The complexities of healing in secure group messaging: Why cross-group effects matter
Loading...
Access rights
openAccess
publishedVersion
URL
Journal Title
Journal ISSN
Volume Title
A4 Artikkeli konferenssijulkaisussa
This publication is imported from Aalto University research portal.
View publication in the Research portal (opens in new window)
View/Open full text file from the Research portal (opens in new window)
Other link related to publication (opens in new window)
View publication in the Research portal (opens in new window)
View/Open full text file from the Research portal (opens in new window)
Other link related to publication (opens in new window)
Authors
Date
Major/Subject
Mcode
Degree programme
Language
en
Pages
18
Series
Proceedings of the 30th USENIX Security Symposium, pp. 1847-1864
Abstract
Modern secure messaging protocols can offer strong security guarantees such as Post-Compromise Security (PCS) [18], which enables participants to heal after compromise. The core PCS mechanism in protocols like Signal [34] is designed for pairwise communication, making it inefficient for large groups, while recently proposed designs for secure group messaging, ART [19], IETF's MLS Draft-11 [7]/TreeKEM [11], use group keys derived from tree structures to efficiently provide PCS to large groups. Until now, research on PCS designs only considered healing behaviour within a single group. In this work we provide the first analysis of the healing behaviour when a user participates in multiple groups. Surprisingly, our analysis reveals that the currently proposed protocols based on group keys, such as ART and TreeKEM/MLS Draft-11, provide significantly weaker PCS guarantees than group protocols based on pairwise PCS channels. In fact, we show that if new users can be created dynamically, ART, TreeKEM, and MLS Draft-11 never fully heal authentication. We map the design space of healing mechanisms, analyzing security and overhead of possible solutions. This leads us to a promising solution based on (i) global updates that affect all current and future groups, and (ii) post-compromise secure signatures. Our solution allows group messaging protocols such ART and MLS to achieve substantially stronger PCS guarantees. We provide a security definition for post-compromise secure signatures and an instantiation.Description
Funding Information: †This work was supported by Microsoft Research through its PhD Scholarship Programme. Publisher Copyright: © 2021 by The USENIX Association. All rights reserved.
Keywords
Other note
Citation
Cremers, C, Hale, B & Kohbrok, K 2021, The complexities of healing in secure group messaging : Why cross-group effects matter. in Proceedings of the 30th USENIX Security Symposium. USENIX -The Advanced Computing Systems Association, pp. 1847-1864, USENIX Security Symposium, Virtual, Online, 11/08/2021. < https://www.usenix.org/conference/usenixsecurity21/presentation/cremers >