Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Conference on Computer Application and System Modeling

Improvement of identity-based authenticated key agreement protocol

Chi Xu, Wen Fang Zhang, Zhen Hu

Published Oct 1, 2010• 0 citations
Publisher

Abstract

The security of a recently proposed ID-based authenticated key agreement protocol was analyzed,and an enhanced ID-based authenticated key agreement protocol is presented based on the previous work. a malicious PKG (private key generator) can still obtain all of the agreed session keys, that is, it doesn't provide PKG-forward secrecy in escrowless mode. Aiming at the security flaws of an existing ID-based key agreement Protocol and a key agreement Protocol for multi-trustdomain proposed based on the new variant mode of ID- Base public key infrastrueture(PKI), an improved scheme is proposed. The new scheme can avoid excessive power of KGC to make up the security flaws in the original protocols, which has a higher level of security. The new schemes have many properties such as equal contribution; non-key control; against man-in-middle attack; etc.

DOI
10.1109/iccasm.2010.5620218

Related papers

Analysis and improvement of an ID-based authenticated key agreement protocol

Xiao Guo-zhen

The security of a recently proposed ID-based authenticated key agreement protocol was analyzed. Although it is provably secure in the standard model, a malicious PKG （private key generator） can still obtain all of the agreed ses-sion keys, that is, it doesn’t provide PKG-forward secrecy in escrowless mode. To satisfy the security requirement in es-crowless mode, an improved version of the protocol was presented and it was proved to be a secure authenticated key agreement in the standard model. Results show that it provides perfect forward secrecy and PKG-forward secrecy.

Journal of Communications•Jan 1, 2008•2 citations

Analysis and improvement of identity-based authenticated key agreement

MU Ning-bo

The security of a provably secure identity-based authenticated key agreement protocol in the standard model was analyzed,and it was found that the protocol used in escrowless mode has security flaws.When the private key generator(PKG) is controlled or attacked,all of the session keys can be obtained.To resist this attack,the identity-based authenticated key agreement protocol was improved.This new protocol was proven to be secure in the standard model and has the property of not needing session key escrow.

Harbin Gongcheng Daxue Xuebao/Journal of Harbin Engineering University•Jan 1, 2009•0 citations

Analysis and improvement of ID-based authenticated key agreement protocols

Qiuliang Xu

The security attributes of three provable secure ID-based authenticated key agreement protocols are analyzed,and an enhanced ID-based authenticated key agreement protocol is presented based on the previous work.The new scheme achieves most of the known security attributes,such as known-key secrecy,key-compromise impersonation resilience,unknown key-share resilience,no-key control and message independence,especially the PKG-forward secrecy and known session-specific temporary information secrecy attributes,meanwhile keeping with the nice efficiency.

Computer Engineering and Applications Journal•Jan 1, 2010•0 citations

A Secure ID-Based Explicit Authenticated Key Agreement Protocol without Key Escrow

Mengbo Hou, Qiuliang Xu

Key agreement protocols are essential for secure communications in open and distributed environments. Identity-based cryptography has become extremely fashionable in the last few years for its special advantages. In this paper, we point out some flaw in the scheme proposed by Wang et al., then we present a two-party identity-based explicit authenticated key agreement protocol with key confirmation, which was inspired on a new identity-based encryption scheme first proposed by Gentry and can be used properly in the escrowless mode. The scheme captures the attributes of known-key secrecy, key-compromise impersonation resilience, unknown key-share resilience, perfect forward secrecy, and no-key control. Especially, the scheme captures the PKG forward secrecy property. The PKG still could not recover all the userspsila past session keys even he knows the long-term private keys of all users.

International Conference on Information Assurance and Security (IAS)•Jan 1, 2009•1 citation

A one-round ID-based authenticated key agreement protocol with enhanced security

Mengbo Hou, Qiuliang Xu

Authenticated key agreement protocol is used to set up the session key and establish secure channel for network communication in the open environment. So far, great deals of identity-based protocols have been proposed to provide robust mutual authentication and key establishment in the two-party setting. Majority of the existing identity-based key agreement protocols require expensive bilinear pairing operation and only provide limited security attributes. Therefore, such protocols are unsuitable for real-world applications that require stronger sense of secrecy. In this paper, we first analysis some of the schemes proposed recently, and then present a one-round ID-based authenticated key agreement protocol with enhanced security attributes, which doesn't need pairing operation and achieves most of the required security attributes, such as known-key secrecy, perfect forward secrecy, PKG Forward Secrecy, key-compromise impersonation resilience, unknown key-share resilience and no key control. In addition, it captures the enhanced security attributes-Known session-specific temporary key information secrecy.

International Conference on Intelligent Control and Information Processing•Jul 1, 2011•2 citations

An Efficiency Improved ID-based Tripartite Key Agreement Protocol

Park Young-Ho, Rhee Kyung-Hyune

As the ID-based public key cryptosystems become a very active research area, a number of ID-based key agreement protocols have been proposed, but unfortunately many of them were analyzed that there were some security flaws in the protocols. In addition to key agreement protocols, in recent, Liu et al. and Kim et al. proposed the key agreement protocols that multiple session keys are established at once among participated entities. In this paper, we propose an ID-based tripartite key agreement protocol that establishes 8 keys by improving the efficiency of the Liu et al's. Moreover, the proposed protocol can be used in the situation where multiple different private key generators(PKG) are involved. Therefore, because the private key issued by different PKGs belonging to each entity's domain can be used, our proposed scheme is more efficiently applicable to the practical applications.

Information Security and Cryptology•Jan 1, 2005•0 citations
The security of a recently proposed ID-based authenticated key agreement protocol was analyzed,and an enhanced ID-based authenticated key agreement protocol is presented based on the previous work. a malicious PKG (private key generator) can still obtain all of the agreed session keys, that is, it doesn't provide PKG-forward secrecy in escrowless mode. Aiming at the security flaws of an existing ID-based key agreement Protocol and a key agreement Protocol for multi-trustdomain proposed based on the new variant mode of ID- Base public key infrastrueture(PKI), an improved scheme is proposed. The new scheme can avoid excessive power of KGC to make up the security flaws in the original protocols, which has a higher level of security. The new schemes have many properties such as equal contribution; non-key control; against man-in-middle attack; etc.
The security of a recently proposed ID-based authenticated key agreement protocol was analyzed. Although it is provably secure in the standard model, a malicious PKG （private key generator） can still obtain all of the agreed ses-sion keys, that is, it doesn’t provide PKG-forward secrecy in escrowless mode. To satisfy the security requirement in es-crowless mode, an improved version of the protocol was presented and it was proved to be a secure authenticated key agreement in the standard model. Results show that it provides perfect forward secrecy and PKG-forward secrecy.
The security of a provably secure identity-based authenticated key agreement protocol in the standard model was analyzed,and it was found that the protocol used in escrowless mode has security flaws.When the private key generator(PKG) is controlled or attacked,all of the session keys can be obtained.To resist this attack,the identity-based authenticated key agreement protocol was improved.This new protocol was proven to be secure in the standard model and has the property of not needing session key escrow.
The security attributes of three provable secure ID-based authenticated key agreement protocols are analyzed,and an enhanced ID-based authenticated key agreement protocol is presented based on the previous work.The new scheme achieves most of the known security attributes,such as known-key secrecy,key-compromise impersonation resilience,unknown key-share resilience,no-key control and message independence,especially the PKG-forward secrecy and known session-specific temporary information secrecy attributes,meanwhile keeping with the nice efficiency.
Key agreement protocols are essential for secure communications in open and distributed environments. Identity-based cryptography has become extremely fashionable in the last few years for its special advantages. In this paper, we point out some flaw in the scheme proposed by Wang et al., then we present a two-party identity-based explicit authenticated key agreement protocol with key confirmation, which was inspired on a new identity-based encryption scheme first proposed by Gentry and can be used properly in the escrowless mode. The scheme captures the attributes of known-key secrecy, key-compromise impersonation resilience, unknown key-share resilience, perfect forward secrecy, and no-key control. Especially, the scheme captures the PKG forward secrecy property. The PKG still could not recover all the userspsila past session keys even he knows the long-term private keys of all users.
Authenticated key agreement protocol is used to set up the session key and establish secure channel for network communication in the open environment. So far, great deals of identity-based protocols have been proposed to provide robust mutual authentication and key establishment in the two-party setting. Majority of the existing identity-based key agreement protocols require expensive bilinear pairing operation and only provide limited security attributes. Therefore, such protocols are unsuitable for real-world applications that require stronger sense of secrecy. In this paper, we first analysis some of the schemes proposed recently, and then present a one-round ID-based authenticated key agreement protocol with enhanced security attributes, which doesn't need pairing operation and achieves most of the required security attributes, such as known-key secrecy, perfect forward secrecy, PKG Forward Secrecy, key-compromise impersonation resilience, unknown key-share resilience and no key control. In addition, it captures the enhanced security attributes-Known session-specific temporary key information secrecy.
As the ID-based public key cryptosystems become a very active research area, a number of ID-based key agreement protocols have been proposed, but unfortunately many of them were analyzed that there were some security flaws in the protocols. In addition to key agreement protocols, in recent, Liu et al. and Kim et al. proposed the key agreement protocols that multiple session keys are established at once among participated entities. In this paper, we propose an ID-based tripartite key agreement protocol that establishes 8 keys by improving the efficiency of the Liu et al's. Moreover, the proposed protocol can be used in the situation where multiple different private key generators(PKG) are involved. Therefore, because the private key issued by different PKGs belonging to each entity's domain can be used, our proposed scheme is more efficiently applicable to the practical applications.