On the security of RSA encryption in TLS (2002)
| Venue: | In Moti Yung, editor, Advances in Cryptology—CRYPTO 2002 |
| Citations: | 5 - 0 self |
BibTeX
@INPROCEEDINGS{Jonsson02onthe,
author = {Jakob Jonsson and Burton S. Kaliski},
title = {On the security of RSA encryption in TLS},
booktitle = {In Moti Yung, editor, Advances in Cryptology—CRYPTO 2002},
year = {2002},
pages = {127--142},
publisher = {Springer-Verlag}
}
OpenURL
Abstract
Abstract. We show that the security of the TLS handshake protocol based on RSA can be related to the hardness of inverting RSA given a certain “partial-RSA ” decision oracle. The reduction takes place in a security model with reasonable assumptions on the underlying TLS pseudo-random function, thereby addressing concerns about its construction in terms of two hash functions. The result is extended to a wide class of constructions that we denote tagged key-encapsulation mechanisms. Keywords: key encapsulation, RSA encryption, TLS. 1







