arXiv:quant-ph/0407131 · International Journal of Quantum Information

A NOVEL PROTOCOL-AUTHENTICATION ALGORITHM RULING OUT A MAN-IN-THE MIDDLE ATTACK IN QUANTUM CRYPTOGRAPHY

Momtchil Peev, Michael Nölle, O. Maurhardt, Thomas Lorünser, M. SUDA, Andreas Poppe, Rupert Ursin, Alessandro Fedrizzi, Anton Zeilinger

Published Dec 16, 2004• 36 citations

arXiv HTML PDF

Abstract

In this work we review the security vulnerability of quantum cryptography with respect to "man-in-the-middle attacks" and the standard authentication methods applied to counteract these attacks. We further propose a modified authentication algorithm which features higher efficiency with respect to consumption of mutual secret bits.

DOI: 10.1142/s0219749905000797

Related papers

VULNERABILITY OF "A NOVEL PROTOCOL-AUTHENTICATION ALGORITHM RULING OUT A MAN-IN-THE-MIDDLE ATTACK IN QUANTUM CRYPTOGRAPHY"

Aysajan Abidin, Jan-Åke Larsson

In this paper, we review and comment on "A novel protocol-authentication algorithm ruling out a man-in-the-middle attack in quantum cryptography" [M. Peev et al., Int. J. Quant. Inf.3 (2005) 225]. In particular, we point out that the proposed primitive is not secure when used in a generic protocol, and needs additional authenticating properties of the surrounding quantum-cryptographic protocol.

arXiv:0810.5050International Journal of Quantum InformationAug 1, 200916 citations

RESPONSE TO "VULNERABILITY OF 'A NOVEL PROTOCOL-AUTHENTICATION ALGORITHM RULING OUT A MAN-IN-THE-MIDDLE ATTACK IN QUANTUM CRYPTOGRAPHY'"

Momtchil Peev, Christoph Pacher, Thomas Lorünser +7 more

In this work, we respond to a comment by A. Abidin and J.-Å. Larsson on our previous paper, Int. J. Quant. Inf.3 (2005) 225.

International Journal of Quantum InformationOct 1, 200911 citations

Weaknesses of Authentication in Quantum Cryptography and Strongly Universal Hash Functions

Aysajan Abidin

Authentication is an indispensable part of Quantum Cryptography, which is an unconditionally secure key distribution technique based on the laws of nature. Without proper authentication, Quantum Cryptography is vulnerable to “man-in-the-middle” attacks. Therefore, to guarantee unconditional security of any Quantum Cryptographic protocols, the authentication used must also be unconditionally secure. The standard in Quantum Cryptography is to use theWegman-Carter authentication, which is unconditionally secure and is based on the idea of universal hashing. In this thesis, we first investigate properties of a Strongly Universal hash function family to facilitate understanding the properties of (classical) authentication used in Quantum Cryptography. Then, we study vulnerabilities of a recently proposed authentication protocol intended to rule out a "man-in-the-middle" attack on Quantum Cryptography. Here, we point out that the proposed authentication primitive is not secure when used in a generic Quantum Cryptographic protocol. Lastly, we estimate the lifetime of authentication using encrypted tags when the encryption key is partially known. Under simplifying assumptions, we derive that the lifetime is linearly dependent on the length of the authentication key. Experimental results that support the theoretical results are also presented.

Jan 1, 20105 citations

The interlock protocol cannot save quantum cryptography from man-in-the-middle attacks

Karl Svozil

The feasibility of the interlock protocol to prevent against man-in-the-middle attacks on quantum cryptography is discussed. If an eavesdropper succeeds to compromise the quantum as well as the classical channels and mimicks the receiver "Bob" for the sender "Alice" and vice versa, one defense strategy not requiring authentication is the successive, temporally interlocked partial transmission of the entire encrypted message.

Jan 12, 20052 citations

Classical Authentication Aided Three-Stage Quantum Protocol

Partha Basuchowdhuri

This paper modifies Kak's three-stage protocol so that it can guarantee secure transmission of information. Although avoiding man-in-the-middle attack is our primary objective in the introduction of classical authentication inside the three-stage protocol, we also benefit from the inherent advantages of the chosen classical authentication protocol. We have tried to implement ideas like key distribution center, session key, time-stamp, and nonce, within the quantum cryptography protocol.

arXiv:cs/0605083May 18, 20066 citations

Cryptanalysis of Quantum Secure Direct Communication and Authentication Scheme via Bell States

Fei Gao, Su‐Juan Qin, Fen-Zhuo Guo +1 more

The security of the quantum secure direct communication (QSDC) and authentication protocol based on Bell states is analyzed. It is shown that an eavesdropper can invalidate the authentication function, and implement a successful man-in-the-middle attack, where he/she can obtain or even modify the transmitted secret without introducing any error. The particular attack strategy is demonstrated and an improved protocol is presented.

Chinese Physics LettersFeb 1, 201138 citations