On the Security of Non-Interactive Key Exchange against Related-Key Attacks

• MORITA Hiraku

  Information Technology Research Institute (ITRI), National Institute of Advanced Industrial Science and Technology (AIST)

• C.N. SCHULDT Jacob

  Information Technology Research Institute (ITRI), National Institute of Advanced Industrial Science and Technology (AIST)

• MATSUDA Takahiro

  Information Technology Research Institute (ITRI), National Institute of Advanced Industrial Science and Technology (AIST)

• HANAOKA Goichiro

  Information Technology Research Institute (ITRI), National Institute of Advanced Industrial Science and Technology (AIST)

• IWATA Tetsu

  Dept. of Computational Science and Engineering, Nagoya University

Abstract

Non-Interactive Key Exchange (NIKE) is a cryptographic primitive that allows two users to compute a shared key without any interaction. The Diffie-Hellman key exchange scheme is probably the most well-known example of a NIKE scheme. Freire et al. (PKC 2013) defined four security notions for NIKE schemes, and showed implications among them. In these notions, we consider an adversary that is challenged to distinguish a shared key of a new pair of users from a random value, using only its knowledge of keys shared between other pairs of users. To take into account side-channel attacks such as tampering and fault-injection attacks, Bellare and Kohno (Eurocrypt 2003) formalized related-key attacks (RKA), where stronger adversaries are considered. In this paper, we introduce four RKA security notions for NIKE schemes. In these notions, we consider an adversary that can also manipulate the secret keys of users and obtain shared keys computed under the modified secret keys. We also show implications and separations among the security notions, and prove that one of the NIKE schemes proposed by Freire et al. is secure in the strongest RKA sense in the random oracle model under the Double Strong Diffie-Hellman (DSDH) assumption over the group of signed quadratic residues, which is implied by the factoring assumption.

Journal

• IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences

  IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences E100.A (9), 1910-1923, 2017

  The Institute of Electronics, Information and Communication Engineers

Keywords

• related-key attacks
• Non-Interactive Key Exchange
• Diffie-Hellman key exchange scheme

Details

• CRID: 1390001206311329408
• NII Article ID: 130006038269
• DOI: 10.1587/transfun.e100.a.1910
• ISSN: 17451337
• ISSN: 09168508
• Web Site: https://www.jstage.jst.go.jp/article/transfun/E100.A/9/E100.A_1910/_pdf
• Text Lang: en
• Data Source:
  • JaLC
  • Crossref
  • CiNii Articles
  • KAKEN
• Abstract License Flag: Disallowed