SIGMA key exchange protocol

E831957

The SIGMA key exchange protocol is a cryptographic protocol designed to provide secure authenticated key exchange with strong security guarantees and has been widely used as the basis for protocols like IKE in IPsec.

All labels observed (4)

How this entity was disambiguated

Statements (48)

Predicate Object
instanceOf authenticated key exchange protocol
cryptographic key exchange protocol
security protocol
addressesWeaknessOf naive signed Diffie–Hellman
considered a de facto standard design for authenticated Diffie–Hellman protocols
designedFor authenticated key exchange
key establishment
mutual authentication
developedInField applied cryptography
hasAcronym SIGMA
hasDesignFeature identity protection
protection of identities under passive eavesdropping
separation of authentication and key confirmation
sign-then-MAC structure
support for certificate-based authentication
support for public-key signatures
hasFullName SIGn-and-MAc key exchange protocol
hasMessageFlow two-pass Diffie–Hellman exchange with authenticated payloads
hasProperty binds session keys to authenticated identities
binds session keys to protocol transcript
supports mutual authentication in standard variants
supports negotiation of cryptographic algorithms
supports unilateral authentication in some variants
hasSecurityGoal key indistinguishability
resistance to reflection attacks
resistance to replay attacks
strong security under active attacks
hasSecurityModel provable security in the Bellare–Rogaway style model
hasVariant SIGMA with identity protection
SIGMA-I
linked to: SIGMA

SIGMA-R
improvesOn Station-to-Station (STS) protocol
inspired Internet Key Exchange (IKE)
linked to: IKEv2
providesProperty explicit entity authentication
forward secrecy
resistance to identity misbinding
resistance to key-compromise impersonation
resistance to man-in-the-middle attacks
relatedTo Station-to-Station (STS) protocol
usedAsBasisFor Internet Key Exchange version 1 (IKEv1)
linked to: IKEv1

Internet Key Exchange version 2 (IKEv2)
usedInContext IPsec
secure channel establishment
virtual private networks
usesPrimitive Diffie–Hellman key exchange
cryptographic hash functions
digital signatures
message authentication codes

How these facts were elicited

Referenced by (5)

Full triples — surface form annotated when it differs from this entity's canonical label.

Hugo Krawczyk knownFor SIGMA key exchange protocol
RFC 7296 defines Internet Key Exchange Protocol Version 2
linked to: SIGMA key exchange protocol
SIGMA key exchange protocol relatedTo Station-to-Station (STS) protocol
linked to: SIGMA key exchange protocol
SIGMA key exchange protocol improvesOn Station-to-Station (STS) protocol
linked to: SIGMA key exchange protocol
SIGMA protocol family hasVariant SIGMA with preshared keys
linked to: SIGMA key exchange protocol