User-mediated authentication protocols and unforgeability in key collision. (English) Zbl 1443.94091

Hale, Britta

Baek, Joonsang (ed.) et al., Provable security. 12th international conference, ProvSec 2018, Jeju, South Korea, October 25–28, 2018. Proceedings. Cham: Springer. Lect. Notes Comput. Sci. 11192, 387-396 (2018).

Summary: This research provides a computational analysis of the ISO 9798-6 standard’s Mechanism 7a authentication protocol. In contrast to typical authentication protocols, ISO 9798-6 mechanism 7a requires user interaction and aims to authenticate data possession instead of identities. Consequently, we introduce a 3-party possession user mediated authentication (3-PUMA) model. Furthermore, we demonstrate the necessary security guarantees of the MAC primitive – which include non-standard assumptions – and introduce existential unforgeability under key collision attacks (EUF-KCA). The resulting analysis demonstrates a notable lack in the standard’s requirements and has implications for other PUMA protocols.
For the entire collection see [Zbl 1398.94007].

MSC:

94A62	Authentication, digital signatures and secret sharing
94A60	Cryptography
68P25	Data encryption (aspects in computer science)

Keywords:

ISO 9798-6; authentication protocols; user interface; MAC security; key-collision attacks