On the difficulty of protecting private keys in software

Taekyoung Kwon

doi:10.1007/3-540-45811-5_2

On the difficulty of protecting private keys in software

Taekyoung Kwon

Graduate School of Information

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

1 Citation (Scopus)

Abstract

This paper makes simple observation on security of the networked cryptographic device resilient to capture that was developed to protect user’s private keys by software-only techniques. That scheme provided valuable features for secure generation of digital signatures or decryption of messages in a way of retaining a password-protected private key in a user-controlled device. The key idea was to exploit network connectivity rather than tamper-resistance of the device for securing the private key in software. However, we have found a few weak points that are not negligible in some sense. It was difficult to protect the private key in software even with provable security. So, we will describe such difficulties and provide possible solutions in this paper. Also the networked cryptographic devices will be augmented in that fashion.

Original language	English
Title of host publication	Information Security - 5th International Conference, ISC 2002, Proceedings
Editors	Agnes Hui Chan, Virgil Gligor
Publisher	Springer Verlag
Pages	17-31
Number of pages	15
ISBN (Print)	3540442707, 9783540442707
DOIs	https://doi.org/10.1007/3-540-45811-5_2
Publication status	Published - 2002
Event	5th International Conference on Information Security, ISC 2002 - Sao Paulo, Brazil Duration: 2002 Sept 30 → 2002 Oct 2

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	2433
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Other

Other	5th International Conference on Information Security, ISC 2002
Country/Territory	Brazil
City	Sao Paulo
Period	02/9/30 → 02/10/2

Bibliographical note

Publisher Copyright:
© Springer-Verlag Berlin Heidelberg 2002.

All Science Journal Classification (ASJC) codes

Theoretical Computer Science
Computer Science(all)

Access to Document

10.1007/3-540-45811-5_2

Cite this

Kwon, T. (2002). On the difficulty of protecting private keys in software. In A. H. Chan, & V. Gligor (Eds.), Information Security - 5th International Conference, ISC 2002, Proceedings (pp. 17-31). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 2433). Springer Verlag. https://doi.org/10.1007/3-540-45811-5_2

@inproceedings{1eb30de053ed442c9d6f4f77dbe2a506,

title = "On the difficulty of protecting private keys in software",

abstract = "This paper makes simple observation on security of the networked cryptographic device resilient to capture that was developed to protect user{\textquoteright}s private keys by software-only techniques. That scheme provided valuable features for secure generation of digital signatures or decryption of messages in a way of retaining a password-protected private key in a user-controlled device. The key idea was to exploit network connectivity rather than tamper-resistance of the device for securing the private key in software. However, we have found a few weak points that are not negligible in some sense. It was difficult to protect the private key in software even with provable security. So, we will describe such difficulties and provide possible solutions in this paper. Also the networked cryptographic devices will be augmented in that fashion.",

author = "Taekyoung Kwon",

note = "Publisher Copyright: {\textcopyright} Springer-Verlag Berlin Heidelberg 2002.; 5th International Conference on Information Security, ISC 2002 ; Conference date: 30-09-2002 Through 02-10-2002",

year = "2002",

doi = "10.1007/3-540-45811-5_2",

language = "English",

isbn = "3540442707",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer Verlag",

pages = "17--31",

editor = "Chan, {Agnes Hui} and Virgil Gligor",

booktitle = "Information Security - 5th International Conference, ISC 2002, Proceedings",

address = "Germany",

}

Kwon, T 2002, On the difficulty of protecting private keys in software. in AH Chan & V Gligor (eds), Information Security - 5th International Conference, ISC 2002, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 2433, Springer Verlag, pp. 17-31, 5th International Conference on Information Security, ISC 2002, Sao Paulo, Brazil, 02/9/30. https://doi.org/10.1007/3-540-45811-5_2

On the difficulty of protecting private keys in software. / Kwon, Taekyoung.
Information Security - 5th International Conference, ISC 2002, Proceedings. ed. / Agnes Hui Chan; Virgil Gligor. Springer Verlag, 2002. p. 17-31 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 2433).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - On the difficulty of protecting private keys in software

AU - Kwon, Taekyoung

N1 - Publisher Copyright: © Springer-Verlag Berlin Heidelberg 2002.

PY - 2002

Y1 - 2002

N2 - This paper makes simple observation on security of the networked cryptographic device resilient to capture that was developed to protect user’s private keys by software-only techniques. That scheme provided valuable features for secure generation of digital signatures or decryption of messages in a way of retaining a password-protected private key in a user-controlled device. The key idea was to exploit network connectivity rather than tamper-resistance of the device for securing the private key in software. However, we have found a few weak points that are not negligible in some sense. It was difficult to protect the private key in software even with provable security. So, we will describe such difficulties and provide possible solutions in this paper. Also the networked cryptographic devices will be augmented in that fashion.

AB - This paper makes simple observation on security of the networked cryptographic device resilient to capture that was developed to protect user’s private keys by software-only techniques. That scheme provided valuable features for secure generation of digital signatures or decryption of messages in a way of retaining a password-protected private key in a user-controlled device. The key idea was to exploit network connectivity rather than tamper-resistance of the device for securing the private key in software. However, we have found a few weak points that are not negligible in some sense. It was difficult to protect the private key in software even with provable security. So, we will describe such difficulties and provide possible solutions in this paper. Also the networked cryptographic devices will be augmented in that fashion.

UR - http://www.scopus.com/inward/record.url?scp=84945318333&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84945318333&partnerID=8YFLogxK

U2 - 10.1007/3-540-45811-5_2

DO - 10.1007/3-540-45811-5_2

M3 - Conference contribution

AN - SCOPUS:84945318333

SN - 3540442707

SN - 9783540442707

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 17

EP - 31

BT - Information Security - 5th International Conference, ISC 2002, Proceedings

A2 - Chan, Agnes Hui

A2 - Gligor, Virgil

PB - Springer Verlag

T2 - 5th International Conference on Information Security, ISC 2002

Y2 - 30 September 2002 through 2 October 2002

ER -

Kwon T. On the difficulty of protecting private keys in software. In Chan AH, Gligor V, editors, Information Security - 5th International Conference, ISC 2002, Proceedings. Springer Verlag. 2002. p. 17-31. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/3-540-45811-5_2

On the difficulty of protecting private keys in software

Abstract

Publication series

Other

Bibliographical note

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this