A copy of this work was available on the public web and has been preserved in the Wayback Machine. The capture dates from 2012; you can also visit the original URL.
The file type is application/pdf
.
Comparing SessionStateReveal and EphemeralKeyReveal for Diffie-Hellman Protocols
[chapter]
2009
Lecture Notes in Computer Science
Both the "eCK" model, by LaMacchia, Lauter and Mityagin, and the "CK01" model, by Canetti and Krawczyk, address the effect of leaking session specific ephemeral data on the security of key establishment schemes. The CK01-adversary is given a SessionStateReveal query to learn session specific private data defined by the protocol specification, whereas the eCK-adversary is equipped with an EphemeralKeyReveal query to access all ephemeral private input required to carry session computations.
doi:10.1007/978-3-642-04642-1_16
fatcat:o5fadgsmezbm5ehtdaofpwmnx4