security of tls 1 2
play

Security of TLS 1.2 The ACCE model TLS Crypto Seminar February 7, - PowerPoint PPT Presentation

Sep 12, 2022 •333 likes •479 views

Security of TLS 1.2 The ACCE model TLS Crypto Seminar February 7, 2019 Joseph Jaeger UC San Diego some slides & formatting stolen from Felix Gnther February 7, 2019 | Security of TLS | TLS Crypto Seminar, Winter 2019 Quarter, UC

  1. Security of TLS ≤1.2 The ACCE model TLS Crypto Seminar February 7, 2019 Joseph Jaeger UC San Diego some slides & formatting stolen from Felix Günther February 7, 2019 | Security of TLS | TLS Crypto Seminar, Winter 2019 Quarter, UC Joseph Jaeger 1 San Diego

  2. Today's Plan Goal ● What is the ACCE security model? Why was it needed for studying TLS? ● Dig into the details of the formalism. Part I Background ● Stateful Length-Hiding Authenticated Encryption ● Authenticated Key Exchange Part II ACCE Security Model ● Authenticated and Confidential Channel Establishment ● TLS 1.2 Security Results (Time Permitting) February 7, 2019 | Security of TLS | TLS Crypto Seminar, Winter 2019 Quarter, UC Joseph Jaeger 2 San Diego

  3. Background February 7, 2019 | Security of TLS | TLS Crypto Seminar, Winter 2019 Quarter, UC Joseph Jaeger 3 San Diego

  4. TLS Components From the first lecture: Security Typically Desired: ● Handshake Protocol = Authenticated Key Exchange ● Record Protocol = Stateful Length Hiding Authenticated Encryption February 7, 2019 | Security of TLS | TLS Crypto Seminar, Winter 2019 Quarter, UC Joseph Jaeger 4 San Diego

  5. Formalisms Formalisms based on: February 7, 2019 | Security of TLS | TLS Crypto Seminar, Winter 2019 Quarter, UC Joseph Jaeger 5 San Diego

  6. sLHAE Definition Syntax February 7, 2019 | Security of TLS | TLS Crypto Seminar, Winter 2019 Quarter, UC Joseph Jaeger 6 San Diego

  7. sLHAE Definition Security Security Typically Desired: ● All-in-one definition requiring left-right IND-CPA and INT-CTXT style security February 7, 2019 | Security of TLS | TLS Crypto Seminar, Winter 2019 Quarter, UC Joseph Jaeger 7 San Diego

  8. Key Exchange Definition Previously February 7, 2019 | Security of TLS | TLS Crypto Seminar, Winter 2019 Quarter, UC Joseph Jaeger 8 San Diego

  9. TLS Example February 7, 2019 | Security of TLS | TLS Crypto Seminar, Winter 2019 Quarter, UC Joseph Jaeger 9 San Diego

  10. ACCE February 7, 2019 | Security of TLS | TLS Crypto Seminar, Winter 2019 Quarter, UC Joseph Jaeger 10 San Diego

  11. ACCE Main Idea: Squish encryption and key exchange security together into single notion. February 7, 2019 | Security of TLS | TLS Crypto Seminar, Winter 2019 Quarter, UC Joseph Jaeger 11 San Diego

  12. Results Main Result: TLS-DHE is secure in this model February 7, 2019 | Security of TLS | TLS Crypto Seminar, Winter 2019 Quarter, UC Joseph Jaeger 12 San Diego

  13. Results Model: Closely related to discussed ACCE model. No client authentication. No forward security. Main Result: TLS-RSA is secure in this model. (Under OW-PCA assumption.) TLS-DH is secure in this model. (Under PRF-ODH assumption.) TLS would be secure in this model with CCA secure encryption February 7, 2019 | Security of TLS | TLS Crypto Seminar, Winter 2019 Quarter, UC Joseph Jaeger 13 San Diego

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

What is network security? Friends and enemies: Alice, Bob, Trudy What is network security?

Network security Network security Foundations: what is security? cryptography Network Security Network Security authentication message integrity key distribution and certification Security in practice: Srinidhi Varadarajan

332 views • 6 slides
Security Security as term, Possible Security violations Authentication Criteria for

Security Security as term, Possible Security violations Authentication Criteria for

BS1 WS19/20 topic-based slides Security Security as term, Possible Security violations Authentication Criteria for Trust in Computer Systems Three hearts of Windows Security DACLs A Look at Security System is secure if

988 views • 20 slides
CPSC410/611: Security Security Security Attacks Security Threats Crypto

CPSC410/611: Security Security Security Attacks Security Threats Crypto

CPSC 410 / 611 : Operating Systems CPSC410/611: Security Security Security Attacks Security Threats Crypto Authentication Examples SSL Security Threats Breach of confidentiality unauthorized access to

458 views • 18 slides
Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security

Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security

Biometrics and Security Biometrics and Security Biometrics and Security Biometrics and Security WS 06/07 Seminar Prof. Dr.-Ing. Jana Dittmann & Dr.-Ing. Claus Vielhauer with support from Tobias Scheidat

419 views • 16 slides
1 X.800 Security Services X.800 Security Services X.800 Security Services Data integrity

1 X.800 Security Services X.800 Security Services X.800 Security Services Data integrity

Course Overview Course Requirements EECS 498-7/8 Cryptography and Network Security: www.citi.umich.edu/u/honey/security Principles and Practice (Third Edition) Computer Security Monday & Friday, 9:00 10:30 William Stallings

670 views • 19 slides
A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security

A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security

A (re)introduction to Spring Security Agenda Before Spring Security: Acegi security Introducing Spring Security View layer security Whats coming in Spring Security 3 E-mail: craig@habuma.com Blog: http://www.springloaded.info

452 views • 19 slides
Network Security Network Security Srinidhi Varadarajan Network security Network security

Network Security Network Security Srinidhi Varadarajan Network security Network security

Network Security Network Security Srinidhi Varadarajan Network security Network security Foundations: what is security? cryptography authentication message integrity key distribution and certification Security in practice:

634 views • 36 slides
Security Overview Security Goals The Attack Space Security Mechanisms

Security Overview Security Goals The Attack Space Security Mechanisms

CSCE Intro to Computer Systems Security Security Overview Security Goals The Attack Space Security Mechanisms Introduction to Cryptography Authentication Authorization Confidentiality Case Studies Security

472 views • 20 slides
SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY

SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY

SECURITY TESTING Towards a safer web world AGENDA 1. 3 WS OF SECURITY TESTING 2. SECURITY TESTING CONCEPTS 3. SECURITY TESTING TYPES 4. TOP 10 SECURITY RISKS Few Security Breaches Date: 2013-14 September 2016, while in negotiations to

404 views • 18 slides
Security Security with Distributed Systems Why Security? The need for security mechanisms in

Security Security with Distributed Systems Why Security? The need for security mechanisms in

Security Security with Distributed Systems Why Security? The need for security mechanisms in distributed systems arises from the desire to share resources Resources must be protected against unauthorized access, as enemies (attackers)

1.16k views • 67 slides
Security Overview Security Goals The Attack Space Security Mechanisms

Security Overview Security Goals The Attack Space Security Mechanisms

CPSC 410/611 Operating Systems Security Security Overview Security Goals The Attack Space Security Mechanisms Introduction to Cryptography Authentication Authorization Confidentiality Case Studies

419 views • 19 slides
International and Global Security 1 Peer Discussion What is security? 2 International

International and Global Security 1 Peer Discussion What is security? 2 International

International and Global Security 1 Peer Discussion What is security? 2 International Security What is security? Freedom from threats to core values? Contestation over referent object: Individual? State? System? How is security achieved?

715 views • 11 slides
Security 101 Definition of Information Security Information security is the protection of

Security 101 Definition of Information Security Information security is the protection of

Computing Services Information Security Office Security 101 Definition of Information Security Information security is the protection of information and systems from unauthorized access, disclosure, modification, destruction or disruption. The

469 views • 22 slides
Security Update Security Plans Our Security plans are For Official Use Only, Safety

Security Update Security Plans Our Security plans are For Official Use Only, Safety

Security Update Security Plans Our Security plans are For Official Use Only, Safety Sensitive Information Not for public or media release F.S. 119.071. Required by law, rule and regulation: Homeland Security Directive 5 and 8.

393 views • 11 slides
Com puter Security Part One Security as a subject Security is an old problem in the

Com puter Security Part One Security as a subject Security is an old problem in the

Com puter Security Part One Security as a subject Security is an old problem in the computing world, and are parallel to even older problems outside computing Required level of security is always related to what you protect

237 views • 23 slides
Introduction to Security Comm. Security Strategy Summary ITS335: IT Security Sirindhorn

Introduction to Security Comm. Security Strategy Summary ITS335: IT Security Sirindhorn

ITS335 Intro. to Security Concepts Threats, Attacks, Assets Introduction to Security Comm. Security Strategy Summary ITS335: IT Security Sirindhorn International Institute of Technology Thammasat University Prepared by Steven Gordon on 2

965 views • 34 slides
Composition of Password-based Protocols ephanie Delaune 1 , Steve Kremer 1 and Mark Ryan 2 St 1

Composition of Password-based Protocols ephanie Delaune 1 , Steve Kremer 1 and Mark Ryan 2 St 1

Composition of Password-based Protocols ephanie Delaune 1 , Steve Kremer 1 and Mark Ryan 2 St 1 LSV, ENS de Cachan, CNRS & INRIA, France 2 School of Computer Science, University of Birmingham, UK CSF08, Pittsburgh June 2008

403 views • 27 slides
Web Security [SSL/TLS and Browser Security Model] Fall 2017 Franziska (Franzi) Roesner

Web Security [SSL/TLS and Browser Security Model] Fall 2017 Franziska (Franzi) Roesner

CSE 484 / CSE M 584: Computer Security and Privacy Web Security [SSL/TLS and Browser Security Model] Fall 2017 Franziska (Franzi) Roesner franzi@cs.washington.edu Thanks to Dan Boneh, Dieter Gollmann, Dan Halperin, Yoshi Kohno, Ada Lerner,

570 views • 43 slides
1 Description Mur Modeling Prior to 4-way handshake, we assume:

1 Description Mur Modeling Prior to 4-way handshake, we assume:

Scenario: 802.11 Analysis of 4-way handshake protocol in IEEE 802.11i Wired Network Changhua He Stanford University Security ! Mar. 04, 2004 An example of a 802.11 wireless local area network History of Security Concerns Terms

285 views • 3 slides
Kerberos4(NSchapter13)

Kerberos4(NSchapter13)

Kerberos4(NSchapter13) RealmhasKDCandprincipals(users)

455 views • 11 slides
CSE543 Computer and Network Security Module: Network Security Professor Trent Jaeger CSE543 -

CSE543 Computer and Network Security Module: Network Security Professor Trent Jaeger CSE543 -

682 views • 50 slides
SSL/TLS Slides by Vitaly Shmatikov University of Texas updated slightly by smo IHK slide 1

SSL/TLS Slides by Vitaly Shmatikov University of Texas updated slightly by smo IHK slide 1

SSL/TLS Slides by Vitaly Shmatikov University of Texas updated slightly by smo IHK slide 1 What is SSL / TLS? Transport Layer Security protocol, version 1.0 De facto standard for Internet security The primary goal of the TLS

318 views • 11 slides
Communication security: Formal models and proofs Hubert Comon September 1, 2016 1 Introduction

Communication security: Formal models and proofs Hubert Comon September 1, 2016 1 Introduction

Communication security: Formal models and proofs Hubert Comon September 1, 2016 1 Introduction to protocol security The context (I) credit cards contactless cards telephones online transactions cars, fridges,... Internet of

680 views • 11 slides
DScope: Detecting Real-World Data Corruption Hang Bugs in Cloud Server Systems Ting Dai 1 ,

DScope: Detecting Real-World Data Corruption Hang Bugs in Cloud Server Systems Ting Dai 1 ,

DScope: Detecting Real-World Data Corruption Hang Bugs in Cloud Server Systems Ting Dai 1 , Jingzhu He 1 , Xiaohui (Helen) Gu 1 , Shan Lu 2 , Peipei Wang 1 1 NC State University 2 University of Chicago 1 DScope, SoCC18 Real-World Data

333 views • 21 slides

More recommend