Explore key confirmation in key exchange protocols through this IEEE Symposium on Security & Privacy conference talk. Delve into the first rigorous formalization of key confirmation, examining two flavors: full and almost-full. Discover how these concepts apply to the Transport Layer Security (TLS) protocol version 1.3. Analyze the benefits of precise security definitions and their implications for both the TLS 1.3 full handshake and a generic protocol transformation. Gain insights into the security properties of different handshake messages and the folklore approach to establishing key confirmation.
Key Confirmation in Key Exchange - A Formal Treatment and Implications for TLS 1.3
Overview
Syllabus
Intro
Key Confirmation
Why Care
What We Do
Full Key Confirmation
Almost Full Key Confirmation
Transform Protocol
Key Confirmation Protocol
Summary
Taught by
IEEE Symposium on Security and Privacy
Tags
Related Courses
-
Downgrade Resilience in Key-Exchange Protocols
-
What's New in TLS 1.3
-
A Unilateral-to-Mutual Authentication Compiler for Key Exchange - with Applications to Client Authentication in TLS 1.3
-
Securing the Future of TLS - What's New in TLS 1.3
-
Transport Layer Security - TLS 1.2 and 1.3 Explained by Example
-
Post-Quantum Key Exchange for the TLS Protocol from the Ring Learning with Errors Problem
