Mega Key Authentication Mechanism

TL;DR

Mega introduces a hierarchical authentication system centered around a single identity key to ensure the authenticity of cryptographic keys, thereby preventing impersonation and MitM attacks in secure communications.

Contribution

The paper presents a novel hierarchical authentication mechanism that simplifies key verification by consolidating it into a single identity key, enhancing security and usability.

Findings

Provides a unified authentication framework for multiple key types

Reduces risk of impersonation and MitM attacks

Simplifies key management for users

Abstract

For secure communication it is not just sufficient to use strong cryptography with good and strong keys, but to actually have the assurance, that the keys in use for it are authentic and from the contact one is expecting to communicate with. Without that, it is possible to be subject to impersonation or man-in-the-middle (MitM) attacks. Mega meets this problem by providing a hierarchical authentication mechanism for contacts and their keys. To avoid any hassle when using multiple types of keys and key pairs for different purposes, the whole authentication mechanism is brought down to a single "identity key".