Alternative Key Exchange Algorithm Based on Elliptic Curve Digital Signature Algorithm Certificate and Usage in Applications

Authors: A. Andreasyan, C. Connors

Abstract:

The Elliptic Curve Digital Signature algorithm-based X509v3 certificates are becoming more popular due to their short public and private key sizes. Moreover, these certificates can be stored in Internet of Things (IoT) devices, with limited resources, using less memory and transmitted in network security protocols, such as Internet Key Exchange (IKE), Transport Layer Security (TLS) and Secure Shell (SSH) with less bandwidth. The proposed method gives another advantage, in that it increases the performance of the above-mentioned protocols in terms of key exchange by saving one scalar multiplication operation.

Keywords: Cryptography, elliptic curve digital signature algorithm, key exchange, network security protocols.

References:

[1] Federal Information Processing Standards (FIPS) 186-4, Digital Signature Standard, 2013
[2] T. Dierks E. Rescorla The Transport Layer Security (TLS) Protocol Version 1.2, 2008
[3] E. Rescorla The Transport Layer Security (TLS) Protocol Version 1.3, 2018
[4] C. Kaufman, P.Hoffman, Y.Nir, P. Eronen T. Kivinen Internet Key Exchange Protocol Version 2 (IKE), 2014
[5] T. Friedl, N. Provos, W. Simpson Deffie-Hellman Group Exchange for Secure Shell Transport Layer Protocol, 2006
[6] L. Bassam, D Johnson, W. Polk Internet X509 Public Key Infrastructure 1999pp 5
[7] Cristof Paar, Jan Pelzl Understanding Cryptography, 2010, pp 246.