A secure key management interface with asymmetric cryptography - l'unam - université nantes angers le mans Accéder directement au contenu
Chapitre D'ouvrage Année : 2014

A secure key management interface with asymmetric cryptography

Résumé

Cryptographic devices such as Hardware Security Modules are only as secure as their application programme interfaces (APIs) that offer cryptographic functionality to the outside world. Design flaws and implementation errors in security APIs have been shown to cause vulnerabilities that may leak secrets such as keys and PINs. Ideally, we would like to design such interfaces in such a way that we can formally prove security properties, even in the presence of some corrupted keys. In this work, we take such a design for a provably secure interface for symmetric key management, due to Cortier and Steel, and extend it to asymmetric cryptography, giving new security definitions and associated proofs. Asymmetric cryptography forces us to consider confidentiality and integrity properties separately and provide support for classical operations of public key infrastructure (e.g. certification of public keys). As far as we are aware this is the first such provably secure interface to support asymmetric key operations for key management: Cachin and Chandran's secure token interface supports asymmetric key operations only for encrypting and signing data, not for managing keys.

Domaines

Catalyse

Dates et versions

hal-01399292 , version 1 (18-11-2016)

Identifiants

Citer

Marion Daubignard, David Lubicz, Graham Steel. A secure key management interface with asymmetric cryptography. Martin Abadi; Steve kremer. Principles of Security and Trust: Third International Conference, POST 2014, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2014, Grenoble, France, April 5-13, 2014, Proceedings , 8414, Springer, pp.63-82, 2014, Lecture notes in computer science, 978-3-642-54791-1. ⟨10.1007/978-3-642-54792-8_4⟩. ⟨hal-01399292⟩
342 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More