MoCrySIL – Carry Your Cryptographic Keys in Your Pocket

Florian Reimair, Peter Teufl, Christian Kollmann, Christoph Thaller

2015

Abstract

Today’s applications need to share data and workload in heterogeneous device environments. Many of these handle sensitive data and need to make use of cryptography, which induces keys that have to be provisioned, stored and shared securely. Our Cryptographic Service Interoperability Layer (CrySIL) architecture addressed these challenges by storing the key material off-device in a central hardened service that provides cryptographic functions to arbitrary devices via standardised APIs. While CrySIL is typically deployed by a trusted entity utilising hardware-security-modules (HSMs), the setup of this central trusted instance might be too complex or not desired in SME/personal deployment scenarios. Therefore, we present MoCrySIL, an extension to CrySIL that omits the need for a thrusted third party by making use of hardware-backed key-storage facilities available in today’s smart phones. We describe the MoCrySIL architectures and present a prototype that performs S/MIME based email encryption/signatures via a PKCS#11 library. We conduct a thorough security/risk analysis, and reflect on functional achievements and shortcomings.

Paper Citation

in Harvard Style

Reimair F., Teufl P., Kollmann C. and Thaller C. (2015). MoCrySIL – Carry Your Cryptographic Keys in Your Pocket . In Proceedings of the 12th International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2015) ISBN 978-989-758-117-5, pages 285-292. DOI: 10.5220/0005547902850292

in Bibtex Style

@conference{secrypt15,
author={Florian Reimair and Peter Teufl and Christian Kollmann and Christoph Thaller},
title={MoCrySIL – Carry Your Cryptographic Keys in Your Pocket},
booktitle={Proceedings of the 12th International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2015)},
year={2015},
pages={285-292},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0005547902850292},
isbn={978-989-758-117-5},
}

in EndNote Style

TY - CONF
JO - Proceedings of the 12th International Conference on Security and Cryptography - Volume 1: SECRYPT, (ICETE 2015)
TI - MoCrySIL – Carry Your Cryptographic Keys in Your Pocket
SN - 978-989-758-117-5
AU - Reimair F.
AU - Teufl P.
AU - Kollmann C.
AU - Thaller C.
PY - 2015
SP - 285
EP - 292
DO - 10.5220/0005547902850292