Cryptographic protocol
A
security protocol (or
cryptographic protocol) is an abstract or concrete
protocol that performs a
security-related function and applies
cryptographic methods.
Cryptographic protocols are widely used for secure application-level data transport. A cryptographic protocol usually incorporates at least some of these aspects:
*
Key agreement or establishment
* Entity
authentication* Symmetric
encryption and message authentication
material construction
* Secured application-level data transport
*
Non-repudiation methods
For example,
Transport Layer Security (TLS) is a cryptographic protocol that is used to secure web (
HTTP) connections. It has an entity authentication mechanism, based on the
X.509 system; a key setup phase, where a
symmetric encryption key is formed by employing public-key cryptography; and an application-level data transport function. These three aspects have important interconnections. Standard TLS does not have non-repudiation support.
There are other types of cryptographic protocols as well, and even the term itself has various different readings; Cryptographic
application protocols often use one or more underlying
key agreement methods, which are also sometimes themselves referred to as "cryptographic protocols". For instance, TLS employs what is known as the
Diffie-Hellman key exchange, which although it is only a part of TLS
per se, Diffie-Hellman may be seen as a complete cryptographic protocol in itself for other applications.
Cryptographic protocols can sometimes be
verified formally on an abstract level.
A wide variety of cryptographic protocols go beyond the traditional goals of data confidentiality, integrity, and authentication to also secure a variety of other desired characteristics of computer-mediated collaboration.
Blind signatures can be used for digital cash and
digital credentials to prove that a person holds an attribute or right without revealing that person's identity or the identities of parties that person transacted with.
Secure digital time-stamping can be used to prove that data (even if confidential) existed at a certain time.
Secure multiparty computation can be used to compute answers (such as determining the highest bid in an auction) based on confidential data (such as private bids), so that when the protocol is complete the participants know only their own input and the answer.
Undeniable signatures include interactive protocols that allow the signer to prove a forgery and limit who can verify the signature.
Deniable encryption augments standard encryption by making it impossible for an attacker to mathematically prove the existence of a plaintext message.
Digital mixes create hard-to-trace communications.
*
Secure channel*
Secure protocols open repository
