Lightweight Email Signatures (Extended Abstract)
Name
Adida_Lightweight Email Signatures.pdf
Size
558.48 KB
Format
Adobe PDF
Checksum (MD5)
b5930822b811a2b5fd4cff0cd2562427
Author(s)
Adida, Ben
Chau, David
Hohenberger, Susan
Rivest, Ronald L.
Date Issued
2006
Journal
Security and Cryptography for Networks
Publisher
Springer Berlin Heidelberg
Citation
Adida, Ben, David Chau, Susan Hohenberger, and Ronald L. Rivest. "Lightweight Email Signatures (Extended Abstract)." R. De Prisco and M. Yung (Eds.). Security and Cryptography for Networks: 5th International Conference, SCN 2006, Maiori, Italy, September 6-8, 2006. Proceedings. (Lecture Notes in Computer Science ; Volume 4116), 2006, pp 288-302. © Springer 2006.
Version
Final published version
Abstract
We present Lightweight Email Signatures (LES), a simple cryptographic architecture for authenticating email. LES is an extension of DKIM, the recent IETF effort to standardize domain-based email signatures. LES shares DKIM’s ease of deployment: they both use the DNS to distribute a single public key for each domain. Importantly, LES supports common uses of email that DKIM jeopardizes: multiple email personalities, firewalled ISPs, incoming-only email forwarding services, and other common uses that often require sending email via a third-party SMTP server. In addition, LES does not require DKIM’s implied intra-domain mechanism for authenticating users when they send email.
LES provides these features using identity-based signatures. Each domain authority generates a master keypair, publishes the public component in the DNS, and stores the private component securely. Using this private component, the authority delivers to each of its users, via email, an individual secret key whose identity string corresponds to the user’s email address. A sender then signs messages using this individual secret key. A recipient verifies such a signature by querying the appropriate master public key from the DNS, computing the sender’s public key, and verifying the signature accordingly. As an added bonus, the widespread availability of user-level public keys enables deniable authentication, such as ring signatures. Thus, LES provides email authentication with optional repudiability.
We built a LES prototype to determine its practicality. Basic user tests show that the system is relatively easy to use, and that cryptographic performance, even when using deniable authentication, is well within acceptable range.
MIT Department
Massachusetts Institute of Technology. Computer Science and Artificial Intelligence Laboratory
Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science
Terms of Use
Article is made available in accordance with the publisher's policy and may be subject to US copyright law. Please refer to the publisher's site for terms of use.
Persistent DSpace Link
DOI of Published Version
https://doi.org/10.1007/11832072_20
