Table Of ContentBruce Christianson James Malcolm
Frank Stajano Jonathan Anderson
Joseph Bonneau (Eds.)
3 Security
6
2
8
S
Protocols XXI
C
N
L
21st International Workshop
Cambridge, UK, March 2013
Revised Selected Papers
123
Lecture Notes in Computer Science 8263
CommencedPublicationin1973
FoundingandFormerSeriesEditors:
GerhardGoos,JurisHartmanis,andJanvanLeeuwen
EditorialBoard
DavidHutchison
LancasterUniversity,UK
TakeoKanade
CarnegieMellonUniversity,Pittsburgh,PA,USA
JosefKittler
UniversityofSurrey,Guildford,UK
JonM.Kleinberg
CornellUniversity,Ithaca,NY,USA
AlfredKobsa
UniversityofCalifornia,Irvine,CA,USA
FriedemannMattern
ETHZurich,Switzerland
JohnC.Mitchell
StanfordUniversity,CA,USA
MoniNaor
WeizmannInstituteofScience,Rehovot,Israel
OscarNierstrasz
UniversityofBern,Switzerland
C.PanduRangan
IndianInstituteofTechnology,Madras,India
BernhardSteffen
TUDortmundUniversity,Germany
MadhuSudan
MicrosoftResearch,Cambridge,MA,USA
DemetriTerzopoulos
UniversityofCalifornia,LosAngeles,CA,USA
DougTygar
UniversityofCalifornia,Berkeley,CA,USA
GerhardWeikum
MaxPlanckInstituteforInformatics,Saarbruecken,Germany
Bruce Christianson James Malcolm
Frank Stajano Jonathan Anderson
Joseph Bonneau (Eds.)
Security
Protocols XXI
21st International Workshop
Cambridge, UK, March 19-20, 2013
Revised Selected Papers
1 3
VolumeEditors
BruceChristianson
JamesMalcolm
UniversityofHertfordshire
SchoolofComputerScience
Hatfield,HertfordshireAL109AB,UK
E-mail:{b.christianson,j.a.malcolm}@herts.ac.uk
FrankStajano
JonathanAnderson
UniversityofCambridge
ComputerLaboratory
CambridgeCB30FD,UK
E-mail:{frank.stajano,jonathan.anderson}@cl.cam.ac.uk
JosephBonneau
PrincetonUniversity
CenterforInformationTechnologyPolicy
Princeton,NJ08540,USA
E-mail:[email protected]
ISSN0302-9743 e-ISSN1611-3349
ISBN978-3-642-41716-0 e-ISBN978-3-642-41717-7
DOI10.1007/978-3-642-41717-7
SpringerHeidelbergNewYorkDordrechtLondon
LibraryofCongressControlNumber:2013951245
CRSubjectClassification(1998):K.6.5,E.3,C.2,D.4.6,H.4
LNCSSublibrary:SL4–SecurityandCryptology
©Springer-VerlagBerlinHeidelberg2013
Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartof
thematerialisconcerned,specificallytherightsoftranslation,reprinting,reuseofillustrations,recitation,
broadcasting,reproductiononmicrofilmsorinanyotherphysicalway,andtransmissionorinformation
storageandretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodology
nowknownorhereafterdeveloped.Exemptedfromthislegalreservationarebriefexcerptsinconnection
withreviewsorscholarlyanalysisormaterialsuppliedspecificallyforthepurposeofbeingenteredand
executedonacomputersystem,forexclusiveusebythepurchaserofthework.Duplicationofthispublication
orpartsthereofispermittedonlyundertheprovisionsoftheCopyrightLawofthePublisher’slocation,
initscurrentversion,andpermissionforusemustalwaysbeobtainedfromSpringer.Permissionsforuse
maybeobtainedthroughRightsLinkattheCopyrightClearanceCenter.Violationsareliabletoprosecution
undertherespectiveCopyrightLaw.
Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication
doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant
protectivelawsandregulationsandthereforefreeforgeneraluse.
Whiletheadviceandinformationinthisbookarebelievedtobetrueandaccurateatthedateofpublication,
neithertheauthorsnortheeditorsnorthepublishercanacceptanylegalresponsibilityforanyerrorsor
omissionsthatmaybemade.Thepublishermakesnowarranty,expressorimplied,withrespecttothe
materialcontainedherein.
Typesetting:Camera-readybyauthor,dataconversionbyScientificPublishingServices,Chennai,India
Printedonacid-freepaper
SpringerispartofSpringerScience+BusinessMedia(www.springer.com)
Preface
This volume collects the revised proceedings of the 21st International Security
ProtocolsWorkshop,heldinSidneySussexCollege,Cambridgeduring19thand
20th March 2013.
The theme of the workshop was “What’s happening on the other channel?”
Many protocols use a secondary channel, either explicitly (as in multichannel
protocols1)butmoreusuallyimplicitly,forexampletoexchangemasterkeys,or
their hashes. The roleof the Other Channel is fundamental, and often problem-
atic, and yet protocol composers typically take them as a given. Sometimes the
Other Channel really is completely covert, but sometimes it just has properties
that are different. And it’s not only security properties that are relevant here:
bandwidth, latency and error rate are often important considerations too. Even
aline-of-sightchannelusuallydoesn’tquitehavethepropertiesthatweunthink-
ingly attributed to it. Moriarty has been subscribing to the Other Channel for
years: perhaps it’s time for Alice and Bob to tune in too.
As with previous workshops in this series, each paper was revised by the
authors to incorporate ideas that emerged during the workshop. These revised
papers are followed by an edited transcript of the presentation and ensuing
discussion.
Our thanks to Lori Klimaszewska for the raw transcriptions of the audio,
laterrevisedby the speakersthemselves,andto Vashek Matyasfor servingwith
us on the ProgramCommittee.
We hope that reading these proceedings will encourage you to join in the
debates.If youhaveanideathatmightsparkaninterestingdiscussion,why not
write it up as a position paper and send it to us? There’ll be another workshop
next year.
September 2013 Bruce Christianson
James Malcolm
Frank Stajano
Jonathan Anderson
Joseph Bonneau
1 LNCS 4631, 112–127.
Previous Proceedings in this Series
TheproceedingsofpreviousInternationalSecurityProtocolsWorkshopsarealso
published by Springer Verlag as Lecture Notes in Computer Science, and are
occasionally referred to in the text:
20th Workshop (2012) LNCS 7622 ISBN 978-3-642-35693-3
19th Workshop (2011) LNCS 7114 ISBN 978-3-642-25866-4
18th Workshop (2010) LNCS 7061 in preparation
17th Workshop (2009) LNCS 7028 ISBN 978-3-642-36212-5
16th Workshop (2008) LNCS 6615 ISBN 978-3-642-22136-1
15th Workshop (2007) LNCS 5964 ISBN 978-3-642-17772-9
14th Workshop (2006) LNCS 5087 ISBN 978-3-642-04903-3
13th Workshop (2005) LNCS 4631 ISBN 3-540-77155-7
12th Workshop (2004) LNCS 3957 ISBN 3-540-40925-4
11th Workshop (2003) LNCS 3364 ISBN 3-540-28389-7
10th Workshop (2002) LNCS 2845 ISBN 3-540-20830-5
9th Workshop (2001) LNCS 2467 ISBN 3-540-44263-4
8th Workshop (2000) LNCS 2133 ISBN 3-540-42566-7
7th Workshop (1999) LNCS 1796 ISBN 3-540-67381-4
6th Workshop (1998) LNCS 1550 ISBN 3-540-65663-4
5th Workshop (1997) LNCS 1361 ISBN 3-540-64040-1
4th Workshop (1996) LNCS 1189 ISBN 3-540-63494-5
No published proceedings exist for the first three workshops.
Table of Contents
Introduction: What’s Happening on the Other Channel?
(Transcript of Discussion)......................................... 1
Bruce Christianson
Towards New Security Primitives Based on Hard AI Problems......... 3
Bin B. Zhu and Jeff Yan
Towards New Security Primitives Based on Hard AI Problems
(Transcript of Discussion)......................................... 11
Jeff Yan
Towards a Theory of Application Compartmentalisation .............. 19
Robert N.M. Watson, Steven J. Murdoch, Khilan Gudka,
Jonathan Anderson, Peter G. Neumann, and Ben Laurie
Towards a Theory of Application Compartmentalisation (Transcript of
Discussion)...................................................... 28
Robert N.M. Watson
Authentication for Resilience: The Case of SDN...................... 39
Dongting Yu, Andrew W. Moore, Chris Hall, and Ross Anderson
Authentication for Resilience: The Case of SDN
(Transcript of Discussion)......................................... 45
Dongting Yu
Verifiable Postal Voting........................................... 54
Josh Benaloh, Peter Y.A. Ryan, and Vanessa Teague
End-to-End Verifiable Postal Voting (Transcript of Discussion) ........ 66
Vanessa Teague
Independent Computations for Safe Remote Electronic Voting ......... 71
Alec Yasinsac
Independent Computations for Safe Remote Electronic Voting
(Transcript of Discussion)......................................... 84
Alec Yasinsac
ReDABLS: Revisiting Device Attestation with Bounded Leakage of
Secrets ......................................................... 94
Jun Zhao, Virgil Gligor, Adrian Perrig, and James Newsome
VIII Table of Contents
ReDABLS: Revisiting Device Attestation with Bounded Leakage of
Secrets (Transcript of Discussion) .................................. 115
Virgil Gligor
Enhancements to Prepare-and-MeasureBased QKD Protocols ......... 123
Peter Y.A. Ryan and Bruce Christianson
Enhancements to Prepare-and-Measure-Based QKD Protocols
(Transcript of Discussion)......................................... 134
Peter Y.A. Ryan
Simple Defences against Vibration-Based Keystroke Fingerprinting
Attacks......................................................... 143
Rushil Khurana and Shishir Nagaraja
Simple Defences against Vibration-Based-Keystroke Fingerprinting
Attacks (Transcript of Discussion) ................................. 152
Shishir Nagaraja
Communication Setup in Anonymous Messaging ..................... 161
Francesco Bergadano
Communication Setup in Anonymous Messaging
(Transcript of Discussion)......................................... 170
Francesco Bergadano
Towards a Stronger Location Integrity.............................. 176
Rubin Xu and Dongting Yu
Towards a Stronger Location Integrity (Transcript of Discussion)....... 180
Rubin Xu
Back Channels Can Be Useful! Layering Authentication Channels to
Provide Covert Communication.................................... 189
Mohammed H. Almeshekah, Mikhail J. Atallah, and
Eugene H. Spafford
Back Channels Can Be Useful! Layering Authentication Channels to
Provide Covert Communication (Transcript of Discussion) ............ 196
Mohammed H. Almeshekah
Spraying Diffie-Hellman for Secure Key Exchange in MANETs......... 202
Ariel Stulman, Jonathan Lahav, and Avraham Shmueli
Spraying Diffie-Hellman for Secure Key Exchange in MANETs
(Transcript of Discussion)......................................... 213
Ariel Stulman
On the Origin of Yet another Channel .............................. 223
Petr Sˇvenda and V´aclav Maty´aˇs
Table of Contents IX
On the Origin of Yet another Channel (Transcript of Discussion)....... 238
Petr Sˇvenda
Verifiable Classroom Voting: Where Cryptography Meets Pedagogy .... 245
Feng Hao, Dylan Clarke, and Carlton Shepherd
Verifiable Classroom Voting: Where Cryptography Meets Pedagogy
(Transcript of Discussion)......................................... 255
Feng Hao
Creative Uses for the Other Channel ............................... 265
Author Index.................................................. 267
Introduction:
What’s Happening on the Other Channel?
(Transcript of Discussion)
Bruce Christianson
University of Hertfordshire
Welcome to the 21st Security Protocols Workshop, which means that we are
indeed twenty years old this year, and it’s nice looking round to see a few faces
ofpeoplewhowereattheveryfirstonetwentyyearsago.Andit’salsoverynice
toseea few newfacesofpeoplewhohaven’tbeenherebefore. Soforthe benefit
of those who haven’t, and for the benefit of some of those who are regulars, I’ll
just go through the rules of engagement quickly.
Thisisaworkshopandnotaconference:the ideaistobespontaneousandto
let ideas emerge, so when you’representing you’re expected to leada discussion
ratherthanpowerthroughyourPowerPointinthe orderinwhichyouoriginally
intended to give it. We do prepare transcripts but they’re heavily edited, you’ll
get a chance to see it, and we won’t let you say anything egregiously stupid on
the record, so feel free to have a go, and if it doesn’t work out we’ll just delete
it. Don’t feel that you have to say what youplanned to say when youstood up.
On the other hand, if the answer that you’d give to a question is going to be
lessinterestingthanwhatyouwouldhavesaidanyway,pleasejustuseyourskill
and judgement to resolve that one.
We have a couple of small features designed to add to the spontaneity this
year. One is that the pre-proceedings won’t be available until tomorrow. And
the secondis thatVashek is currently snowedin onthe runwayatBrno airport,
so if there’s somebody who was planning to speak tomorrow and who’s either
already prepared their talk, or wasn’t planning to prepare their talk at all, and
is willing to give the same (or even a different) talk this afternoon, please make
yourself known to me during the tea break and we’ll do a swap round.
Every year we have a theme. This isn’t intended to constrain what people
say, it’s just intended to give a conceptual framework to allow the ideas to de-
velop, so you can think of it as a sort of drying rack to hang your ideas on
while they’re still a bit damp, and this year the theme is: “What’s happening
on the other channel?” There’s been continued interest over the last few years
in multi-channel protocols, probably the most famous being the Resurrecting
Duckling, which was presented here quite a few years ago1. And I saw just the
other day a new device for a cash-point in Japan, where you put your mobile
phone onthe cash-pointandthen place yourfinger onascanner,youdon’tever
keyanyinformationintothecash-point,onlyeveronyourmobilephone.There’s
1 LNCS 1796, 172–194.
B.Christiansonetal.(Eds.):SecurityProtocols2013,LNCS8263,pp.1–2,2013.
(cid:2)c Springer-VerlagBerlinHeidelberg2013
