On the separation between the FHMQV and HMQV protocols. (2017)

• Record Type: Journal Article
• Authors: Sarr, Augustin P.; Elbaz-Vincent, Philippe
• Is Part Of: International journal of applied cryptography. Volume 3:Number 4(2017)
• Page Start: 377
• Page End: 393
• Publication Date: 2017
• Subjects: authenticated key exchange -- FHMQV -- HMQV -- key compromise impersonation -- KCI attack -- security model; Data encryption (Computer science) -- Periodicals; Cryptography -- Periodicals; Computer security -- Periodicals; 652.8
• Languages: English
• ISSNs: 1753-0563

Abstract

The HMQV protocol is under consideration for IEEE P1363 standardisation. We provide a complementary analysis of the HMQV(-C) protocol. Namely, we point out a key compromise impersonation and a man-in-the-middle attack in the case of a static private key leakage, showing that the HMQV(-C) protocols cannot achieve their security goals. Next, we revisit the FHMQV building blocks, design and security arguments. We clarify the security and efficiency separation between HMQV and FHMQV, showing the advantages of FHMQV over HMQV.