Protocol to enhance the security of Early data in TLS 1.3

Xing-long ZHANG; Qing-feng CHENG; Jian-feng MA

doi:10.11959/j.issn.2096-109x.2017.00224

您当前的位置：

首页 >

文章列表页 >

Protocol to enhance the security of Early data in TLS 1.3

Papers | 更新时间：2024-06-03

- Protocol to enhance the security of Early data in TLS 1.3
- Chinese Journal of Network and Information Security Vol. 3, Issue 12, Pages: 22-30(2017)
- 作者机构：
  
  1. 信息工程大学，河南郑州 450004
  2. 西安电子科技大学计算机学院，陕西西安 710071
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2017.00224
  CLC： TP309
- Online First：2017-12，
  
  Published：15 December 2017
- 稿件说明：
移动端阅览
Xing-long ZHANG, Qing-feng CHENG, Jian-feng MA. Protocol to enhance the security of Early data in TLS 1.3[J]. Chinese Journal of Network and Information Security, 2017, 3(12): 22-30.
DOI：

Xing-long ZHANG, Qing-feng CHENG, Jian-feng MA. Protocol to enhance the security of Early data in TLS 1.3[J]. Chinese Journal of Network and Information Security, 2017, 3(12): 22-30. DOI： 10.11959/j.issn.2096-109x.2017.00224.

摘要

将新型0-RTT密钥交换协议思想借鉴到TLS 1.3会话重用阶段，构建rFSOPKE协议，改进了Early data的加密和传输过程。rFSOPKE协议可以在Ticket有效期内保护Early data的前向安全性并使其抵抗重放攻击。与改进前Early data的发送过程相比，本协议大幅增强了Early data的安全性。在实现效率方面，由于在发送Early data时增加了本协议的计算和传输开销，所以实现效率有所降低。但是本协议可以根据应用场景的不同嵌入适合的算法，所以可以选择更加高效的算法提高协议实现速度。

Abstract

The new 0-RTT Internet key exchange was drawn on the TLS 1.3 session resumption phase

the rFSOPKE protocol was constructed

and the Early data encryption and transmission process were improved.The rFSOPKE protocol can protect the forward security of Early data and protect it from replay attacks during the validity period of the Ticket.Compared with the previous Early data transmission process

rFSOPKE greatly enhanced the security of Early data.Due to the increase in the calculation and transmission overhead of this protocol when sending Early data

the efficiency of the protocol is reduced.However

rFSOPKE can embed the appropriate algorithm according to the different application environment

so more efficient algorithms should be chosen to improve the protocol implementation speed.

关键词

Keywords

references

KRAWCZYK H , . HMQV:a high-performance secure Diffie-Hellman protocol [C ] // The International Cryptology Conference . 2005 : 546 - 566 .

CUI Y , LI T , LIU C , et al . Innovating transport with QUIC:design approaches and research challenges [J ] . IEEE Internet Computing , 2017 , 21 ( 2 ): 72 - 76 .

RESCORLA E . The transport layer security(TLS)protocol version 13-draft-ietf-tls-tls13-07 [DB/OL ] . https://tools.ietf.org/html/draft-ie tf-tls-tls13-07 https://tools.ietf.org/html/draft-ie tf-tls-tls13-07 .

FISCHLIN M , GÜNTHER F , . Multi-stage key exchange and the case of Google's QUIC protocol [C ] // The ACM CCS . 2014 : 1193 - 1204 .

KRAWCZYK H , WEE H . The OPTLS protocol and TLS 13 [C ] // The IEEE European Symposium on Security and Privacy . 2016 : 81 - 96 .

CREMERS C , HORVAT M , SCOTT S , et al . Automated analysis and verification of TLS 1.3:0-RTT,resumption and delayed authentication [C ] // Security and Privacy . 2016 : 470 - 485 .

RESCORLA E . The transport layer security(TLS)protocol version 1.3-draft-ietf-tls-tls13-10 [EB/OL ] . https://tools.ietf.org/html/draft-ie tf-tls-tls13-10 https://tools.ietf.org/html/draft-ie tf-tls-tls13-10 .

FISCHLIN M , GÜNTHER F , . Replay attacks on zero round-trip time:the case of the TLS 1.3 handshake candidates [C ] // IEEE European Symposium on Security and Privacy . 2017 : 82 - 113 .

HALE B , JAGER T , LAUER S , et al . Simple security definitions for and constructions of 0-RTT key exchange [C ] // The International Conference on Applied Cryptography and Network Security . 2017 : 20 - 38 .

CANETTI R , HALEVI S , KATZ J . A forward-secure public-key encryption scheme [J ] . Journal of Cryptology , 2007 , 20 ( 3 ): 265 - 294 .

POINTCHEVAL D , SANDERS O . Forward secure non-interactive key exchange [C ] // The International Conference on Security and Cryptography for Networks . 2014 : 21 - 39 .

COHN-GORDON K , CREMERS C , GARRATT L . On postcompromise security [C ] // Computer Security Foundations Symposium . 2016 : 164 - 178 .

GÜNTHER F , HALE B , JAGER T , et al . 0-RTT key exchange with full forward secrecy [C ] // The International Conference on the Theory and Applications of Cryptographic Techniques . 2017 : 519 - 548 .

DELIGNAT-LAVAUD A , FOURNET C , KOHLWEISS M , et al . Implementing and proving the TLS 1.3 record layer [C ] // The 2017 Security and Privacy . 2017 : 463 - 482 .

BHARGAVAN K , BLANCHET B , KOBEISSI N . Verified models and reference implementations for the TLS 1.3 standard candidate [C ] // The 2017 Security and Privacy . 2017 : 402 - 422 .

RESCORLA E . The transport layer security(TLS)protocol version 1.3-draft-ietf-tls-tls13-13 [DB/OL ] . https://tools.ietf.org/html/draft-ie tf-tls-tls13-13 https://tools.ietf.org/html/draft-ie tf-tls-tls13-13 .

RESCORLA E . The transport layer security(TLS)protocol version 1.3-draft-ietftls-tls13-12 [DB/OL ] . https://tools.ietf.org/html/draft-ietftls-tls13-12 https://tools.ietf.org/html/draft-ietftls-tls13-12 .

RESCORLA E . The transport layer security(TLS)protocol version 1.3-draft-ietf-tls-tls13-18 [DB/OL ] . https://tools.ietf.org/html/draftietf-tls-tls13-18 https://tools.ietf.org/html/draftietf-tls-tls13-18 .

KRAWCZYK H , . The order of encryption and authentication for protecting communications(or:how secure is SSL?) [C ] // CRYPTO . 2001 : 310 - 331 .

GOLDREICH O , GOLDWASSER S , MICALI S . How to construct random functions [C ] // Foundations of Computer Science . 1984 : 464 - 479 .

KRAWCZYK H , . Cryptographic extraction and key derivation:the HKDF scheme [C ] // CRYPTO . 2010 : 631 - 648 .

GROTH J , . Simulation-sound NIZK proofs for a practical language and constant size group signatures [C ] // The International Conference on Theory and Application of Cryptology and Information Security . 2006 : 444 - 459 .

BLAZY O , KILTZ E , PAN J . (Hierarchical) Identity-based encryption from affine message authentication [C ] // The International Cryptology Conference . 2014 : 408 - 425 .

Views

4427

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Improvement of lightweight threshold group signature scheme

Related Author

Zhirong ZHU

Jiayu LYU

Guohua YE

Zhiqiang YAO

Related Institution

School of Mathematics and Information,Fujian Normal University

Fujian Engineering Research Center of Public Service Big Data Mining and Application

⁰