2MLS Secure Channel Handshake for Low-Overhead One-to-One Messaging
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Messaging Layer Security Protocol (MLS) is inefficient and has significant overhead in one-to-one (2-party) secure channel scenarios compared to other two-party secure channel protocols, lacking support for post-quantum security and asynchronous operation.
Innovation Solution
A modified MLS protocol, referred to as 2MLS, is introduced to reduce communication and computation overhead in two-party scenarios by incorporating minimal changes, supporting post-quantum security, symmetric endpoints, and enabling synchronous and asynchronous operations, with features like session resumption and multi-device support.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the Messaging Layer Security Protocol is used for secure communication, then security guarantees are provided, but communication overhead and computation overhead increase significantly in one-to-one scenarios
Solution Approach 1:
The patent segments the MLS protocol into two distinct modes: 2MLS for two-party communication and full MLS for group communication. This segmentation allows optimization of the protocol for specific scenarios, reducing overhead in one-to-one communication while maintaining security guarantees through the use of simplified handshake procedures and optimized key derivation paths.
Solution Approach 2:
The patent applies local quality by implementing scenario-specific optimizations within the MLS framework. For two-party communication, it uses simplified key derivation functions and reduced message exchange sequences tailored to 1:1 scenarios, while maintaining the full cryptographic security model. This allows the protocol to have different operational characteristics in different contexts without compromising overall security.
2Reliability
If the Messaging Layer Security Protocol is used for secure communication, then security guarantees are provided, but computation overhead increases significantly in one-to-one scenarios
Solution Approach 1:
The patent extracts and removes unnecessary computational elements from the full MLS protocol when applied to two-party communication. This includes eliminating key derivation paths and cryptographic operations that are specific to group scenarios, thereby reducing computation overhead while preserving the essential security guarantees through retained core cryptographic mechanisms.
Solution Approach 2:
The patent changes operational parameters of the MLS protocol for two-party scenarios, including using simplified key derivation functions, reduced roundtrip counts, and optimized message formats. These parameter changes reduce computational complexity and energy consumption while maintaining the cryptographic security model intact.
3Adaptability or versatility
If the Messaging Layer Security Protocol is used, then group key establishment is supported, but efficiency decreases in one-to-one communication compared to dedicated two-party protocols
Solution Approach 1:
The patent implements dynamic protocol selection, allowing the system to automatically choose between 2MLS mode for two-party communication and full MLS mode for group communication. This dynamic adaptation optimizes communication efficiency by using the most appropriate protocol variant for each scenario, eliminating the inefficiency of using full MLS for 1:1 communication while preserving group key establishment capabilities when needed.
Data Source
AI summary
Presented herein is a Message Layer Security (MLS)-based secure channel communication arrangement that involves a minimal set of changes to the MLS standard to reduce the redundant overhead in case of two-party (one-to-one or 1:1) communication. These techniques reduce the communication and computation complexity of both devices involved in establishing and supporting the one-to-one secure channel communication. Methods are provided to establish a one-to-one secure channel between a first endpoint and a second endpoint by performing a one-to-one secure channel handshake.