News

2nd IEEE European Symposium on Security and Privacy

06/04/2017

CRISP Researchers Introduce Paper

Prof. Marc Fischlin und Felix Günther, both CYSEC (at) TU Darmstadt introduced their paper at the 2nd IEEE European Symposium on Security and Privacy, in short IEEE European S&P, with the title "Replay Attacks on Zero Round-Trip Time: The Case of the TLS 1.3 Handshake Candidates".
Since 1980 the IEEE-Symposium for security and privacy is being held, to which international IT security experts come together, in order to discuss the newest  developments in computer security and electronic privacy. After the success of the international meetings the IEEE also initiates a european symposium for security and privacy (EuroS & P), which is annually organized in a european city.

Informationen zu dem vorgestellten Paper:
We investigate security of key exchange protocols supporting so-called zero round-trip time (0-RTT), enabling a client to establish a fresh provisional key without interaction, based only on cryptographic material obtained in previous connections. This key can then be already used to protect early application data, transmitted to the server before both parties interact further to switch to fully secure keys. Two recent prominent examples supporting such 0-RTT modes are Google's QUIC protocol and the latest drafts for the upcoming TLS version 1.3.
We are especially interested in the question how replay attacks, enabled through the lack of contribution from the server, affect security in the 0-RTT case. Whereas the first proposal of QUIC uses state on the server side to thwart such attacks, the latest version of QUIC and TLS 1.3 rather accept them as inevitable. We analyze what this means for the key secrecy of both the preshared-key-based 0-RTT handshake in the latest draft-14 of TLS 1.3 as well as the Diffie–Hellman-based 0-RTT handshake in TLS 1.3 draft-12. As part of this we extend previous security models to capture such cases, also shedding light on the limitations and options for 0-RTT security under replay attacks.

Das 2nd IEEE European S&P 2017 findet vom 26. - 28. April in Paris statt.

Zur Webseite des IEEE European S&P 2016

show all news