[TLS] the idea of using multiple keys with multiple certificate authorities in a TLS session.

Shahin Noursalehi <mixoftix@gmail.com> Thu, 05 February 2015 09:17 UTC

MIME-Version: 1.0
Date: Thu, 05 Feb 2015 12:47:17 +0330
Message-ID: <CADrAmL6xOMOauSHuTR8BUK7i4NG2Zx3H90dA6k36YMu81pVW0A@mail.gmail.com>
From: Shahin Noursalehi <mixoftix@gmail.com>
To: tls@ietf.org
Content-Type: text/plain; charset="ISO-8859-1"
Archived-At: <http://mailarchive.ietf.org/arch/msg/tls/YxwdMxGypHPXCGvwXwPi56EwJRE>
Cc: abadi@cs.ucsc.edu, ChristopherA@alacritymanagement.com
Subject: [TLS] the idea of using multiple keys with multiple certificate authorities in a TLS session.
Precedence: list

Dear Sir/Madam,

Refer to discussions around TLS 1.3 in Linkedin group "Cryptographers
and Cryptanalysts", contributor experts agree on the idea of using
multiple keys with multiple certificate authorities in a TLS session.
So if one certificate authority is compromised hopefully the others
are not. The suggested solution would be like the process bellow:

Refer to the way that TLS generates the *master_secret*:

master_secret = PseudoRandomFunction(pre_master_secret, "master
secret", ClientHello.random + ServerHello.random)

We could generate multiple peer-to-peer pre_master_secret(s) for each
public-key that we receive from the server and XOR them all together.
So, our offered method of calculation of master_secret will convert
to:

master_secret = PseudoRandomFunction(multiple_pre_master_secret,
"master secret", ClientHello.random + ServerHello.random)

where:

multiple_pre_master_secret = XOR(pre_master_secret_1,
pre_master_secret_2, .. pre_master_secret_n)

and aim at preventing basic attacks that are known against
one-time-pad, we could add a circular-bit-rotation(m) to the
calculation above - each time we do an XOR:

multiple_pre_master_secret = ROT(XOR(pre_master_secret_1,
pre_master_secret_2, .. pre_master_secret_n), m)

Please let us know about your point of views, then we could continue
discussing the TLS.

With best regards

Shahin Noursalehi


Reference:

https://www.linkedin.com/groups/what-are-new-methods-attack-3901854.S.5958888203401314306

[TLS] the idea of using multiple keys with multip… Shahin Noursalehi
Re: [TLS] the idea of using multiple keys with mu… Karthikeyan Bhargavan
Re: [TLS] the idea of using multiple keys with mu… Ilari Liusvaara
Re: [TLS] the idea of using multiple keys with mu… Russ Housley
Re: [TLS] the idea of using multiple keys with mu… Karthikeyan Bhargavan
Re: [TLS] the idea of using multiple keys with mu… Hanno Böck
Re: [TLS] the idea of using multiple keys with mu… Shahin Noursalehi