Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Lecture notes in computer science

Universally Composable Symbolic Analysis of Mutual Authentication and Key-Exchange Protocols

Ran Canetti, Jonathan C. Herzog

Published Jan 1, 2006• 134 citations
Publisher
DOI
10.1007/11681878_20

Related papers

Universally composable symbolic analysis of mutual authentication and key exchange protocols

Ran Canetti, Jonathan C. Herzog

•Jan 1, 2006•0 citations

Computationally Sound Symbolic Criteria for UC-secure Multi-Party Mutual Authentication and Key Exchange Protocols

Muratani Hirofumi, Yoshikazu Hanatani

IEICE Technical Report; IEICE Tech. Rep.•Mar 9, 2007•1 citation

Universally Composable Symbolic Analysis of Diffie-Hellman based Key Exchange.

Ran Canetti, Sebastian Gajek

•Jan 1, 2010•17 citations

Universally Composable Authentication and Key-Exchange with Global PKI

Ran Canetti, Daniel Shahaf, Margarita Vald

Lecture notes in computer science•Jan 1, 2016•51 citations

Universal Composable Password Authenticated Key Exchange for the Post-Quantum World

You Lyu, Shengli Liu, Shuai Han

Lecture notes in computer science•Jan 1, 2024•10 citations

Computationally Sound Symbolic Security Reduction Analysis of Group Key Exchange Protocol using Bilinear Pairings.

Zijian Zhang, Liehuang Zhu, Lejian Liao

Canetti and Herzog have proposed a universally composable symbolic analysis (UCSA) of mutual authentication and key exchange protocols within universally composable security framework. It is fully automated and computationally sound symbolic analysis. Furthermore, Canetti and Gajek have analyzed Diffie-Hellman based key exchange protocols as an extension of their work. It deals with forward secrecy in case of fully adaptive party corruptions. However, their work only addresses two-party protocols that use public key encryptions, digital signatures and Diffie-Hellman exchange. We make the following contributions. First, we extend UCSA approach to analyze group key exchange protocols that use bilinear pairings exchange and digital signatures to resist insider attack under fully adaptive party corruptions with respect to forward secrecy. Specifically, we propose an formal algebra, and property of bilinear pairings in the execution of group key exchange protocol among arbitrary number of participants. This provides computationally sound and fully automated analysis. Second, we reduce the security of multiple group key exchange sessions among arbitrary number of participants to the security of a single group key exchange session among three participants. This improves the efficiency of security analysis.

•Jan 1, 2011•0 citations
Canetti and Herzog have proposed a universally composable symbolic analysis (UCSA) of mutual authentication and key exchange protocols within universally composable security framework. It is fully automated and computationally sound symbolic analysis. Furthermore, Canetti and Gajek have analyzed Diffie-Hellman based key exchange protocols as an extension of their work. It deals with forward secrecy in case of fully adaptive party corruptions. However, their work only addresses two-party protocols that use public key encryptions, digital signatures and Diffie-Hellman exchange. We make the following contributions. First, we extend UCSA approach to analyze group key exchange protocols that use bilinear pairings exchange and digital signatures to resist insider attack under fully adaptive party corruptions with respect to forward secrecy. Specifically, we propose an formal algebra, and property of bilinear pairings in the execution of group key exchange protocol among arbitrary number of participants. This provides computationally sound and fully automated analysis. Second, we reduce the security of multiple group key exchange sessions among arbitrary number of participants to the security of a single group key exchange session among three participants. This improves the efficiency of security analysis.