On practical deployment of smart card based authenticated key agreement schemes

摘要

In this paper, we deal with advanced authenticated key establishment protocols that establish a secret key and a secure data channel to a restricted device. The Authenticated Key Agreement (AKA) protocols on restricted devices such as smart cards or security access modules can be used in many use cases such as secure exchange of biometric signatures, public transport ticketing, and others. Nevertheless, AKA protocols usually consist of many cryptographic operations that are computationally expensive or are not supported on some smart card platforms. In this paper, we investigate the support of cryptographic and modular arithmetic methods on current smart card platforms. Then, we present the security and performance evaluation of five standard AKA protocols and estimate their runtimes on smart cards. Furthermore, we present our implementation of the Password Authenticated Connection Establishment (PACE) protocol on an off-the-shelf smart card and show the performance results of this protocol.