This book is the most comprehensive and integrated treatment of the protocols required for authentication and key establishment. In a clear, uniform presentation the authors classify most protocols in terms of their properties and resource requirements, and describe all the main attack types, so the reader can quickly evaluate protocols for particular applications.

In this edition the authors introduced new chapters and updated the text throughout in response to new developments and updated standards. The first chapter, an introduction to authentication and key establishment, provides the necessary background on cryptography, attack scenarios, and protocol goals. A new chapter, computational security models, describes computational models for key exchange and authentication and will help readers understand what a computational proof provides and how to compare the different computational models in use. In the subsequent chapters the authors explain protocols that use shared key cryptography, authentication and key transport using public key cryptography, key agreement protocols, the Transport Layer Security protocol, identity-based key agreement, password-based protocols, and group key establishment.

The book is a suitable graduate-level introduction, and a reference and overview for researchers and practitioners with 225 concrete protocols described. In the appendices the authors list and summarize the relevant standards, linking them to the main book text when appropriate, and they offer a short tutorial on how to build a key establishment protocol. The book also includes a list of protocols, a list of attacks, a summary of the notation used in the book, general and protocol indexes, and an extensive bibliography.

Autorentext

Colin Boyd is a professor in the Department of Information Security and Communication Technology at the Norwegian University of Science and Technology (NTNU) in Trondheim; he previously held faculty positions at Queensland University of Technology (QUT) and the University of Manchester. Anish Mathuria is a professor at the Dhirubhai Ambani Institute of Information and Communication Technology (DA-IICT) in Gandhinagar. Douglas Stebila is an associate professor in the Department of Combinatorics & Optimization at the University of Waterloo.

Inhalt

Introduction to Authentication and Key Establishment.- Computational Security Models.- Protocols Using Shared Key Cryptography.- Authentication and Key Transport Using Public Key Cryptography.- Key Agreement Protocols.- Transport Layer Security Protocol.- Identity-Based Key Agreement.- Password-Based Protocols.- Group Key Establishment.- App. A, Standards for Authentication and Key Establishment.- App. B, Tutorial: Building a Key Establishment Protocol.- App. C, Summary of Notation.