Cryptographic research results on GP SCP Protocols

[tay00000]

Cryptographers have posted a paper on their recent attempts to attack the GlobalPlatform Secure Channel Protocol suite.

The research paper concludes that SCP02 is getting weak and SCP03 protocol is pretty strong and resist attempts to attack the protocol and provides resilience against attempts for possible backdoors if used correctly.

You may view the research paper here (https://eprint.iacr.org/2017/032).

For anyone using SCP protocol for security, please start to migrate away from the weakened SCP02 (and consider it as legacy protocol) and favour the newer SCP03 protocol which have been proven in the research paper to be secure.

On top of that, I have sent an email to Feitian personally to request them to add support for SCP03 whenever possible in their products.

Have fun reading the paper .

[UNKNwYSHSA]

Thank you for share this.

[tay00000]

Do note that the paper stresses on the importance of nonce and IV being random when needed instead of hard-coded IVs and nonces that are always re-used and never permutated.