000180254 001__ 180254
000180254 005__ 20190316235441.0
000180254 037__ $$aCONF
000180254 245__ $$aOn the Pseudorandom Function Assumption in (Secure) Distance-Bounding Protocols
000180254 269__ $$a2012
000180254 260__ $$bSpringer$$c2012
000180254 336__ $$aConference Papers
000180254 490__ $$aLecture Notes in Computer Science$$v7533
000180254 520__ $$aIn this paper, we show that many formal and informal security results on distance-bounding (DB) protocols are incorrect/incomplete. We identify that this inadequacy stems from the fact that the pseudorandom function (PRF) assumption alone, invoked in many security claims, is insufficient. To this end, we identify two distinct shortcomings of invoking the PRF assumption alone: one leads to distance-fraud attacks, whilst the other opens for man-in-the-middle (MiM) attacks. First, we describe –in a more unitary, formal fashion– why assuming that a family of functions classically used inside DB protocols is solely a PRF is unsatisfactory and what generic security flaws this leads to. Then, we present concrete constructions that disprove the PRF-based claimed security of several DB protocols in the literature; this is achieved by using some PRF programming techniques. Whilst our examples may be considered contrived, the overall message is clear: the PRF assumption should be strengthened in order to attain security against distance-fraud and MiM attacks in distance-bounding protocols!
000180254 6531_ $$aNCCR-MICS
000180254 6531_ $$aNCCR-MICS/Secu
000180254 700__ $$0245206$$g210384$$aBoureanu, Ioana Cristina
000180254 700__ $$0244133$$g206250$$aMitrokotsa, Aikaterini
000180254 700__ $$0241950$$g131602$$aVaudenay, Serge
000180254 7112_ $$dOctober 7-10, 2012$$cSantiago, Chile$$aInternational Conference on Cryptology and Information Security in Latin America Latincrypt 2012
000180254 720_1 $$aHevia, Alejandro$$eed.
000180254 720_1 $$aNeven, Gregory$$eed.
000180254 773__ $$tProgress in Cryptology – LATINCRYPT 2012$$q100-120
000180254 8564_ $$uhttps://infoscience.epfl.ch/record/180254/files/chp3A10.10072F978-3-642-33481-8_6.pdf$$zn/a$$s335396$$yn/a
000180254 909C0 $$xU10433$$0252183$$pLASEC
000180254 909CO $$qGLOBAL_SET$$pconf$$ooai:infoscience.tind.io:180254$$pIC
000180254 917Z8 $$x210384
000180254 917Z8 $$x210384
000180254 917Z8 $$x210384
000180254 917Z8 $$x210384
000180254 917Z8 $$x210384
000180254 937__ $$aEPFL-CONF-180254
000180254 973__ $$rREVIEWED$$sPUBLISHED$$aEPFL
000180254 980__ $$aCONF