Active Trial-and-error Attack on SASC Protocols (2006)
BibTeX
@MISC{Kim06activetrial-and-error,
author = {Heeyoul Kim and Younho Lee and Seong-Min Hong and Hyunsoo Yoon},
title = {Active Trial-and-error Attack on SASC Protocols },
year = {2006}
}
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
SASC (Server-Aided Secret Computation) protocols enable a client (a smart card) to borrow computing power from a server (e.g., an untrustworthy auxiliary device like an ATM) without revealing its secret information. In this paper, we propose a new active attack on server-aided secret computation protocols. We describe our attack by using Beguin and Quisquater’s protocol. (We modify the protocol in order to immunize it against Nguyen and Stern’s lattice reduction attack.) The proposed attack re-+ pP, where 0 < p < 1. It duces the search space P to 1 p is 2 √ P for optimal p. Practically, it effectively threatens SASC protocols because an attacker can choose an appropriate value p according to the situation. Therefore, the security parameters in the existing SASC protocols must be reconsidered.
