SKEME: a versatile secure key exchange mechanism for Internet

Author

Krawczyk, Hugo

Author_Institution

IBM Thomas J. Watson Res. Center, Yorktown Heights, NY, USA

fYear

1996

fDate

22-23 Feb 1996

Firstpage

114

Lastpage

127

Abstract

A secure and versatile key exchange protocol for key management over Internet is presented. SKEME constitutes a compact protocol that supports a variety of realistic scenarios and security models over Internet. It provides clear tradeoffs between security and performance as required by the different scenarios without incurring in unnecessary system complexity. The protocol supports key exchange based on public key, key distribution centers, or manual installation, and provides for fast and secure key refreshment. In addition, SKEME selectively provides perfect forward secrecy, allows for replaceability and negotiation of the underlying cryptographic primitives, and addresses privacy issues as anonymity and repudiatability

Keywords

Internet; access protocols; public key cryptography; Internet; SKEME; anonymity; cryptography; key distribution centers; performance; privacy issues; public key; repudiatability; secure key exchange mechanism; versatile key exchange protocol; Design engineering; Engineering management; Internet; Privacy; Protocols; Public key; Public key cryptography; Scalability; Security; Standards development;

fLanguage

English

Publisher

ieee

Conference_Titel

Network and Distributed System Security, 1996., Proceedings of the Symposium on

Conference_Location

San Diego, CA

Print_ISBN

0-8186-7222-6

Type

conf

DOI

10.1109/NDSS.1996.492418

Filename

492418