International Association for Cryptologic Research

International Association
for Cryptologic Research


Paper: Puncturable Key Wrapping and Its Applications

Matilda Backendal , ETH Zurich
Felix Günther , ETH Zurich
Kenneth G. Paterson , ETH Zurich
Search ePrint
Search Google
Presentation: Slides
Conference: ASIACRYPT 2022
Abstract: We introduce puncturable key wrapping (PKW), a new cryptographic primitive that supports fine-grained forward security properties in symmetric key hierarchies. We develop syntax and security definitions, along with provably secure constructions for PKW from simpler components (AEAD schemes and puncturable PRFs). We show how PKW can be applied in two distinct scenarios. First, we show how to use PKW to achieve forward security for TLS 1.3 0-RTT session resumption, even when the server's long-term key for generating session tickets gets compromised. This extends and corrects a recent work of Aviram, Gellert, and Jager (Journal of Cryptology, 2021). Second, we show how to use PKW to build a protected file storage system with file shredding, wherein a client can outsource encrypted files to a potentially malicious or corrupted cloud server whilst achieving strong forward-security guarantees, relying only on local key updates.
Video from ASIACRYPT 2022
  title={Puncturable Key Wrapping and Its Applications},
  author={Matilda Backendal and Felix Günther and Kenneth G. Paterson},