Abstract

This paper describes a simple protocol, the Remotely Keyed Encryption Protocol (RKEP), that enables a secure, but bandwidth-limited, cryptographic smartcard to function as a highbandwidth secret-key encryption and decryption engine for an insecure, but fast, host processor. The host processor assumes most of the computational and bandwidth burden of each cryptographic operation without ever learning the secret key stored on the card. By varying the parameters of the protocol, arbitrary size blocks can be processed by the host with only a single small message exchange with the card and minimal card computation. RKEP works with any conventional block cipher and requires only standard ECB mode block cipher operations on the smartcard, permitting its implementation with off-the-shelf components. There is no storage overhead. Computational overhead is minimal, and includes the calculation of a cryptographic hash function as well as a conventional cipher function on the host processor. 1 In...

Citations

204	A Cryptographic File System for UNIX - Blaze - 1993
49	Privacy and authentication on a portable communications system - Beller, Chang, et al. - 1993
41	Security with low communication overhead - Beaver, Feigenbaum, et al.
6	Hiding instances in zero-knowledge proof systems - Beaver, Feigenbaum, et al. - 1990