Proactive secure message transmission in asynchronous networks

ABSTRACT

We study the problem of secure message transmission among a group of parties in an insecure asynchronous network, where an adversary may repeatedly break into some parties for transient periods of time. A solution for this task is needed in order to use proactive cryptosystems in wide-area networks with loose synchronization. Parties have access to a secure hardware device that stores some cryptographic keys, but can carry out only a very limited set of operations. We provide a formal model of the system, using the framework for asynchronous reactive systems proposed by Pfitzmann and Waidner (Symposium on Security & Privacy, 2001), present a protocol for proactive message transmission, and prove it secure using the composability property of the framework.

REFERENCES

• 1: Michael Backes , Christian Jacobi, II , Birgit Pfitzmann, Deriving Cryptographically Sound Implementations Using Composition and Formally Verified Bisimulation, Proceedings of the International Symposium of Formal Methods Europe on Formal Methods - Getting IT Right, p.310-329, July 22-24, 2002
• 2: Boaz Barak , Shai Halevi , Amir Herzberg , Dalit Naor, Clock synchronization with faults and recoveries (extended abstract), Proceedings of the nineteenth annual ACM symposium on Principles of distributed computing, p.133-142, July 16-19, 2000, Portland, Oregon, United States [doi>10.1145/343477.343534]
• 3: Christian Cachin , Klaus Kursawe , Anna Lysyanskaya , Reto Strobl, Asynchronous verifiable secret sharing and proactive cryptosystems, Proceedings of the 9th ACM conference on Computer and communications security, November 18-22, 2002, Washington, DC, USA [doi>10.1145/586110.586124]
• 4: R. Canetti, Universally Composable Security: A New Paradigm for Cryptographic Protocols, Proceedings of the 42nd IEEE symposium on Foundations of Computer Science, p.136, October 14-17, 2001
• 5: R. Canetti, R. Gennaro, A. Herzberg, and D. Naor. Proactive security: Long-term protection against break-ins. RSA Laboratories' CryptoBytes, 3(1): 1--8, 1997.
• 6: R. Canetti, S. Halevi, and A. Herzberg. Maintaining authenticated communication in the presence of break-ins. Journal of Cryptology, 13(1):61--106, 2000.
• 7: M. Castro and B. Liskov. Proactive recovery in a Byzantine-fault-tolerant system. In Proc. Fourth Symp. Operating Systems Design and Implementation (OSDI), pages 273--287, 2000.
• 8: Y. Desmedt. Threshold cryptography. European Transactions on Telecommunications, 5(4):449--457, 1994.
• 9: Yair Frankel , Peter Gemmell , Philip D. MacKenzie , Moti Yung, Proactive RSA, Proceedings of the 17th Annual International Cryptology Conference on Advances in Cryptology, p.440-454, August 17-21, 1997
• 10: Oded Goldreich , R. L. Graham , B. Korte, Modern Cryptography, Probabilistic Proofs, and Pseudorandomness, Springer-Verlag New York, Inc., Secaucus, NJ, 1998
• 11: Amir Herzberg , Markus Jakobsson , Stanislław Jarecki , Hugo Krawczyk , Moti Yung, Proactive public key and signature systems, Proceedings of the 4th ACM conference on Computer and communications security, p.100-110, April 01-04, 1997, Zurich, Switzerland [doi>10.1145/266420.266442]
• 12: Amir Herzberg , Stanislaw Jarecki , Hugo Krawczyk , Moti Yung, Proactive Secret Sharing Or: How to Cope With Perpetual Leakage, Proceedings of the 15th Annual International Cryptology Conference on Advances in Cryptology, p.339-352, August 27-31, 1995
• 13: IBM PCI 4758 cryptographic coprocessor. http://www-3.ibm.com/security/cryptocards/.
• 14: Java card technology. http://java.sun.com/products/javacard/.
• 15: Rafail Ostrovsky , Moti Yung, How to withstand mobile virus attacks (extended abstract), Proceedings of the tenth annual ACM symposium on Principles of distributed computing, p.51-59, August 19-21, 1991, Montreal, Quebec, Canada [doi>10.1145/112600.112605]
• 16: Siani Pearson, Trusted Computing Platforms: TCPA Technology in Context, Prentice Hall PTR, Upper Saddle River, NJ, 2002
• 17: Birgit Pfitzmann , Michael Waidner, A Model for Asynchronous Reactive Systems and its Application to Secure Message Transmission, Proceedings of the 2001 IEEE Symposium on Security and Privacy, p.184, May 14-16, 2001
• 18: Lidong Zhou , Fred B. Schneider , Robbert van Renesse, COCA: A Secure Distributed On-line Certification Authority, Cornell University, Ithaca, NY, 2000

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.4 Communications Management

Additional Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection

General Terms:
Reliability, Security

Keywords:
proactive security, secure communication