How to detect unauthorised usage of a key.
Jiangshan Yu, Mark David Ryan, Cas J. F. Cremers · 2015
Encryption is useful only if the decryption key has not been exposed to adversaries; in particular, it requires that the device performing the crypto operations is free of mal-ware. We explore ways in which some security guarantees can be achieved even if an attacker has succeeded in ob-taining access to all the keys in a device, e.g. by exploiting software vulnerabilities. We develop a new protocol concept that allows the device owner to detect if another party is using the device’s long-term key. We achieve this by making it necessary for uses of the key to be inserted in an append-only log, which the de-vice owner can interrogate. We propose a multi-device mes-saging protocol that exploits our concept to allow users to detect unauthorised usage of their device keys. We prove the main properties of our protocol using the Tamarin prover. The methods we introduce are not intended to replace existing methods used to keep keys safe (such as hardware devices or careful procedures). Rather, our methods provide a useful and effective additional layer of security. 1.