BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

4.2.6 Key Establishment Protocols

NIST platform security: roots of trust, firmware and secure enclaves SP 800-57 Part 1 Rev. 4
All changes in this version
first version loaded 4 Cryptographic Algorithms part of 4.2

Title

Key Establishment Protocols

Control

Key establishment protocols use key-establishment schemes in order to specify the processing necessary to establish a key. However, key-establishment protocols also specify message flow and format. Key-establishment protocols need to be carefully designed to not give secret information to a potential attacker. For example, a protocol that indicates abnormal conditions, such as an integrity error, may permit an attacker to confirm or reject an assumption regarding secret data. Alternatively, if the time or power required to perform certain computations are based upon the value of the secret or private key in use, then an attacker may be able to deduce the key from observed fluctuations. Therefore, it is best to design key-establishment protocols so that: 1. The protocols do not provide for an early exit from the protocol upon detection of a single error, 2. The protocols trigger an alarm after a certain reasonable number of detected error conditions, and 3. The key-dependent computations are obscured from the observer in order to prevent or minimize the detection of key-dependent characteristics.