SLIDE 1 Replay, Relay and Inverse-Sybil Attacks
2020 Eurocrypt Rump Session, May 13th, Living Room
Krzysztof Pietrzak
SLIDE 2
Proximity Tracing
8GD45AF3 8GD45AF3 8GD45AF3 . . . . . .
SLIDE 3
Proximity Tracing
8GD45AF3 8GD45AF3 8GD45AF3 . . . . . . . . . 8GD45AF3 . . . . . . 8GD45AF3 . . . . . .
SLIDE 4
Proximity Tracing
8GD45AF3 8GD45AF3 8GD45AF3 . . . . . . . . . 8GD45AF3 . . . . . . 8GD45AF3
SLIDE 5
Replay and Relay Attacks
8GD45AF3 8GD45AF3 8GD45AF3 . . . . . . . . .
SLIDE 6
Replay and Relay Attacks
8GD45AF3 8GD45AF3 8GD45AF3 . . . . . . . . . 8GD45AF3
SLIDE 7
Replay and Relay Attacks
8GD45AF3 8GD45AF3 8GD45AF3 . . . . . . . . . 8GD45AF3 8GD45AF3
SLIDE 8
Replay and Relay Attacks
8GD45AF3 8GD45AF3 8GD45AF3 . . . . . . . . . 8GD45AF3 8GD45AF3
SLIDE 9
Preventing Relay and Replay Attacks without Privacy
ID, K C tag = MACK(C) ID ID, tag, C
SLIDE 10
Preventing Relay and Replay Attacks without Privacy
ID, K C tag = MACK(C) ID ID, tag, C ID, K ID, K
SLIDE 11 Preventing Relay and Replay Attacks without Privacy
ID, K C tag = MACK(C) ID ID, tag, C ID, K ID, K tag
?
= MACK(C) ID, tag, C
SLIDE 12 Preventing Relay and Replay Attacks without Privacy
ID, K C tag = MACK(C) ID ID, tag, C ID, K ID, K tag
?
= MACK(C) ID, tag, C
SLIDE 13 Preventing Relay and Replay Attacks without Privacy
ID, K C tag = MACK(C) ID ID, tag, C ID, K ID, K tag
?
= MACK(C) ID, tag, C
SLIDE 14
Delayed Authentication (eprint 2020/418)
tag = MACK(σ) ID, R σ := commit(C; R) ID, tag, σ ID, K σ := commit(C; R)
SLIDE 15 Delayed Authentication (eprint 2020/418)
tag = MACK(σ) ID, R σ := commit(C; R) ID, tag, σ ID, K ID, K ID, K tag
?
= MACK(σ) ID, tag, σ σ := commit(C; R)
SLIDE 16 Delayed Authentication (eprint 2020/418)
tag = MACK(σ) ID, R σ := commit(C; R) ID, tag, σ ID, K ID, K ID, K tag
?
= MACK(σ) ID, tag, σ σ := commit(C; R)
SLIDE 17 Inverse Sybil Attacks
8GD45AF3 8GD45AF3 8GD45AF3
SLIDE 18 Inverse Sybil Attacks
8GD45AF3 8GD45AF3 8GD45AF3
SLIDE 19 Inverse Sybil Attacks
8GD45AF3 8GD45AF3 8GD45AF3
https://github.com/DP-3T/documents/issues/295