Protocol Interactions and the Chosen Protocol Attack


Published: Apr 11, 2000 Updated: Apr 11, 2000 Section: Network Security Library :: Auth. & Access Control Author: Company: Counterpane Internet Security, Inc. Printable Version Adjust font size: Rating: 5/5 - 1 Votes 1 2 3 4 5

There are many cases in the literature in which reuse of the same key material for different functions can open up security holes. In this paper, we discuss such interactions between protocols, and present a new attack, called the chosen protocol attack, in which an attacker may write a new protocol using the same key material as a target protocol, which is individually very strong, but which interacts with the target protocol in a security-relevant way. We finish with a brief discussion of design principles to resist this class of attack.

Click Here to download this article