In search of multiple domain key recovery

Article type: Research Article

Authors: Knudsen, Lars R.^a | Martin, Keith M.^b

Affiliations: [a] Department of Informatics, University of Bergen, N-5020 Bergen, Norway. E-mail: [email protected] | [b] Katholieke Universiteit Leuven, ESAT–COSIC, Kardinaal Mercierlaan 94, B-3001 Heverlee, Belgium. E-mail: [email protected]

Abstract: Key recovery systems suitable for application among multiple domains, such as those operating within international communication networks, are investigated. A general framework for analysis of key recovery systems is introduced and a set of parameters appropriate for multiple domain key recovery is established. Three key recovery techniques are identified. It is shown that use of just one of these key recovery techniques is not sufficient for key recovery requirements among multiple domains. Further, it is shown that even key recovery systems using a combination of these techniques involve a complex tradeoff between cryptographic flexibility, system complexity and overall soundness. This forms a major technical difficulty in the search for a satisfactory system design.

DOI: 10.3233/JCS-1998-6401

Journal: Journal of Computer Security, vol. 6, no. 4, pp. 219-235, 1998