Note on Subversion-Resilient Key Exchange

ePrint Report: Note on Subversion-Resilient Key Exchange

Magnus Ringerud

In this work, we set out to create a subversion resilient authenticated key exchange protocol. The first step was to design a meaningful security model for this primitive, and our goal was to avoid using building blocks like reverse firewalls and public watchdogs. We wanted to exclude these kinds of tools because we desired that our protocols to be self contained in the sense that we could prove security without relying …

design eprint report exchange firewalls key meaningful protocol public report reverse security subversion work