ISO has been working on a multi-part authentication mechanisms standard for some years. The first part, ISO/IEC 9798-1 [15], has recently been published. Parts two and three (9798-2, [18] and 9798-3, [17]), covering authentication mechanisms based on symmetric and asymmetric cryptographic techniques respectively, are now moving towards DIS (Draft International Standard) and full International Standard status respectively. This paper is concerned with authentication mechanisms based on asymmetric cryptography; more specifically it contrasts two important authentication mechanisms from the latest version of 9798-3 and from CCITT Recommendation X.509-1988 [9], and briefly illustrates certain known attacks against this type of mechanism. A new potential security problem is then described, to which many published mechanisms appear to be prone. Possible solutions to this problem are discussed, together with potential ramifications on existing standardisation activity.
Get full access to this article
View all access options for this article.
References
1.
American National Standards Institute, New York. ANSI X3.92-1981, Data Encryption Algorithm, 1981.
2.
BauerR.K., BersonT.A., and FeiertagR.J.A key distribution protocol using event markers. ACM Transactions on Computer Systems, 1(3):249–255, 1983.
3.
BieberP.A logic of communication in hostile environment. In Proceedings: The Computer Security Foundations Workshop III, pages 14–22. IEEE Computer Society Press, Los Alamitos, California, June1990.
4.
BurrowsM., AbadiM., and NeedhamR.Authentication: A practical study in belief and action. In VardiM., editor, Proceedings of the Second Conference on Theoretical Aspects of Reasoning and Knowledge. Morgan Kaufmann, Los Altos, California, 1988.
5.
BurrowsM., AbadiM., and NeedhamR.A logic of authentication. In Proceedings of the Twelth ACM Symposium on Operating Systems Principles, Arizona, December 3-6, 1989. ACM, 1989.
6.
BurrowsM., AbadiM., and NeedhamR.A logic of authentication. Proceedings of the Royal Society of London, Series A, 426:233–271, 1989.
7.
BurrowsM., AbadiM., and NeedhamR.A logic of authentication. Technical Report 39, Digital Equipment Corporation Systems Research Center, Palo Alto, California, February1990. Revised version.
8.
Comité Consultatif International de Télégraphique et Téléphonique. CCITT Recommendation X.411-1988, Message Handling Systems: Message Transfer System: Abstract Service Definition and Procedures, 1988.
9.
Comité Consultatif International de Télégraphique et Téléphonique. CCITT Recommendation X.509-1988, The directory-Authentication framework, 1988.
10.
GaarderK. and SnekkenesE.On the formal analysis of PKCS authentication protocols. In SeberryJ. and PieprzykJ., editors, Advances in Cryptology: AUSCRYPT '90, pages 106–121, Sydney, Australia, 1990. Springer-Verlag, Berlin.
11.
GongL.Handling infeasible specifications of cryptographic protocols. In Proceedings: The Computer Security Foundations Workshop IV, pages 99–102. IEEE Computer Society Press, Los Alamitos, California, June1991.
12.
GongL.A security risk of depending on synchronised clocks. ACM Operating Systems Review, 26(1):49–53, January1992.
13.
GongL., NeedhamR., and YahalomR.Reasoning about belief in cryptographic protocols. In Proceedings: 1990 IEEE Computer Society Symposium on Research in Security and Privacy, pages 234–248. IEEE Computer Society Press, Los Alamitos, California, 1990.
14.
I'AnsonC. and MitchellC.J.Security defects in CCITT recommendation X.509 the directory authentication framework. ACM Computer Communication Review, 20(2):30–34, 1990.
15.
International Organization for Standardization, Genève, Switzerland. ISO/IEC 9798-1: 1991, Information Technology-Security techniques-Entity authentication mechanisms-Part 1: General model, 1991.
16.
International Organization for Standardization, Genève, Switzerland. ISO/IEC JTC1/SC27 N313 (1991-10-02), Summary of voting on Letter Ballot No. 6, document SC27 N277, CD9798-3.3 "Entity authentication mechanisms, Part 3: Entity authentication using a public key algorithm", October1991.
17.
International Organization for Standardization, Genève, Switzerland. ISO/IEC JTC1/SC27 N497 (1992-07-06), Revised text of CD 9798-3.4 'Entity authentication mechanisms, Part 3: Entity authentication using a public key algorithm', submitted for DIS processing, July1992.
18.
International Organization for Standardization, Genève, Switzerland. ISO/IEC JTC1/SC27 N584 Rev (1992-11-10), ISO/IEC 4th CD 9798-2, Information technology-Security techniques-Entity authentication mechanisms-Part 2: Entity authentication using symmetric techniques, November1992.
19.
KailarR. and GligorV.D.On belief evolution in authentication protocols. In Proceedings: The Computer Security Foundations Workshop IV, pages 103–116. IEEE Computer Society Press, Los Alamitos, California, June1991.
20.
LamK.-Y.Building authentication services for distributed systems. Journal of Computer Security, to appear.
21.
MeadowsC.Using narrowing in the analysis of key management protocols. In Proceedings: 1989 IEEE Computer Society Symposium on Security and Privacy, pages 138–147. IEEE Computer Society Press, Los Alamitos, California, May1989.
22.
MeadowsC.Representing partial knowledge in an algebraic security model. In Proceedings: The Computer Security Foundations Workshop III, pages 23–31. IEEE Computer Society Press, Los Alamitos, California, June1990.
23.
MeadowsC.A system for the specification and analysis of key management protocols. In Proceedings: 1991 IEEE Computer Society Symposium on Research in Security and Privacy, pages 182–195. IEEE Computer Society Press, Los Alamitos, California, 1991.
24.
MeadowsC.Applying formal methods to the analysis of a key management protocol. Journal of Computer Security, 1:5–35, 1992.
25.
MitchellC.J., PiperF.C., and WildP.R.Digital signatures. In SimmonsG.J., editor, Contemporary cryptology: The science of information integrity, pages 325–378. IEEE Press, 1992.
26.
MitchellC.J., RushP.D.C., and WalkerM.A secure messaging architecture implementing the X.400-1988 security features. The Computer Journal, 33:290–295, 1990.
27.
MitchellC.J., WalkerM., and RushP.D.C.CCITT/ISO standards for secure message handling. IEEE Journal on Selected Areas in Communications, 7:517–524, 1989.
28.
National Institute of Standards and Technology (NIST), Gaithersburg, MD. A proposed Federal Information Processing Standard for Digital Signature Standard (DSS), August1991.
29.
National Technical Information Service, Springfield, Va. National Bureau of Standards (NBS) Federal Information Processing Standards (FIPS) Publication 46-Data Encryption Standard (DES), April1977.
30.
NeedhamR.M. and SchroederM.D.Using encryption for authentication in large networks of computers. Communications of the ACM, 21:993–999, 1978.
31.
PopekG.J. and KlineC.S.Encryption and secure computer networks. Computing Surveys, 11:331–356, 1979.
32.
SmidM.E.Integrating the Data Encryption Standard into computer networks. IEEE Transactions on Communications, COM-29:762–772, 1981.
33.
SnekkenesE.Exploring the BAN approach to protocol analysis. In Proceedings: 1991 IEEE Computer Society Symposium on Research in Security and Privacy, pages 171–181. IEEE Computer Society Press, Los Alamitos, California, May1991.
34.
SteinerJ.G., NeumanC., and SchillerJ.I.Kerberos: an authentication service for open network systems. In Proceedings: Usenix Association, Winter Conference, Dallas1988, pages 191–202. USENIX Association, Berkeley, California, February 1988.
35.
SyversonP.Formal semantics for logics of cryptographic protocols. In Proceedings: The Computer Security Foundations Workshop III, pages 32–41. IEEE Computer Society Press, Los Alamitos, California, June1990.
36.
SyversonP.The use of logic in the analysis of cryptographic protocols. In Proceedings: 1991 IEEE Computer Society Symposium on Research in Security and Privacy, pages 156–170. IEEE Computer Society Press, Los Alamitos, California, May1991.
37.
TardoJ.J. and AlagappanK.SPX: Global authentication using public key certificates. In Proceedings: 1991 IEEE Computer Society Symposium on Research in Security and Privacy, pages 232–244. IEEE Computer Society Press, Los Alamitos, California, May1991.
