Simplified PACE|AA Protocol

                L. Hanzlik, K. Kluczniak, L. Krzywiecki, M.Kutylowski 
			  Wroclaw University of Technology

We present a protocol that merges Chip Authentication of a smart card 
with card owner  authorization via PACE  protocol implemented in German 
personal identity documents. We reduce the number of messages exchanged as
well as the number of exponentiations. This protocol also outperforms 
PACE|AA protocol presented at Financial Cryptography 2012 and has a more 
clear structure. The protocol enables  better protection of active authentication 
private key on a smart card than PACE|AA.
  
Moreover, we explicitly  formulate privacy security model that apparently 
was used by the authors of PACE|AA. 

presented at ISPEC 2013, Lanzhou

published in 
Information Security Practice and Experience
Lecture Notes in Computer Science Volume 7863, 2013, pp 218-232