cid 9109a26362426b6638cf5de3696d8f38b3f4c2c8d0a9265bc0ce9ef69920296f · original · open access · via openalex
Title: On the Security Analysis of PBKDF2 in OpenOffice Authors: Xiaochao Li; Cuicui Zhao; Kun Pan; Shuqiang Lin; Xiurong Chen; Benbin Chen; Deguang Le; Donghui Guo; Xiaochao Li Venue: Journal of Software Year: 2015 Canonical: doi:10.17706/jsw.10.2.116-126 URL: https://doi.org/10.17706/jsw.10.2.116-126 Collector: openalex OA: true ABSTRACT Password-based KDF2 (PBKDF2) is widely used in file authentication mechanism and file encryption which could produce a derived key more than 160 bits long.In this paper, the security of PBKDF2 algorithm and its implementation in OpenOffice are analyzed in two modes: CSP-secure mode (Chosen Single Parameter) and CMP-secure mode (Chosen Multiple Parameters).The theoretical security of PBKDF2 is proved in CSP-secure mode by using Game-Playing technology to quantify the upper bound of adversary's advantage.However, a security flaw is explored in CMP-secure mode.This paper presents three proposals to address the security flaw.With the theoretical derivation, the actual safety of the OpenOffice encrypted file has been discussed under the latest developments for GPU-accelerated key recovery attack capability.