[Resource Topic] 2023/1827: Key Exchange in the Post-Snowden Era: UC Secure Subversion-Resilient PAKE

Welcome to the resource topic for 2023/1827

Title:
Key Exchange in the Post-Snowden Era: UC Secure Subversion-Resilient PAKE

Authors: Suvradip Chakraborty, Lorenzo Magliocco, Bernardo Magri, Daniele Venturi

Abstract:

Password-Authenticated Key Exchange (PAKE) allows two parties to establish a common high-entropy secret from a possibly low-entropy pre-shared secret such as a password. In this work, we provide the first PAKE protocol with subversion resilience in the framework of universal composability (UC), where the latter roughly means that UC security still holds even if one of the two parties is malicious and the honest party’s code has been subverted (in an undetectable manner).

We achieve this result by sanitizing the PAKE protocol from oblivious transfer (OT) due to Canetti et al. (PKC’12) via cryptographic reverse firewalls in the UC framework (Chakraborty et al., EUROCRYPT’22). This requires new techniques, which help us uncover new cryptographic primitives with sanitation-friendly properties along the way (such as OT, dual-mode cryptosystems, and signature schemes).

As an additional contribution, we delve deeper in the backbone of communication required in the subversion-resilient UC framework, extending it to the unauthenticated setting, in line with the work of Barak et al. (CRYPTO’05).

ePrint: https://eprint.iacr.org/2023/1827

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .