Universally Composable Key-Management

Steve Kremer (1) , Robert Künnemann (2) , Graham Steel (2)

1 CASSIS - Combination of approaches to the security of infinite states systems
2 PROSECCO - Programming securely with cryptography

We present the first universally composable key-management functionality, formalized in the GNUC framework by Hofheinz and Shoup. It allows the enforcement of a wide range of security policies and can be extended by diverse key usage operations with no need to repeat the security proof.We illustrate its use by proving an implementation of a security token secure with respect to arbitrary key-usage operations and explore a proof technique that allows the storage of cryptographic keys externally, a novel development in simulation-based security frameworks.

Domaines: Cryptographie et sécurité [cs.CR]

Steve Kremer, Robert Künnemann, Graham Steel. Universally Composable Key-Management. 18th European Symposium on Research in Computer Security (ESORICS'13), 2013, Egham, United Kingdom. ⟨10.1007/978-3-642-40203-6_19⟩. ⟨hal-00878632⟩