Cryptographic research results on GP SCP Protocols
Posted: Tue Jan 17, 2017 11:13 pm
Cryptographers have posted a paper on their recent attempts to attack the GlobalPlatform Secure Channel Protocol suite.
The research paper concludes that SCP02 is getting weak and SCP03 protocol is pretty strong and resist attempts to attack the protocol and provides resilience against attempts for possible backdoors if used correctly.
You may view the research paper here (https://eprint.iacr.org/2017/032).
For anyone using SCP protocol for security, please start to migrate away from the weakened SCP02 (and consider it as legacy protocol) and favour the newer SCP03 protocol which have been proven in the research paper to be secure.
On top of that, I have sent an email to Feitian personally to request them to add support for SCP03 whenever possible in their products.
Have fun reading the paper
.
The research paper concludes that SCP02 is getting weak and SCP03 protocol is pretty strong and resist attempts to attack the protocol and provides resilience against attempts for possible backdoors if used correctly.
You may view the research paper here (https://eprint.iacr.org/2017/032).
For anyone using SCP protocol for security, please start to migrate away from the weakened SCP02 (and consider it as legacy protocol) and favour the newer SCP03 protocol which have been proven in the research paper to be secure.
On top of that, I have sent an email to Feitian personally to request them to add support for SCP03 whenever possible in their products.
Have fun reading the paper
.