A critical analysis and improvement of advanced access content system drive-host authentication. (26th February 2009)

• Record Type: Journal Article
• Authors: Sui, Jiayuan; Stinson, Douglas R.
• Is Part Of: International journal of applied cryptography. Volume 1:Number 3(2009)
• Page Start: 169
• Page End: 180
• Publication Date: 2009-02-26
• Subjects: AACS -- advanced access content systems -- key agreement -- mutual authentication -- cryptography -- unknown key-share attacks -- man-in-the-middle attacks -- MiMA -- security; Data encryption (Computer science) -- Periodicals; Cryptography -- Periodicals; Computer security -- Periodicals; 652.8
• Languages: English
• ISSNs: 1753-0563

Abstract

This article presents a critical analysis of the Advanced Access Content System drive-host authentication scheme. A few weaknesses are identified which could lead to various attacks on the scheme. In particular, we observe that the scheme is susceptible to unknown key-share and man-in-the-middle attacks. Modifications (based on the ISO and the SIGMA protocols) of the scheme are suggested in order to provide better security. A proof of security of the modified scheme based on the ISO protocol is also presented. The modified schemes achieve better efficiency than the original scheme.