Securing DNSSEC Keys via Threshold ECDSA from Generic MPC

Publikation: Bidrag til bog/antologi/rapport/proceedingKonferencebidrag i proceedingsForskningpeer review

Deployment of DNSSEC, although increasing, still suffers from many practical issues that results in a false sense of security. While many domains outsource zone management, they also have to outsource DNSSEC key management to the DNS operator, making the operator an attractive target for attackers. Moreover, DNSSEC does not provide any sort of protection in the case the operator itself decides to serve false information, for example, if it gets compromised.

In this work, we show how to use techniques from threshold ECDSA: (1) to protect keys such that domains do not reveal their signing keys to a DNS operator, and (2) to protect the operational integrity of DNS operator. As a result of being highly specialized, prior work on threshold ECDSA has focused on a limited set of threat models, and none have so far considered techniques to amortize signature generation. Our work takes a different approach and presents a generic technique for obtaining a threshold ECDSA protocol from any secure multiparty computation protocol that works over an appropriate finite field. We show how this technique lends itself to very efficient threshold signing protocols by comparing it against state-of-the-art protocols from both academia and industry. For similar threat models, our protocols are as fast as the previous best protocol in terms of signing, and up to an order of magnitude faster for key generation on a fast network. Finally, we show how to integrate our application into a widely used DNS management software and demonstrate through experiments the overhead compared to traditional DNSSECs.
TitelEuropean Symposium on Research in Computer Security : Computer Security – ESORICS 2020
RedaktørerLiqun Chen, Steve Schneider, Ninghui Li, Kaitai Liang
Antal sider19
ISBN (trykt)9783030590123
ISBN (Elektronisk)978-3-030-59013-0
StatusUdgivet - 2020
Begivenhed25th European Symposium on Research in Computer Security : Computer Security - ESORICS 2020 - Guildford, Storbritannien
Varighed: 14 sep. 202018 sep. 2020
Konferencens nummer: 25


Konference25th European Symposium on Research in Computer Security
SerietitelLecture Notes in Computer Science

Se relationer på Aarhus Universitet Citationsformater

ID: 197153669