Robust E-Mail protocols with enhanced privacy

다국어 초록 (Multilingual Abstract)

As the number of users has been explosively increased, e-mail has become one of the widely used applications on internet. However, an intrusion on the privacy of a user can happen by eavesdropping the communication channel between a sender and a recipient or hacking the e-mail account of a user. PGP is a good solution to guard the user's privacy. It conceals the communicated messages (i.e., e-mail contents) and provides authentication of an origin. However, unfortunately, PGP can not guarantee user's privacy if the private key related with the recipient's public key is exposed by hacking or system failure. Therefore, we should consider the security of the users' private keys. In this paper, we introduce new e-mail protocols which keeps the user's privacy even though his/her private key is revealed.

목차 (Table of Contents)

• Contents
• 1 Introduction
• 2 Preliminaries
• 2.1 Pretty Good Privacy (PGP)
• 2.2 S/MIME
• 2.3 Threats of Compromising Long-Term Secret Keys
• 2.3.1 Attack by Malicious Program
• 2.3.2 Attack from Temporary Storage
• 2.3.3 Attack on PKCS 5
• 3 Security Enhanced E-Mail Protocols
• 3.1 Notation
• 3.2 PGP
• 3.3 Sunetal.’sSecureE-MailProtocolProvidingPerfectForwardSecrecy.
• 3.3.1 Weakness of the Protocol.
• 4 Robust E-Mail Protocols with Enhanced Privacy
• 4.1 Security Requirements
• 4.2 Proposed Protocol 1
• 4.3 Proposed Protocol 2
• 4.4 Security Analysis
• 4.4.1 Protocol 1
• 4.4.2 Protocol 2
• 4.5 Perfect Forward Secrecy
• 4.6 E?ciency
• 5 Implementation and Other Applications
• 5.1 Practical Instance of the Protocol
• 5.2 Implementation Issues
• 5.3 Performance
• 5.4 Mobile Messaging System
• 6 Conclusion
• List of Tables
• 3.1 Notation
• 4.1 Comparison of the modular exponential operations
• 5.1 Performance evaluation for cryptographic primitives
• 5.2 Elliptic Curve parameters (Curve 3)