Cryptographic Attack Metrics

When evaluating systems containing cryptographic components, the question arises how to measure the security provided by the cryptography included in the system. In this chapter we highlight the difficulties involved and show that, while measuring cryptographic security is desirable, the opposite point of view, i.e. measuring cryptographic insecurity using attack metrics, yields useful results and behaves reasonably under composition of cryptographic components.

Authors and Affiliations

1. University of Mannheim, Germany

   Zinaida Benenson

2. Sirrix AG security technologies, Germany

   Ulrich Kühn

3. Bauhaus-Universität Weimar, Germany

   Stefan Lucks

Reprints and permissions

© 2008 Springer-Verlag Berlin Heidelberg

Policies and ethics