Introduction to Leakage-Resilient Authenticated Key Exchange Protocols and Their Applications
Hideki Imai, SeongHan Shin, Kazukuni Kobara · Information Security and Cryptology · 2008
Secure channels, indispensable to many applications, can be established by using an authenticated key exchange (AKE) protocol where the involving parties authenticate one another and then share authenticated session keys over insecure networks. In this paper, we introduce a new type of AKE protocols that are especially designed to minimize the damages caused by leakages of stored secrets. Such protocols are called Leakage-Resilient AKE (LR-AKE) protocols, whose motivation, design principles, several constructions, security analysis and applications are explained in detail.