Modeling insider attacks on group key-exchange protocols

Protocols for authenticated key exchange (AKE) allow parties within an insecure network to establish a common session key which can then be used to secure their future communication. It is fair to say that group AKE is currently less well understood than the case of two-party AKE; in particular, attacks by malicious insiders — a concern specific to the group setting — have so far been considered only in a relatively “ad-hoc” fashion. The main contribution of this work is to address this deficiency by providing a formal, comprehensive model and definition of security for group AKE which automatically encompasses insider attacks. We do so by defining an appropriate ideal functionality for group AKE within the universal composability (UC) framework. As a side benefit, any protocol secure with respect to our definition is secure even when run concurrently with other protocols, and the key generated by any such protocol may be used securely in any subsequent application. In a...

• Type: Conference
• Year: 2005
• Where: CCS
• Authors: Jonathan Katz, Ji Sun Shin
• Keywords: CCS 2005, Group Ake, Insider Attacks, Key Exchange, Security Privacy