2007
A hybrid PKI-IBC based ephemerizer system
Publication
Publication
Presented at the
International Information Security Conference, Sandton, South Africa
The concept of an Ephemerizer system has been introduced in earlier works as a mechanism to ensure that a file deleted from the persistent storage remains unrecoverable. The principle involved storing the data in an encrypted form in the user’s machine and the key to decrypt the data in a physically separate machine. However the schemes proposed so far do not provide support for fine-grained user settings on the lifetime of the data nor support any mechanism to check the integrity of the system that is using the secret data. In addition we report the presence of a vulnerability in one version of the proposed scheme that can be exploited by an attacker to nullify the ephemeral nature of the keys. We propose and discuss in detail an alternate Identity Based cryptosystem powered scheme that overcomes the identified limitations of the original system.
| Additional Metadata | |
|---|---|
| Springer Boston | |
| H. Venter , M.M. Eloff (Mariki) , L. Labuschagne , J.H.P. Eloff (Jan) , R. von Solms | |
| IFIP International Federation for Information Processing | |
| International Information Security Conference | |
| Organisation | Specification and Analysis of Embedded Systems |
|
Nair, S. K., Dashti, M., Crispo, B., & Tanenbaum, A. (2007). A hybrid PKI-IBC based ephemerizer system. In H. Venter, M. Eloff, L. Labuschagne, J. Eloff, & R. von Solms (Eds.), Proceedings of the IFIP TC-11 22nd International Information Security Conference (SEC 2007) (pp. 241–252). Springer Boston. |
|