doi: 10.7763/IJCTE.2016.V8.1031
Network-Specific Attacks on Diffie-Hellman Key-Exchange in Commercial Protocols
- 1Department of Electronic Engineering, La Trobe University, Victoria 3086, Australia.
- 2Faculty of Business, Economics and Law, La Trobe University, Victoria 3086, Australia.
Abstract
An efficient and reliable key-establishment method is the most important building block of any secure cryptographic channels. Public-key cryptography was a revolution in cyber security key administration and enabled peers to dynamically create keys for each cryptographic session. The Diffie-Hellman (DH) algorithm is the first published public-key cryptosystem. DH and its variants are extensively investigated, standardized, and widely used in network security protocols. However, DH is vulnerable to some concerning mathematical, implementation-related and network-specific attacks. Defending against these attacks is important in secure implementation of DH in network protocols. This paper categorizes various attacks on DH scheme with focuses on attacks related to the DH integration in network protocols (referred as network-specific attacks). Furthermore, we comparatively review the approaches taken by commercial protocols to tackle network attacks and analyze the strength of these solutions.
Keywords
- Key-exchange
- DH
- ECDH
- MiTM
- DoS
- reply attack
- SSH
- ZRTP
- SSL/TLS
- IPsec
- IKEv2
How to Cite
Iraj Fathirad, John Devlin, and Sepidehsadat Atshani, "Network-Specific Attacks on Diffie-Hellman Key-Exchange in Commercial Protocols," International Journal of Computer Theory and Engineering, vol. 8, no. 2, pp. 129-135, 2016. https://doi.org/10.7763/IJCTE.2016.V8.1031
Copyright & License
Copyright © 2016 by the authors. This is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited (CC BY 4.0).