Merkle puzzles

E102538

Merkle puzzles are an early cryptographic protocol that introduced the concept of public-key exchange by allowing two parties to establish a shared secret over an insecure channel using computationally asymmetric “puzzle” problems.

All labels observed (3)

How this entity was disambiguated

Statements (49)

Predicate Object
instanceOf cryptographic protocol
key establishment scheme
key exchange protocol
public-key cryptography scheme
basedOn puzzle problems
category foundational cryptographic constructions
key-agreement protocols
describedIn New Directions in Cryptography
surface form: Secure Communications Over Insecure Channels
field cryptography
hasGoal establish a shared secret over an insecure channel
hasProperty adversary requires quadratic work to break
computationally secure under bounded adversary
honest parties perform linear work
information-theoretically insecure
provides only limited security level
security grows quadratically with adversary work
hasStep Alice and Bob share the secret key from that puzzle
Alice generates many encrypted puzzles
Alice identifies which puzzle Bob solved
Alice sends all puzzles to Bob over insecure channel
Merkle puzzles self-linksurface differs
surface form: Bob obtains a secret key from the solved puzzle

Bob randomly selects and solves one puzzle
Bob uses the secret key to authenticate himself to Alice
historicalSignificance introduced idea of public discussion to establish a secret
one of the earliest public-key style protocols
inspired Diffie–Hellman key exchange
Merkle’s later work on public-key systems
development of public-key cryptography
introducedBy Ralph Merkle
involvesParty Alice
Bob
eavesdropper
limitation high communication overhead
not practical for high security levels
requires large number of puzzles
vulnerable to adversaries with very high computational power
proposedBy Ralph Merkle
publishedIn Communications of the ACM
relatedTo Diffie–Hellman key exchange
public-key cryptography
symmetric-key cryptography
securityModel adversary limited by computational resources
threatModel passive eavesdropping adversary
usesConcept computational asymmetry
one-way functions
public discussion over insecure channel
symmetric-key encryption
yearProposed 1974
yearPublished 1978

How these facts were elicited

Referenced by (5)

Full triples — surface form annotated when it differs from this entity's canonical label.

Ralph Merkle notableWork Merkle puzzles
Ralph Merkle hasConceptNamedAfter Merkle puzzles
Merkle knownFor Merkle puzzles
subject surface form: Ralph Merkle
this entity surface form: Merkle’s puzzles
Merkle puzzles hasStep Merkle puzzles self-linksurface differs
this entity surface form: Bob obtains a secret key from the solved puzzle