Burton S. Kaliski Jr.
Citation:An unknown key-share attack on the
MQV key agreement protocol. ACM Transactions on Information and System
Security, vol. 4, no. 3, August 2001, pages 275-288.
Preliminary version presented at RSA
Conference 2000 Europe, Munich, Germany, April 10-13, 2000.
Abstract: The MQV key agreement protocol, a technique included
in recent standards, is shown in its basic form to be vulnerable to an
unknown key-share attack. Although the attack’s practical impact
on security is minimal — a key confirmation step easily prevents
it — the attack is noteworthy in the principles it indicates about
protocol design. First, minor “efficiency improvements” can
significantly alter the security properties of a protocol. Second, protocol
analysis must consider potential interactions with all parties, not just
those that are normally on-line. Finally, attacks must be assessed in
terms of system requirements, not just in isolation.
ACM
Portal link to paper
Click here for slides
