Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Informatica

An Improved Conference-Key Agreement Protocol with Forward Secrecy

Yuh‐Min Tseng

Published Jan 1, 2005• 27 citations
Publisher

Abstract

Recently, Tzeng proposed a provably secure and fault-tolerant conference-key agreement protocol. It requires only a constant number of rounds to establish a conference key among all honest participants. This article will show that Tzeng’s protocol does not offer forward secrecy. We say that a conference-key agreement protocol offers forward secrecy if the long-term secret key of any participant is compromised and will not result in the compromise of the previously established conference keys. This property is important and has been included in most key agreement protocols and standards. In this paper, an improvement based on Tzeng’s protocol is proposed and it achieves forward secrecy. Under the Diffie–Hellman decision problem assumption and the random oracle model, we show that the proposed protocol can withstand passive attacks and is secure against impersonator’s attacks. The improved protocol requires a constant number of rounds to compute a conference key. The improved protocol provides fault-tolerance.

DOI
10.15388/informatica.2005.098

Related papers

An Improved Conference-Key Agreement Protocol with Forward Secrecy

TsengYuh-Min

Recently, Tzeng proposed a provably secure and fault-tolerant conference-key agreement protocol. It requires only a constant number of rounds to establish a conference key among all honest particip...

•Apr 1, 2005•0 citations

A secure fault-tolerant conference-key agreement protocol

Wen-Guey Tzeng

When a group of people want to communicate securely over an open network, they run a conference-key protocol to establish a common conference key K such that all their communications thereafter are encrypted with the key K. In this paper, we propose a provably secure fault-tolerant conference-key agreement protocol under the authenticated broadcast channel model. We show that a passive adversary gets zero knowledge about the conference key established by the honest participants under the assumption of a variant Diffie-Hellman (1976) decision problem. We also show that the honest participants can agree on a common conference key no matter how many participants are malicious. Furthermore, we show that even if the broadcast channel is not authenticated, our protocol is secure against impersonators under the random oracle model.

IEEE Transactions on Computers•Apr 1, 2002•90 citations

An improved fault-tolerant conference-key agreement protocol with forward secrecy

Orhan Ermiş, Şerif Bahtıyar, Emin Anarım +1 more

The pervasive usage of the Internet has made secure group communications a significant issue. Conference key agreement protocols provide secure group communications against some attacks with lower computational cost in the Internet. However, forward secrecy is a challenging issue in the existing protocols, where it is preserved either the long-term key of a participant is compromised. In this study, we propose an improved conference key agreement protocol with forward secrecy. Besides providing forward secrecy, the proposed protocol preserves the same security level with existing ones.

International Conference on Security of Information and Networks (SIN)•Nov 26, 2013•5 citations

Identity-based fault-tolerant conference key agreement

Xun Yi

Lots of conference key agreement protocols have been suggested to secure computer network conference. Most of them operate only when all conferees are honest, but do not work when some conferees are malicious and attempt to delay or destruct the conference. Recently, Tzeng proposed a conference key agreement protocol with fault tolerance in terms that a common secret conference key among honest conferees can be established even if malicious conferees exist. In the case where a conferee can broadcast different messages in different subnetworks, Tzeng's protocol is vulnerable to a "different key attack" from malicious conferees. In addition, Tzeng's protocol requires each conferee to broadcast to the rest of the group and receive n - 1 message in a single round (where n stands for the number of conferees). Moreover, it has to handle n simultaneous broadcasts in one round. In this paper, we propose a fault-tolerant conference key agreement protocol, in which each conferee only needs to send one message to a "semitrusted" conference bridge and receive one broadcast message. Our protocol is an identity-based key agreement, built on elliptic curve cryptography. It is resistant to the different key attack from malicious conferees and needs less communication cost than Tzeng's protocol.

IEEE Transactions on Dependable and Secure Computing•Jul 1, 2004•40 citations

An Improved Conference Key Agreement Protocol

Xinglan Zhang, Quanmin Wang

A conference-key protocol is used to establish a common conference key K such that a group of people can communicate securely over a public network. To improve the implementation efficiency of Tzeng¿s conference-key agreement protocol, an efficient conference-key agreement protocol is proposed under the authenticated broadcast channel. First, the improved protocol is round-efficient, and relaxes the waiting time for fault-check. Second, it reduces the computational complexity by revoking the signature procedure in the Tzeng¿s protocol. It is provably secure in the standard model under the DDH assumption.

International Conference on Computational Intelligence and Security (CIS)•Dec 1, 2008•2 citations

An efficient and secure fault-tolerant conference-key distribution scheme

Yuanbo Guo, Jianfeng Ma

An original approach to establish a computationally secure and robust conference key between multiple users is presented, which is built on known secret sharing schemes and requires the authenticated and encrypted point-to-point channels between servers and users. By running of the protocol, every honest user of a given conference can get a common key, even if a minority of the servers malfunction or misbehave. This scheme does not rely on any unproven cryptographic assumptions or on the availability of any tamper-proof hardware. By using zero knowledge proof, any corrupted information and incorrect results can be detected. And by distributing the sensitive security information across several servers and never reconstructing any key at a single location, the compromise of a few servers will not compromise the privacy of any key. Analysis shows that under the assumption of a Diffie-Hellman decisional problem, a passive adversary gets zero knowledge about the conference key, and in the random oracle model, an active adversary cannot impersonate successfully. We have implemented the scheme in a distributed environment. By conducting a number of experiments in the fault-free case and various fault scenarios, we show that it has an acceptable performance of practicability.

IEEE Transactions on Consumer Electronics•May 1, 2004•8 citations
Recently, Tzeng proposed a provably secure and fault-tolerant conference-key agreement protocol. It requires only a constant number of rounds to establish a conference key among all honest participants. This article will show that Tzeng’s protocol does not offer forward secrecy. We say that a conference-key agreement protocol offers forward secrecy if the long-term secret key of any participant is compromised and will not result in the compromise of the previously established conference keys. This property is important and has been included in most key agreement protocols and standards. In this paper, an improvement based on Tzeng’s protocol is proposed and it achieves forward secrecy. Under the Diffie–Hellman decision problem assumption and the random oracle model, we show that the proposed protocol can withstand passive attacks and is secure against impersonator’s attacks. The improved protocol requires a constant number of rounds to compute a conference key. The improved protocol provides fault-tolerance.
When a group of people want to communicate securely over an open network, they run a conference-key protocol to establish a common conference key K such that all their communications thereafter are encrypted with the key K. In this paper, we propose a provably secure fault-tolerant conference-key agreement protocol under the authenticated broadcast channel model. We show that a passive adversary gets zero knowledge about the conference key established by the honest participants under the assumption of a variant Diffie-Hellman (1976) decision problem. We also show that the honest participants can agree on a common conference key no matter how many participants are malicious. Furthermore, we show that even if the broadcast channel is not authenticated, our protocol is secure against impersonators under the random oracle model.
The pervasive usage of the Internet has made secure group communications a significant issue. Conference key agreement protocols provide secure group communications against some attacks with lower computational cost in the Internet. However, forward secrecy is a challenging issue in the existing protocols, where it is preserved either the long-term key of a participant is compromised. In this study, we propose an improved conference key agreement protocol with forward secrecy. Besides providing forward secrecy, the proposed protocol preserves the same security level with existing ones.
Lots of conference key agreement protocols have been suggested to secure computer network conference. Most of them operate only when all conferees are honest, but do not work when some conferees are malicious and attempt to delay or destruct the conference. Recently, Tzeng proposed a conference key agreement protocol with fault tolerance in terms that a common secret conference key among honest conferees can be established even if malicious conferees exist. In the case where a conferee can broadcast different messages in different subnetworks, Tzeng's protocol is vulnerable to a "different key attack" from malicious conferees. In addition, Tzeng's protocol requires each conferee to broadcast to the rest of the group and receive n - 1 message in a single round (where n stands for the number of conferees). Moreover, it has to handle n simultaneous broadcasts in one round. In this paper, we propose a fault-tolerant conference key agreement protocol, in which each conferee only needs to send one message to a "semitrusted" conference bridge and receive one broadcast message. Our protocol is an identity-based key agreement, built on elliptic curve cryptography. It is resistant to the different key attack from malicious conferees and needs less communication cost than Tzeng's protocol.
A conference-key protocol is used to establish a common conference key K such that a group of people can communicate securely over a public network. To improve the implementation efficiency of Tzeng¿s conference-key agreement protocol, an efficient conference-key agreement protocol is proposed under the authenticated broadcast channel. First, the improved protocol is round-efficient, and relaxes the waiting time for fault-check. Second, it reduces the computational complexity by revoking the signature procedure in the Tzeng¿s protocol. It is provably secure in the standard model under the DDH assumption.
An original approach to establish a computationally secure and robust conference key between multiple users is presented, which is built on known secret sharing schemes and requires the authenticated and encrypted point-to-point channels between servers and users. By running of the protocol, every honest user of a given conference can get a common key, even if a minority of the servers malfunction or misbehave. This scheme does not rely on any unproven cryptographic assumptions or on the availability of any tamper-proof hardware. By using zero knowledge proof, any corrupted information and incorrect results can be detected. And by distributing the sensitive security information across several servers and never reconstructing any key at a single location, the compromise of a few servers will not compromise the privacy of any key. Analysis shows that under the assumption of a Diffie-Hellman decisional problem, a passive adversary gets zero knowledge about the conference key, and in the random oracle model, an active adversary cannot impersonate successfully. We have implemented the scheme in a distributed environment. By conducting a number of experiments in the fault-free case and various fault scenarios, we show that it has an acceptable performance of practicability.