Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

Covert identity information in direct anonymous attestation (DAA)

: Rudolph, C.


Venter, H. ; International Federation for Information Processing -IFIP-, Technical Committee 11, Security and Protection in Information Processing Systems:
New approaches for security, privacy and trust in complex environments. Proceedings of the IFIP TC 11 22nd International Information Security Conference, SEC 2007 : 14-16 May 2007, Sandton, South Africa
Berlin: Springer, 2007 (IFIP International Federation for Information Processing 232)
ISBN: 978-0-387-72366-2
ISBN: 0-387-72366-8
International Information Security Conference (SEC) <22, 2007, Sandton>
Fraunhofer SIT ()
direct anonymous attestation; privacy

Direct anonymous attestation (DAA) is a practical and efficient protocol for authenticated attestation with satisfaction of strong privacy requirements. This recently developed protocol is already adopted by the Trusted Computing Group and included in the standardized trusted platform module TPM. This paper shows that the main privacy goal of DAA can be violated by the inclusion of covert identity information. This problem is very relevant, as the privacy attack is both efficient and very difficult to detect.