2002 · 111 citations · 14 references
ComputingComputer EngineeringComputer ScienceAuthenticationCryptographySecurity ProtocolsAuthenticated EncryptionAuthentication ProtocolsCryptographic AlgorithmsCryptographic Protocol DesignCryptographic ProtocolsPrivacy-preserving ProtocolsAuthenticated Encryption ImplementationAuthenticated Encryption SchemesEncryptionEncryption ProtocolsIntegrityPrivacy-preserving CryptographySecure ShellSecure Shell (Ssh)
The Secure Shell (SSH) protocol is one of the most popular cryptographic protocols on the Internet. Unfortunately, the current SSH authenticated encryption mechanism is insecure. In this paper we propose several fixes to the SSH protocol and, using techniques from modern cryptography, we prove that our modified versions of SSH meet strong new chosen-ciphertext privacy and integrity requirements. Furthermore, our proposed fixes will require relatively little modification to the SSH protocol or to SSH implementations. We believe that our new notions of privacy and integrity for encryption schemes with stateful decryption algorithms will be of independent interest.
14
Shafi Goldwasser, Silvio Micali · Journal of Computer and System Sciences · 1984 · 2.6K citations
Proceedings of the 11th USENIX Security Symposium
Dan Boneh · 2002 · 2.5K citations
A concrete security treatment of symmetric encryption
Mihir Bellare, Anand Desai, E. Jokipii et al. · 2002 · 925 citations