Attacking the IETF/ISO Standard for Internal Re-keying CTR-ACPKM

ePrint Report: Attacking the IETF/ISO Standard for Internal Re-keying CTR-ACPKM

Orr Dunkelman, Shibam Ghosh, Eran Lambooij

Encrypting too much data using the same key is a bad practice from a security perspective. Hence, it is customary to perform re-keying after a given amount of data is transmitted. While in many cases, the re-keying is done using a fresh execution of some key exchange protocol (e.g., in IKE or TLS), there are scenarios where internal re-keying, i.e., without exchange of information, …

bad cases ctr data eprint report exchange ike internal iso key perspective practice protocol report security standard tls