols – exact analysis and engineering applications

Article type: Research Article

Authors: Gray III, James W.^{; *} | Epsilon Ip, Kin Fai^{; **} | Lui, King-Shan^{; ***}

Affiliations: Department of Computer Science, Hong Kong University of Science and Techology, Clear Water Bay, Hong Kong

Correspondence: [*] Corresponding author. Present address: RSA Laboratories, 2755 Campus Drive, San Mateo, CA 94403, USA. E-mail: jgray@rsa.com.

Note: [**] E-mail: fai@cs.ust.hk.

Note: [***] E-mail: shan@cs.ust.hk.

Abstract: We develop an approach to deriving concrete engineering advice for cryptographic protocols from provable-security-style proofs of security. The approach is illustrated with a simple, yet useful protocol. Our main result provides the first published proof of an exact probabilistic relationship between a high-level protocol and multiple cryptographic primitives. This exact relationship enables us to rigorously derive concrete recommendations on the bitlengths of cryptographic keys and on how often principals should rekey. As an additional benefit of our approach, the process of developing our theorem and proof lead us to identify and implement an improvement in our example protocol.

DOI: 10.3233/JCS-1998-61-203

Journal: Journal of Computer Security, vol. 6, no. 1-2, pp. 23-52, 1998