Yes, FHMQV works perfectly with Elliptic Curves. Yes, AFAIK it offers PFS. It is an extension of Hugo Krawczyk's HMQV - I suggest Googling and reading his HMQV paper and presentation to IEEE.
The only concerns with it (that I'm aware of) are of the legal kind (unexpired patents). Depending on your threat model (do you ever expect ephemeral secrets to leak, and if so - under what conditions?) you may be happy with plain ECMQV (read the paper by Menezes published in response to Hugo's points). It's patent should expire before HMQV (and therefore before FHMQV). Thanks! On Apr 22, 2014, at 5:12 , steven m <[email protected]> wrote: > > > Hi all, > > I am working on a home project and I wanted to implement an authenticated > ephemeral key exchange using Elliptic curves. I first thought about > Station-to-Station with EC protocol, but it does not seem to be available in > crypto++. The ECDH does not offer authentication, ECMQV seems to be broken > and fixed with FHMQV. > > But does FHMQV work with elliptic curves? Can it offer forward secrecy? Are > they any know weakness to this algorithm? Would FHMQV be my best choice for > an authenticated ephemeral key exchange using Elliptic curves? > > > > Thanks for any help. > > > > Steven > > > -- > -- > You received this message because you are subscribed to the "Crypto++ Users" > Google Group. > To unsubscribe, send an email to [email protected]. > More information about Crypto++ and this group is available at > http://www.cryptopp.com. > --- > You received this message because you are subscribed to the Google Groups > "Crypto++ Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- -- You received this message because you are subscribed to the "Crypto++ Users" Google Group. To unsubscribe, send an email to [email protected]. More information about Crypto++ and this group is available at http://www.cryptopp.com. --- You received this message because you are subscribed to the Google Groups "Crypto++ Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
