Cryptanalysis and improvement of an elliptic curve based signcryption scheme for firewalls.

• Main Authors: Malik Zia, Rashid Ali
• Format: Article
• Language: English
• Published: Public Library of Science (PLoS) 2018-01-01
• Series: PLoS ONE
• Online Access: https://doi.org/10.1371/journal.pone.0208857

In network security, firewall is a security system that observes and controls the network traffic based on some predefined rules. A firewall sets up a barrier between internal network and another outside unsecured network, such as the Internet. A number of signcryption schemes for firewall are proposed over the years, many of them are proved to have security flaws. In this paper, an elliptic curve based signcryption scheme for firewalls is analyzed. It is observed that the scheme is not secure and has many security flaws. Anyone who knows the public parameters, can modify the message without the knowledge of sender and receiver. The claimed security attributes of non-repudiation, unforgeability, integrity and authentication are compromised. After successful cryptanalysis of this scheme, we proposed a modified version of the scheme.