{"id":"https://openalex.org/W7043566566","doi":null,"title":"On the security of key exchange protocols","display_name":"On the security of key exchange protocols","publication_year":2011,"publication_date":"2011-01-01","ids":{"openalex":"https://openalex.org/W7043566566"},"language":"en","primary_location":{"id":"pmh:hdl:10068/995175","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/10068/995175","pdf_url":null,"source":{"id":"https://openalex.org/S4377196900","display_name":"OpenGrey (Institut de l'Information Scientifique et Technique)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1295345811","host_organization_name":"Institut de l'Information Scientifique et Technique","host_organization_lineage":["https://openalex.org/I1295345811"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"U - Thesis"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/10068/995175","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102033104","display_name":"Stephen C. Williams","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Williams, Stephen C","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5102033104"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.6205999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.6205999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.3666999936103821,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10020","display_name":"Quantum Information and Cryptography","score":0.002899999963119626,"subfield":{"id":"https://openalex.org/subfields/3107","display_name":"Atomic and Molecular Physics, and Optics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/key-agreement-protocol","display_name":"key exchange","score":0.996999979019165},{"id":"https://openalex.org/keywords/composability","display_name":"composability","score":0.9369999766349792},{"id":"https://openalex.org/keywords/bellare-rogaway-model","display_name":"Bellare-Rogaway model","score":0.8270000219345093},{"id":"https://openalex.org/keywords/ssh-protocol","display_name":"SSH protocol","score":0.7080000042915344},{"id":"https://openalex.org/keywords/diffie-hellman-key-exchange","display_name":"Diffie-Hellman key exchange","score":0.9190000295639038},{"id":"https://openalex.org/keywords/indistinguishability","display_name":"indistinguishability","score":0.6679999828338623}],"concepts":[{"id":"https://openalex.org/C2778814252","wikidata":"https://www.wikidata.org/wiki/Q5156715","display_name":"Composability","level":2,"score":0.8429999947547913},{"id":"https://openalex.org/C165751822","wikidata":"https://www.wikidata.org/wiki/Q7894118","display_name":"Universal composability","level":4,"score":0.7541000247001648},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.748199999332428},{"id":"https://openalex.org/C99674996","wikidata":"https://www.wikidata.org/wiki/Q1414155","display_name":"Key exchange","level":4,"score":0.7178000211715698},{"id":"https://openalex.org/C2777572472","wikidata":"https://www.wikidata.org/wiki/Q4825878","display_name":"Authenticated Key Exchange","level":5,"score":0.6011000275611877},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5952000021934509},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5641999840736389},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5217000246047974},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.4657999873161316},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.44440001249313354},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.4424000084400177},{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.4332999885082245},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.40709999203681946},{"id":"https://openalex.org/C154504017","wikidata":"https://www.wikidata.org/wiki/Q853614","display_name":"Identifier","level":2,"score":0.37470000982284546},{"id":"https://openalex.org/C191197275","wikidata":"https://www.wikidata.org/wiki/Q1755775","display_name":"Session key","level":3,"score":0.36149999499320984},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.31779998540878296},{"id":"https://openalex.org/C205009425","wikidata":"https://www.wikidata.org/wiki/Q935662","display_name":"Forward secrecy","level":4,"score":0.3091999888420105},{"id":"https://openalex.org/C160333310","wikidata":"https://www.wikidata.org/wiki/Q6398153","display_name":"Key distribution","level":4,"score":0.30090001225471497},{"id":"https://openalex.org/C2778355321","wikidata":"https://www.wikidata.org/wiki/Q17079427","display_name":"Identity (music)","level":2,"score":0.29989999532699585},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.2856000065803528},{"id":"https://openalex.org/C130881749","wikidata":"https://www.wikidata.org/wiki/Q586894","display_name":"Security association","level":5,"score":0.2840000092983246},{"id":"https://openalex.org/C143273055","wikidata":"https://www.wikidata.org/wiki/Q2382794","display_name":"Delegate","level":2,"score":0.28119999170303345},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.27149999141693115},{"id":"https://openalex.org/C17886624","wikidata":"https://www.wikidata.org/wiki/Q1320561","display_name":"Key management","level":3,"score":0.2630999982357025},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.2578999996185303},{"id":"https://openalex.org/C126266803","wikidata":"https://www.wikidata.org/wiki/Q7074169","display_name":"Oakley protocol","level":5,"score":0.2558000087738037}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:hdl:10068/995175","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/10068/995175","pdf_url":null,"source":{"id":"https://openalex.org/S4377196900","display_name":"OpenGrey (Institut de l'Information Scientifique et Technique)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1295345811","host_organization_name":"Institut de l'Information Scientifique et Technique","host_organization_lineage":["https://openalex.org/I1295345811"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"U - Thesis"}],"best_oa_location":{"id":"pmh:hdl:10068/995175","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/10068/995175","pdf_url":null,"source":{"id":"https://openalex.org/S4377196900","display_name":"OpenGrey (Institut de l'Information Scientifique et Technique)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1295345811","host_organization_name":"Institut de l'Information Scientifique et Technique","host_organization_lineage":["https://openalex.org/I1295345811"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"U - Thesis"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W1981449595","https://openalex.org/W2949451021","https://openalex.org/W1950115429","https://openalex.org/W2399996762","https://openalex.org/W7101199052","https://openalex.org/W2583131896","https://openalex.org/W2949365815","https://openalex.org/W1505522548","https://openalex.org/W7099372717","https://openalex.org/W2325215781"],"abstract_inverted_index":{"This":[0,119],"thesis":[1],"is":[2,162,303,316,326,367],"primarily":[3],"concerned":[4],"with":[5,95,206],"the":[6,21,46,57,80,111,139,165,173,184,216,219,232,235,244,249,257,263,283,293,298,307,330,348,360,370],"security":[7,148,182,217,290,349],"of":[8,56,83,116,175,179,218,226,256,282,292,297,309,337,354],"key":[9,63,75,151,200,258,294,315,321,363],"exchange":[10,64,76,152,201,259,295],"protocols.":[11,153,180],"Specifically,":[12],"we":[13,37,51,70,89,105,144,187,196,287],"consider":[14],"composability":[15,72,192],"properties":[16,73],"for":[17,74,150,172,234,248],"such":[18],"protocols":[19,77,98],"within":[20],"tradi-":[22],"tional":[23],"game-based":[24],"framework.":[25],"Our":[26,301],"composition":[27],"results":[28],"are":[29,135,237,251,266],"distinguished":[30],"from":[31,253],"virtually":[32],"all":[33],"existing":[34],"work":[35],"as":[36],"do":[38],"not":[39,368],"rely,":[40],"neither":[41],"directly":[42],"nor":[43],"indirectly,":[44],"on":[45],"simulation":[47],"paradigm.":[48],"In":[49,194],"addition":[50],"provide":[52,288],"a":[53,67,146,176,199,279,289,312,319,324],"formal":[54],"analysis":[55,174,281,291],"widely":[58],"deployed":[59],"SSH":[60,299,366],"pro-":[61],"tocol's":[62],"mechanism.":[65],"As":[66],"first":[68],"step,":[69],"show":[71,90,197,357],"secure":[78],"in":[79,183],"prevalent":[81],"model":[82],"Bellare":[84],"and":[85,169,268,305],"Rogaway.":[86],"Roughly":[87],"speaking,":[88],"these":[91],"may":[92],"be":[93,129,203,222,275],"composed":[94,205,284],"arbitrary":[96],"two-party":[97],"that":[99,186,198,225,262,346,358],"require":[100],"symmetrically":[101],"distributed":[102],"keys.":[103,377],"Here,":[104],"use":[106],"session":[107],"identifiers":[108],"derived":[109],"by":[110,334,351,365],"protocol":[112,220],"to":[113,121,131,224,328],"define":[114,188,340],"notions":[115],"partner":[117],"sessions.":[118],"leads":[120],"an":[122],"interesting":[123],"technical":[124],"requirement,":[125],"namely,":[126],"it":[127],"should":[128,274],"possible":[130],"determine":[132],"which":[133],"sessions":[134],"partnered":[136],"given":[137],"only":[138],"publicly":[140],"available":[141],"information.":[142],"Next,":[143,323],"propose":[145],"new":[147],"definition":[149],"The":[154],"defini-":[155],"tion":[156],"offers":[157],"two":[158,211,264],"important":[159],"benefits.":[160],"It":[161],"weaker":[163],"than":[164,277],"more":[166],"established":[167,344],"ones":[168],"thus":[170],"allows":[171],"larger":[177],"class":[178],"Furthermore,":[181],"sense":[185],"enjoys":[189],"rather":[190],"general":[191],"properties.":[193],"essence,":[195],"can":[202,221,242],"securely":[204],"some":[207,227],"other":[208],"protocol,":[209],"provided":[210,350],"main":[212],"requirements":[213],"hold.":[214],"First,":[215,311],"reduced":[223],"primitive,":[228],"no":[229,240],"matter":[230],"how":[231],"keys":[233,247,332],"primitive":[236,245,250],"distributed.":[238],"Secondly,":[239],"adversary":[241],"break":[243],"when":[246],"obtained":[252,317],"execu-":[254],"tions":[255],"protocol.":[260,285,300],"Proving":[261],"conditions":[265],"satisfied,":[267],"then":[269,372],"applying":[270],"our":[271],"generic":[272],"theorem,":[273],"simpler":[276],"performing":[278],"monolithic":[280],"Finally,":[286],"stage":[296],"proof":[302],"modular,":[304],"exploits":[306],"design":[308],"SSH.":[310,338],"shared":[313,361],"secret":[314,362],"via":[318],"Diffie-Hellman":[320],"exchange.":[322],"transform":[325],"applied":[327,373],"obtain":[329],"application":[331,376],"used":[333],"later":[335],"stages":[336],"We":[339,356],"models,":[341],"following":[342],"well-":[343],"paradigms,":[345],"clarify":[347],"each":[352],"type":[353],"key.":[355],"although":[359],"exchanged":[364],"indistinguishable,":[369],"transformation":[371],"yields":[374],"indistinguishable":[375]},"counts_by_year":[],"updated_date":"2026-10-14T16:39:01.820549","created_date":"2025-10-10T00:00:00"}
