PriviPK: Certificate-less and secure email communication
| Autor: | Ilia Lebedev, Mashael AlSabah, Alin Tomescu, Dimitrios Serpanos, Srinivas Devadas |
|---|---|
| Rok vydání: | 2017 |
| Předmět: |
General Computer Science
Computer science computer.internet_protocol 0211 other engineering and technologies Certificateless cryptography Key distribution Cryptography 02 engineering and technology Encryption Computer security computer.software_genre Public-key cryptography Web of trust Email encryption Forward secrecy Key revocation 0202 electrical engineering electronic engineering information engineering Key-agreement protocol 021110 strategic defence & security studies Key generation Authentication business.industry Key agreement 020206 networking & telecommunications End-to-end secure email Certificate Management Protocol Certificate Application of key transparency business Law computer Confidentiality Key escrow |
| Zdroj: | Computers & Security. 70:1-15 |
| ISSN: | 0167-4048 |
| DOI: | 10.1016/j.cose.2017.04.008 |
| Popis: | We introduce PriviPK, an infrastructure that is based on a novel combination of certificateless (CL) cryptography and key transparency techniques to enable e2e email encryption. Our design avoids (1) key escrow and deployment problems of previous IBC systems, (2) certificate management, as in S/MIME, or participation in complicated Web of Trust, as in PGP, and (3) impersonation attacks because it relies on key transparency approaches where end users verify their identity and key bindings. PriviPK uses a new CL key agreement protocol that has the unique property that it allows users to update their public keys without the need to contact a third party (such as a CA) for the recertification process, which allows for cheap forward secrecy and key revocation operations. Furthermore, PriviPK uniquely combines important privacy properties such as forward secrecy, deniability (or non-deniability if desired), and user transparency while avoiding the administrative overhead of certificates for asynchronous communication. PriviPK enables quick bootstrapping of shared keys among participating users, allowing them to encrypt and authenticate each other transparently. We describe an implementation of PriviPK and provide performance measurements that show its minimal computational overhead. We also describe our PriviPK-enabled e2e secure email client, a modification of The Nylas Mail, 2015 email client. 2017 Elsevier Ltd Scopus |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|
Full Text from ScienceDirect