How to prevent type-flaw attacks on security protocols under algebraic properties

Computer Science – Cryptography and Security

Scientific paper

Rate now

  [ 0.00 ] – not rated yet Voters 0   Comments 0

Details

16 pages, Appeared in proceedings of Security with Rewriting Techniques (SecRet09), Affiliated to CSF Symposium 2009, Port Jef

Scientific paper

Type-flaw attacks upon security protocols wherein agents are led to misinterpret message types have been reported frequently in the literature. Preventing them is crucial for protocol security and verification. Heather et al. proved that tagging every message field with it's type prevents all type-flaw attacks under a free message algebra and perfect encryption system. In this paper, we prove that type-flaw attacks can be prevented with the same technique even under the ACUN algebraic properties of XOR which is commonly used in "real-world" protocols such as SSL 3.0. Our proof method is general and can be easily extended to other monoidal operators that possess properties such as Inverse and Idempotence as well. We also discuss how tagging could be used to prevent type-flaw attacks under other properties such as associativity of pairing, commutative encryption, prefix property and homomorphic encryption.

No associations

LandOfFree

Say what you really think

Search LandOfFree.com for scientists and scientific papers. Rate them and share your experience with other people.

Rating

How to prevent type-flaw attacks on security protocols under algebraic properties does not yet have a rating. At this time, there are no reviews or comments for this scientific paper.

If you have personal experience with How to prevent type-flaw attacks on security protocols under algebraic properties, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and How to prevent type-flaw attacks on security protocols under algebraic properties will most certainly appreciate the feedback.

Rate now

     

Profile ID: LFWR-SCP-O-127798

  Search
All data on this website is collected from public sources. Our data reflects the most accurate information available at the time of publication.