On the Security of the FHMQV ProtocolReport as inadecuate

On the Security of the FHMQV Protocol - Download this document for free, or read online. Document in PDF available to download.

1 université Gaston Berger 2 IF - Institut Fourier

Abstract : The HMQV protocol is under consideration for IEEE P1363 standardization. We provide a complementary analysis of the HMQV protocol. Namely, we point a Key Compromise Impersonation KCI attack showing that the two and three pass HMQV protocols cannot achieve their security goals. Next, we revisit the FHMQV building blocks, design and security arguments; we clarify the security and efficiency separation between HMQV and FHMQV, showing the advantages of FH-MQV over HMQV.

Keywords : FHMQV HMQV KCI At-tack Security Model Authenticated Key Exchange

Author: Augustin Sarr - Philippe Elbaz-Vincent -

Source: https://hal.archives-ouvertes.fr/


Related documents