Full paper: Postscript, PS.GZ, PDF

Notation

 

We use the following notation to describe security protocols and cryptographic operations in this paper.

$A,\; B$ are principals, such as communicating nodes

$N$_A is a nonce generated by $A$ (a nonce is an unpredictable bit string, usually used to achieve freshness).

$M$₁ | M₂ denotes the concatenation of messages $M$₁ and $M$₂

$K$_AB denotes the secret (symmetric) key which is shared between $A$ and $B$

$\{M\}$K_AB is the encryption of message $M$ with the symmetric key shared by $A$ and $B$.

$\{M\}$K_AB,IV denotes the encryption of message $M$, with key $K$_AB, and the initialization vector $IV$ which is used in encryption modes such as cipher-block chaining (CBC), output feedback mode (OFB), or counter mode (CTR) [9, 21, 22].

By a secure channel, we mean a channel that offers confidentiality, data authentication, integrity, and freshness.