Mathematical Foundations and Implementation of CONIKS Key Transparency
Source abstract
Abstract
This research paper explores the CONIKS key management system’s security and efficiency, a system designed to ensure transparency and privacy in cryptographic operations. We conducted a comprehensive analysis of the underlying mathematical principles, focusing on cryptographic hash functions and digital signature schemes, and their implementation in the CONIKS model. Through the use of Merkle trees, we verified the integrity of the system, while zero-knowledge proofs were utilized to ensure the confidentiality of key bindings. We conducted experimental evaluations to measure the performance of cryptographic operations like key generation, signing, and verification with varying key sizes and compared the results against theoretical expectations. Our findings demonstrate that the system performs as predicted by cryptographic theory, with only minor deviations in computational time complexities. The analysis also reveals significant trade-offs between security and efficiency, particularly when larger key sizes are used. These results confirm that the CONIKS system offers a robust framework for secure and efficient key management, highlighting its potential for real-world applications in secure communication systems.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Cryptography and Data Security · Security in Wireless Sensor Networks · Advanced Steganography and Watermarking Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Faculty of Management Information Systems, Kadir Has University, Istanbul 34083l, Turkey
Faculty of Information Sciences and Computer Engineering, 1000 Skopje, North Macedonia
Funding
European Union in the Framework of ERASMUS MUNDUS Project CyberMASC
References (20)
Show source-provided references
1. Shoup, V. (2000, January 1–4). On Fast Modular Exponentiation. Proceedings of the 7th ACM Conference on Computer and Communications Security, Athens, Greece.
2. Merkle Tree Proofs: Algorithms and Security
3. Katz, J., and Lindell, Y. (2020). Introduction to Modern Cryptography: Principles and Protocols, CRC Press.10.1201/9781351133036 ↗
4. Dolev, D., and Yao, A.C. (1983, January 7–9). On the Security of Public Key Protocols. Proceedings of the 22nd Annual Symposium on Foundations of Computer Science, Washington, DC, USA.
5. Langford. Telling Humans and Computers Apart (Automatically)
6. Yilek, S., Miers, I., and Green, M. (2016, January 22–26). Auditable, Privacy-Preserving Key Directory. Proceedings of the IEEE Symposium on Security and Privacy, San Jose, CA, USA.
7. Chase, M., and Meiklejohn, S. (2016, January 4–8). Transparency Logs. Proceedings of the International Conference on the Theory and Application of Cryptology and Information Security, Hanoi, Vietnam.
8. Algorithm for Key Transparency with Transparent Logs10.12688/openreseurope.18200.2 ↗
9. Cooper, D.A., and Kent, S. (2002, January 6–8). Explicit Trust-Path Building in PGP. Proceedings of the Network and Distributed System Security Symposium (NDSS), San Diego, CA, USA.
10. Szalachowski, P., Perrig, A., and Chuat, L. (2016, January 22–26). PISCES: Anonymous Communication Using Trust and Transparency. Proceedings of the IEEE Symposium on Security and Privacy, San Jose, CA, USA.
11. Distributed Key Generation for Discrete-Log Based Cryptosystems
12. Dworkin, M. (2007). SHA-3 Standard: Permutation-Based Hash and Extendable-Output Functions.
13. A Digital Signature Scheme Secure Against Adaptive Chosen-Message Attacks10.1137/0217017 ↗
14. Efficient Signature Generation by Smart Cards10.1007/BF00196725 ↗
15. NIST (2019). NIST Special Publication 800-63B: Digital Identity Guidelines.
16. Gong, L. (2004, January 11–13). A Survey of Key Management and Key Exchange Techniques. Proceedings of the 2004 IEEE International Conference on Computer Communications and Networks, Chicago, IL, USA.
17. Enhancing Cryptographic Key Management with Transparent Logs
18. Wang, Y., and Li, C. (2017, January 19–20). Performance Evaluation of Cryptographic Algorithms for Data Security. Proceedings of the 2017 International Conference on Cyber Security and Protection of Digital Services, London, UK.
19. Laurie, B., Langley, A., and Kasper, E. (2013). Certificate Transparency, Internet Engineering Task Force.10.17487/rfc6962 ↗
20. Melara, M., Blankstein, A., Bonneau, J., Felten, E.W., and Freedman, M.J. (2015, January 12–14). CONIKS: Bringing Key Transparency to End Users. Proceedings of the 24th USENIX Security Symposium, Washington, DC, USA.