论文标题
将密钥与身份验证和身份保护交换为安全的语音通信而无需侧向通道
Exchanging Keys with Authentication and Identity Protection for Secure Voice Communication without Side-channel
论文作者
论文摘要
由于对隐私性语音通信的需求越来越多，我们在这里调查了以音频域中以伪语音信号的形式发送加密数据和语音的最初想法。与军事``加密手机''的受限少，并且允许真正的公众评估，对于公共无安全的语音通信基础架构，例如3G蜂窝网络和VoIP。在本文中，我们根据签名和短身份验证字符串（SAS）详细介绍了我们的新的强大双重身份验证机制（SAS），以确保用户之间的强大身份验证，同时减轻不可靠的语音通道引起的错误以及对被动窃听者的身份保护。作为符号模型，我们的协议已正式进行了证明，以确保安全，并由tamarin Prover进行全面验证。
Motivated by an increasing need for privacy-preserving voice communications, we investigate here the original idea of sending encrypted data and speech in the form of pseudo-speech signals in the audio domain. Being less constrained than military ``Crypto Phones'' and allowing genuine public evaluation, this approach is quite promising for public unsecured voice communication infrastructures, such as 3G cellular network and VoIP.A cornerstone of secure voice communications is the authenticated exchange of cryptographic keys with sole resource the voice channel, and neither Public Key Infrastructure (PKI) nor Certificate Authority (CA). In this paper, we detail our new robust double authentication mechanism based on signatures and Short Authentication Strings (SAS) ensuring strong authentication between the users while mitigating errors caused by unreliable voice channels and also identity protection against passive eavesdroppers. As symbolic model, our protocol has been formally proof-checked for security and fully validated by Tamarin Prover.
