How fast do you heal? A taxonomy for post-compromise security in secure-channel establishment - INRIA - Institut National de Recherche en Informatique et en Automatique Access content directly
Conference Papers Year : 2023

How fast do you heal? A taxonomy for post-compromise security in secure-channel establishment

Abstract

Post-Compromise Security (PCS) is a property of secure channel establishment schemes, which limits the security breach of an adversary that has compromised one of the end point to a certain number of messages, after which the channel heals. An attractive property, especially in view of Snowden's revelation of mass-surveillance, PCS was pioneered by the Signal messaging protocol, and is present in OTR. In this paper, we introduce a framework for quantifying and comparing PCS security, with respect to a broad taxonomy of adversaries. The generality and flexibility of our approach allows us to model the healing speed of a broad class of protocols, including Signal, but also an identity-based messaging protocol named SAID, and even a composition of 5G handover protocols.
Fichier principal
Vignette du fichier
main.pdf (495.9 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-03770735 , version 1 (06-09-2022)

Licence

Attribution

Identifiers

  • HAL Id : hal-03770735 , version 1

Cite

Olivier Blazy, Ioana Boureanu, Pascal Lafourcade, Cristina Onete, Léo Robert. How fast do you heal? A taxonomy for post-compromise security in secure-channel establishment. USENIX 2023 - The 32nd USENIX Security Symposium, Aug 2023, Anaheim, United States. pp.5917--5934. ⟨hal-03770735⟩
477 View
128 Download

Share

Gmail Facebook X LinkedIn More