Affiliation: Open Security Research
On the claimed privacy of EC-RAC III
In this paper we show how to break the most recent version of EC-RAC with respect to privacy. We show that both the ID-Transfer and ID&PWD-Transfer schemes from EC-RAC do not provide the claimed privacy levels by using a man-in-the-middle attack. The existence of these attacks voids the presented privacy proofs for EC-RAC.
- CHES 2018
- CHES 2016
- CHES 2015
- CHES 2014
- CHES 2013