This book is the most comprehensive and integrated treatment of the protocols required for authentication and key establishment. In a clear, uniform presentation the authors classify most protocols in terms of their properties and resource requirements, and describe all the main attack types, so the reader can quickly evaluate protocols for particular applications. In this edition the authors introduced new chapters and updated the text throughout in response to new developments and updated standards. The first chapter, an introduction to authentication and key establishment, provides the necessary background on cryptography, attack scenarios, and protocol goals. A new chapter, computational security models, describes computational models for key exchange and authentication and will help readers understand what a computational proof provides and how to compare the different computational models in use. In the subsequent chapters the authors explain protocols that use shared key cryptography, authentication and key transport using public key cryptography, key agreement protocols, the Transport Layer Security protocol, identity-based key agreement, password-based protocols, and group key establishment. The book is a suitable graduate-level introduction, and a reference and overview for researchers and practitioners with 225 concrete protocols described. In the appendices the authors list and summarize the relevant standards, linking them to the main book text when appropriate, and they offer a short tutorial on how to build a key establishment protocol. The book also includes a list of protocols, a list of attacks, a summary of the notation used in the book, general and protocol indexes, and an extensive bibliography. Front Matter ....Pages I-XXVIII Introduction to Authentication and Key Establishment (Colin Boyd, Anish Mathuria, Douglas Stebila)....Pages 1-52 Computational Security Models (Colin Boyd, Anish Mathuria, Douglas Stebila)....Pages 53-94 Protocols Using Shared Key Cryptography (Colin Boyd, Anish Mathuria, Douglas Stebila)....Pages 95-134 Authentication and Key Transport Using Public Key Cryptography (Colin Boyd, Anish Mathuria, Douglas Stebila)....Pages 135-164 Key Agreement Protocols (Colin Boyd, Anish Mathuria, Douglas Stebila)....Pages 165-240 Transport Layer Security Protocol (Colin Boyd, Anish Mathuria, Douglas Stebila)....Pages 241-288 Identity-Based Key Agreement (Colin Boyd, Anish Mathuria, Douglas Stebila)....Pages 289-327 Password-Based Protocols (Colin Boyd, Anish Mathuria, Douglas Stebila)....Pages 329-387 Group Key Establishment (Colin Boyd, Anish Mathuria, Douglas Stebila)....Pages 389-440 Back Matter ....Pages 441-521 Protocols for authentication and key establishment are the foundation for security of communications. The range and diversity of these protocols is immense, while the properties and vulnerabilities of different protocols can be remarkably subtle. Here is a comprehensive and integrated treatment of protocols for authentication and key establishment. It allows researchers and practitioners to quickly access a protocol for their needs and become aware of existing protocols that have been broken in the literature. As well as a clear and uniform presentation of the protocols, this book includes a description of all the main attack types and classifies most protocols in terms of their properties and resource requirements. It also includes tutorial material suitable for graduate students. Protocols for authentication and key establishment are the foundation for security of communications. The range and diversity of these protocols is immense, while the properties and vulnerabilities of different protocols can vary greatly. This is the first comprehensive and integrated treatment of these protocols. It allows researchers and practitioners to quickly access a protocol for their needs and become aware of existing protocols which have been broken in the literature. As well as a clear and uniform presentation of the protocols this book includes a description of all the main attack types and classifies most protocols in terms of their properties and resource requirements. It also includes tutorial material suitable for graduate students. "This book is the first comprehensive treatment of protocols for authentication and key establishment. It allows researchers and practitioners to quickly access a protocol for their needs and become aware of existing protocols that have been broken in the literature
