Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences

An Attack on the Identity-Based Key Agreement Protocols in Multiple PKG Environment

JoongHyo Oh

Published Mar 1, 2006• 2 citations
Publisher

Abstract

Lee et al. recently proposed the first identity-based key agreement protocols for a multiple PKG environment where each PKG has different domain parameters in ICCSA 2005. However, this letter demonstrates that Lee et al.'s scheme does not include the property of implicit key authentication which is the fundamental security requirement, making it vulnerable to an impersonation attack.

DOI
10.1093/ietfec/e89-a.3.826

Related papers

Identity-based Authenticated Multiple Key Agreement Protocol with PKG Forward Security

Zuowen Tan

Authenticated multiple key agreement protocols not only allow participants to agree the multiple session keys within one run of the protocol but also ensure the authenticity of the other party.In 2011, Dehkordi et al. proposed an identity-based authenticated multiple key agreement protocol.In this paper, we demonstrate that Dehkordi et al.'s protocol is vulnerable to impersonation attacks.Furthermore, we have found that their protocol cannot provide perfect forward security or mutual security.Then we propose an identity-based authenticated multiple key agreement protocol which removes the weaknesses of the Dehkordi et al.'s protocol.Compared with the multiple key agreement protocols in the literature, the proposed protocol is more efficient and holds stronger security.

KSII Transactions on Internet and Information Systems•Jan 1, 2012•5 citations

Identity-basedAuthenticatedKeyAgreementProtocolCrossAutonomousDomains

Xue Zhang, Guangsong Li, 韩文报 +2 more

Abstract:Current identity-based authenticated key agreement schemes still have restriction on PKG system parameters.The assumption limits the application in real network environment.In order to solve these problems,an identity-based cross-domain authenticated key agreement protocol was proposed.There is no restriction on PKG system parameters so that public system parameters,system master keys and system public keys can be totally different.The security of this scheme was analyzed under the eCK model,and the result showed that this protocol satisfies the basic security requirements,perfect forward secrecy and PKG forward secrecy.Moreover,this protocol is robust to the existing attacks such as key compromise impersonation attack and ephemeral key compromise impersonation attack. Comparison with some typical identity-based multi-domain authenticated key agreement protocols showed that this scheme is more secure and efficient.

•Jan 1, 2015•0 citations

Identity based group key agreement in multiple PKG environment

Wang Liming, Wu Chuankun

Secure and reliable group communication is an increasingly active research area by growing popularity in group-oriented and collaborative applications. In this paper, we propose the first identity-based authenticated group key agreement in multiple private key generators (PKG) environment. It is inspired on a new two-party identity-based key agreement protocol first proposed by Hoonjung Lee et al. In our scheme, although each member comes from different domain and belongs to different PKGs which do not share the common system parameters, they can agree on a shared secret group key. We show that our scheme satisfies every security requirements of the group key agreement protocols.

Wuhan University Journal of Natural Sciences•Nov 1, 2006•1 citation

An efficient identity-based key agreement protocol in a multiple PKG environment

Huan Zhou, Xiaofeng Wang, Jinshu Su

Identity-based key agreement protocol affords a natural way to combine the participant’s identity with its public key. However, most of them just consider the key agreement in a single private key generator (PKG) environment. In addition, the existing key agreement protocols have a great computing overhead for mobile computing which is more and more popular today. This paper proposes a new identity based key agreement protocol. With the help of mathematical tools, we make our protocol applied in multiple PKG environment. It also satisfies all the security properties which is set for key agreement protocol. Moreover, some of its time-consuming operations can be delivered to untrusted public computation resources, so its computing complexity can be greatly reduced.

Wuhan University Journal of Natural Sciences•Sep 9, 2014•3 citations

Cryptanalysis and improvement of the Lee-Lee identity-based key agreement protocol

Shuangqing Liu, Shengbao Wang, Qizhen Wang +2 more

Authenticated key agreement protocols are essential for secure communications in open and distributed environments. The protocol design is, however, extremely error-prone due to the inherent complexity of this problem. In this paper, we revisit an efficient identity-based (ID-based) authenticated key agreement protocols due to Lee and Lee. We reveal previously unpublished flaws in the protocol, whereby we demonstrate that it is vulnerable to key control attacks which violate its claimed security attributes. We then put forward an improved protocol to fix the identified security problem.

International Conference on Information Management and Engineering (ICIME)•Jan 1, 2010•0 citations

Attack on some multi-party key agreement protocols

Kenneth G. Paterson

Lee et al. recently presented a collection of n + 1 different n-party key agreement protocols based on multi-linear forms. Here we show that n − 2 of the protocols are completely insecure, being vulnerable to impersonation attacks.

IEE proceedings. Information security•Jan 1, 2006•0 citations
Lee et al. recently proposed the first identity-based key agreement protocols for a multiple PKG environment where each PKG has different domain parameters in ICCSA 2005. However, this letter demonstrates that Lee et al.'s scheme does not include the property of implicit key authentication which is the fundamental security requirement, making it vulnerable to an impersonation attack.
Authenticated multiple key agreement protocols not only allow participants to agree the multiple session keys within one run of the protocol but also ensure the authenticity of the other party.In 2011, Dehkordi et al. proposed an identity-based authenticated multiple key agreement protocol.In this paper, we demonstrate that Dehkordi et al.'s protocol is vulnerable to impersonation attacks.Furthermore, we have found that their protocol cannot provide perfect forward security or mutual security.Then we propose an identity-based authenticated multiple key agreement protocol which removes the weaknesses of the Dehkordi et al.'s protocol.Compared with the multiple key agreement protocols in the literature, the proposed protocol is more efficient and holds stronger security.
Abstract:Current identity-based authenticated key agreement schemes still have restriction on PKG system parameters.The assumption limits the application in real network environment.In order to solve these problems,an identity-based cross-domain authenticated key agreement protocol was proposed.There is no restriction on PKG system parameters so that public system parameters,system master keys and system public keys can be totally different.The security of this scheme was analyzed under the eCK model,and the result showed that this protocol satisfies the basic security requirements,perfect forward secrecy and PKG forward secrecy.Moreover,this protocol is robust to the existing attacks such as key compromise impersonation attack and ephemeral key compromise impersonation attack. Comparison with some typical identity-based multi-domain authenticated key agreement protocols showed that this scheme is more secure and efficient.
Secure and reliable group communication is an increasingly active research area by growing popularity in group-oriented and collaborative applications. In this paper, we propose the first identity-based authenticated group key agreement in multiple private key generators (PKG) environment. It is inspired on a new two-party identity-based key agreement protocol first proposed by Hoonjung Lee et al. In our scheme, although each member comes from different domain and belongs to different PKGs which do not share the common system parameters, they can agree on a shared secret group key. We show that our scheme satisfies every security requirements of the group key agreement protocols.
Identity-based key agreement protocol affords a natural way to combine the participant’s identity with its public key. However, most of them just consider the key agreement in a single private key generator (PKG) environment. In addition, the existing key agreement protocols have a great computing overhead for mobile computing which is more and more popular today. This paper proposes a new identity based key agreement protocol. With the help of mathematical tools, we make our protocol applied in multiple PKG environment. It also satisfies all the security properties which is set for key agreement protocol. Moreover, some of its time-consuming operations can be delivered to untrusted public computation resources, so its computing complexity can be greatly reduced.
Authenticated key agreement protocols are essential for secure communications in open and distributed environments. The protocol design is, however, extremely error-prone due to the inherent complexity of this problem. In this paper, we revisit an efficient identity-based (ID-based) authenticated key agreement protocols due to Lee and Lee. We reveal previously unpublished flaws in the protocol, whereby we demonstrate that it is vulnerable to key control attacks which violate its claimed security attributes. We then put forward an improved protocol to fix the identified security problem.