Unlinkability of an improved key agreement protocol for EMV 2nd gen payments

Ross Horne; Sjouke Mauw; Semen Yurkov

doi:10.1109/CSF54842.2022.9919666

Unlinkability of an improved key agreement protocol for EMV 2nd gen payments

Ross Horne, Sjouke Mauw, Semen Yurkov

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution book

6 Citations (Scopus)

Abstract

To address known privacy problems with the EMV standard, EMVCo have proposed a Blinded Diffie-Hellman key establishment protocol, which is intended to be part of a future 2nd Gen EMV protocol. We point out that active attackers were not previously accounted for in the privacy requirements of this proposal protocol, and demonstrate that an active attacker can compromise unlinkability within a distance of 100cm. Here, we adopt a strong definition of unlinkability that does account for active attackers and propose an enhancement of the protocol proposed by EMVCo. We prove that our protocol does satisfy strong unlinkability, while preserving authentication.

Original language	English
Title of host publication	2022 IEEE 35th Computer Security Foundations Symposium, CSF 2022
Place of Publication	Piscataway, NJ
Publisher	IEEE
Pages	364-379
Number of pages	16
ISBN (Electronic)	9781665484176
ISBN (Print)	9781665484183
DOIs	https://doi.org/10.1109/CSF54842.2022.9919666
Publication status	Published - 31 Oct 2022
Event	35th IEEE Computer Security Foundations Symposium, CSF 2022 - Haifa, Israel Duration: 7 Aug 2022 → 10 Aug 2022

Publication series

Name	Proceedings - IEEE Computer Security Foundations Symposium
Volume	2022-August
ISSN (Print)	1940-1434

Conference

Conference	35th IEEE Computer Security Foundations Symposium, CSF 2022
Country/Territory	Israel
City	Haifa
Period	7/08/22 → 10/08/22

Funding

†Semen Yurkov is supported by the Luxembourg National Research Fund through grant PRIDE15/10621687/SPsquared.

Keywords

authentication
bisimilarity
key agreement
protocols
unlinkability

Access to Document

10.1109/CSF54842.2022.9919666

Cite this

@inproceedings{8c7d807f575045ddb9cc39eb61e83461,

title = "Unlinkability of an improved key agreement protocol for EMV 2nd gen payments",

abstract = "To address known privacy problems with the EMV standard, EMVCo have proposed a Blinded Diffie-Hellman key establishment protocol, which is intended to be part of a future 2nd Gen EMV protocol. We point out that active attackers were not previously accounted for in the privacy requirements of this proposal protocol, and demonstrate that an active attacker can compromise unlinkability within a distance of 100cm. Here, we adopt a strong definition of unlinkability that does account for active attackers and propose an enhancement of the protocol proposed by EMVCo. We prove that our protocol does satisfy strong unlinkability, while preserving authentication.",

keywords = "authentication, bisimilarity, key agreement, protocols, unlinkability",

author = "Ross Horne and Sjouke Mauw and Semen Yurkov",

year = "2022",

month = oct,

day = "31",

doi = "10.1109/CSF54842.2022.9919666",

language = "English",

isbn = "9781665484183",

series = "Proceedings - IEEE Computer Security Foundations Symposium",

publisher = "IEEE",

pages = "364--379",

booktitle = "2022 IEEE 35th Computer Security Foundations Symposium, CSF 2022",

note = "35th IEEE Computer Security Foundations Symposium, CSF 2022 ; Conference date: 07-08-2022 Through 10-08-2022",

}

Horne, R, Mauw, S & Yurkov, S 2022, Unlinkability of an improved key agreement protocol for EMV 2nd gen payments. in 2022 IEEE 35th Computer Security Foundations Symposium, CSF 2022. Proceedings - IEEE Computer Security Foundations Symposium, vol. 2022-August, IEEE, Piscataway, NJ, pp. 364-379, 35th IEEE Computer Security Foundations Symposium, CSF 2022, Haifa, Israel, 7/08/22. https://doi.org/10.1109/CSF54842.2022.9919666

Unlinkability of an improved key agreement protocol for EMV 2nd gen payments. / Horne, Ross; Mauw, Sjouke; Yurkov, Semen.
2022 IEEE 35th Computer Security Foundations Symposium, CSF 2022. Piscataway, NJ: IEEE, 2022. p. 364-379 (Proceedings - IEEE Computer Security Foundations Symposium; Vol. 2022-August).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution book

TY - GEN

T1 - Unlinkability of an improved key agreement protocol for EMV 2nd gen payments

AU - Horne, Ross

AU - Mauw, Sjouke

AU - Yurkov, Semen

PY - 2022/10/31

Y1 - 2022/10/31

N2 - To address known privacy problems with the EMV standard, EMVCo have proposed a Blinded Diffie-Hellman key establishment protocol, which is intended to be part of a future 2nd Gen EMV protocol. We point out that active attackers were not previously accounted for in the privacy requirements of this proposal protocol, and demonstrate that an active attacker can compromise unlinkability within a distance of 100cm. Here, we adopt a strong definition of unlinkability that does account for active attackers and propose an enhancement of the protocol proposed by EMVCo. We prove that our protocol does satisfy strong unlinkability, while preserving authentication.

AB - To address known privacy problems with the EMV standard, EMVCo have proposed a Blinded Diffie-Hellman key establishment protocol, which is intended to be part of a future 2nd Gen EMV protocol. We point out that active attackers were not previously accounted for in the privacy requirements of this proposal protocol, and demonstrate that an active attacker can compromise unlinkability within a distance of 100cm. Here, we adopt a strong definition of unlinkability that does account for active attackers and propose an enhancement of the protocol proposed by EMVCo. We prove that our protocol does satisfy strong unlinkability, while preserving authentication.

KW - authentication

KW - bisimilarity

KW - key agreement

KW - protocols

KW - unlinkability

UR - https://arxiv.org/abs/2105.02029

U2 - 10.1109/CSF54842.2022.9919666

DO - 10.1109/CSF54842.2022.9919666

M3 - Conference contribution book

AN - SCOPUS:85138746118

SN - 9781665484183

T3 - Proceedings - IEEE Computer Security Foundations Symposium

SP - 364

EP - 379

BT - 2022 IEEE 35th Computer Security Foundations Symposium, CSF 2022

PB - IEEE

CY - Piscataway, NJ

T2 - 35th IEEE Computer Security Foundations Symposium, CSF 2022

Y2 - 7 August 2022 through 10 August 2022

ER -

Unlinkability of an improved key agreement protocol for EMV 2nd gen payments

Abstract

Publication series

Conference

Funding

Keywords

Access to Document

Other files and links

Fingerprint

Cite this