Security and Communication Networks

Group authenticated key exchange schemes via learning with errors

Xiaopeng Yang, Wenping Ma, Chengli Zhang

Published Mar 5, 2015• 7 citations

Abstract

We propose a novel passively secure group key exchange GKE scheme via learning with errors LWE. Then, we extend it to a GKE scheme via ring-learning with errors. We show the security analysis of our GKE schemes based on the LWE assumption and the security property of secure sketch in the random oracle model. One of our innovative points is a simple and practical robust extractor that serves as the key derivation function. Based on our GKE scheme, we build a group authenticated key exchange scheme and then prove its security under the LWE assumption and the secure property of secure sketch in the random oracle model. The proposed scheme not only provides authenticated key exchange security and mutually authenticated security but also needs only two round communications to negotiate a shared session key. Copyright © 2015John Wiley & Sons, Ltd.

DOI: 10.1002/sec.1239

Related papers

New Authenticated Key Exchange Scheme Based on Ring Learning with Errors Problem

Xiaopeng Yang, Wenping Ma, Chengli Zhang

Using the hard assumption of Ring-Decision Learning With Errors (Ring-DLWE) in the lattice, a new Authenticated Key Exchange (AKE) scheme is proposed, which is based on the Peikert's reconciliation technique. Under the standard model, the proposed scheme is provably secure in the CK model, which is additionally achieves weak Perfect Forward Secrecy (wPFS). Compared with the current Key Exchange (KE) schemes based on the LWE, the proposed scheme not only protects the shared session key with balanced key derivation function but also resists quantum attacks because of the hard assumption on lattice problem.

Jan 1, 20151 citation

Design and Implementation of Constant-Round Dynamic Group Key Exchange from RLWE

Rakyong Choi, Dongyeon Hong, Seongho Han +3 more

Group Key Exchange (GKE) is required for secure group communication with high confidentiality. In particular, a trusted authority can handle issues that happen by the malicious actions of group members, but it is expensive to deploy and not suitable in a dynamic setting where the network requires frequent membership status changes. To overcome these issues, we designed yet another quantum-resistant constant-round GKE based on lattice without a trusted authority based on Apon et al.'s protocol (PQCrypto 2019) by modifying their key computation phase. Then, we describe the novel dynamic authenticated GKE (called DRAG) with membership addition/deletion procedures in Ring Learning with Errors (RLWE) setting, while the former ones are built from Diffie-Hellman problem. Under the specific adversary who can leak the long-term secret key from the party, we suggest a rigorous proof of DRAG in the random oracle model based on the hardness assumption of RLWE problem and the property of Rényi divergence. As a proof of concept, implementation details are described to meet level 1 NIST security. Our implementation is reasonable for practical use since the total runtime to get a group secret key takes about 3 msec and it can be considered as a reference implementation of other quantum-resistant GKEs.

IEEE AccessJan 1, 202014 citations

Quantum Safe Construction of Authentication and Key Exchange Based on Module Lattices

Sayan Banerjee, M Nikhilesh, Ankit Sharma +3 more

An authenticated mobile key exchange is necessary for post quantum secure communication over a public channel. It allows two entities to create a secure and unique session key for every communication session. We feel a need to design two party efficient and secure authenticated key agreement. We have also observed all the protocols given above are based on learning with error assumption over a finite ring. The ”Module Learning with Errors” assumption is the more appropriate choice among ”Learning with Errors” and ”Ring Learning with Errors” for designing practical password-authenticated key exchange protocols. With the help of ”Module Learning with Errors” assumption, and by lowering the number of ring polynomials, several implementations of the protocols can be realized. Therefore, this paper contains quantum safe, efficient, and practical ”Module Learning with Errors” assumption based authenticated key agreement protocol. The protocol’s security analysis is presented within the framework of the random oracle model.

IEEE Global Conference for Advancement in Technology (GCAT)Oct 6, 20233 citations

Design and analysis of group key exchange protocols

M. Choudary Gorantla

A group key exchange (GKE) protocol allows a set of parties to agree upon a common secret session key over a public network. In this thesis, we focus on designing efficient GKE protocols using public key techniques and appropriately revising security models for GKE protocols. For the purpose of modelling and analysing the security of GKE protocols we apply the widely accepted computational complexity approach. The contributions of the thesis to the area of GKE protocols are manifold. We propose the first GKE protocol that requires only one round of communication and is proven secure in the standard model. Our protocol is generically constructed from a key encapsulation mechanism (KEM). We also suggest an efficient KEM from the literature, which satisfies the underlying security notion, to instantiate the generic protocol. We then concentrate on enhancing the security of one-round GKE protocols. A new model of security for forward secure GKE protocols is introduced and a generic one-round GKE protocol with forward security is then presented. The security of this protocol is also proven in the standard model. We also propose an efficient forward secure encryption scheme that can be used to instantiate the generic GKE protocol. Our next contributions are to the security models of GKE protocols. We observe that the analysis of GKE protocols has not been as extensive as that of two-party key exchange protocols. Particularly, the security attribute of key compromise impersonation (KCI) resilience has so far been ignored for GKE protocols. We model the security of GKE protocols addressing KCI attacks by both outsider and insider adversaries. We then show that a few existing protocols are not secure against KCI attacks. A new proof of security for an existing GKE protocol is given under the revised model assuming random oracles. Subsequently, we treat the security of GKE protocols in the universal composability (UC) framework. We present a new UC ideal functionality for GKE protocols capturing the security attribute of contributiveness. An existing protocol with minor revisions is then shown to realize our functionality in the random oracle model. Finally, we explore the possibility of constructing GKE protocols in the attribute-based setting. We introduce the concept of attribute-based group key exchange (AB-GKE). A security model for AB-GKE and a one-round AB-GKE protocol satisfying our security notion are presented. The protocol is generically constructed from a new cryptographic primitive called encapsulation policy attribute-based KEM (EP-AB-KEM), which we introduce in this thesis. We also present a new EP-AB-KEM with a proof of security assuming generic groups and random oracles. The EP-AB-KEM can be used to instantiate our generic AB-GKE protocol.

Faculty of Science and Technology; Information Security InstituteJan 1, 20101 citation

Robustly Secure Two-Party Authenticated Key Exchange from Ring-LWE

Xiaopeng Yang, Wenping Ma, Zhang Cheng-li

Using the hard assumption of Ring-Decision Learning With Errors (DLWE) in the lattice, we propose a new authenticated key exchange (AKE) scheme which is based on Peikert’s reconciliation technique. Under the CK+ model, the proposed scheme is provably secure. Compared with the traditional Diffie-Hellman (DH) authenticated key exchange (AKE) schemes, the proposed scheme not only has better efficiency and stronger security but also resists quantum attacks because of the hard assumption on lattice problem. The comparisons between Ring-LWE based ones shows that the proposed scheme protects the shared session key with balanced key derivation function (KDF) compared with those current AKE schemes from LWE.

Jan 1, 20140 citations

Lattice Based Group Key Exchange Protocol in the Standard Model

Parhat Abla

Group key exchange schemes allow group members to agree on a session key. Although there are many works on constructing group key exchange schemes, but most of them are based on algebraic problems which can be solved by quantum algorithms in polynomial time. Even if several works considered lattice based group key exchange schemes, believed to be post-quantum secure, but only in the random oracle model. In this work, we propose a group key exchange scheme based on ring learning with errors problem. On contrast to existing schemes, our scheme is proved to be secure in the standard model. To achieve this, we define and instantiate multi-party key reconciliation mechanism. Furthermore, using known compiler with lattice based signature schemes, we can achieve authenticated group key exchange with postquantum security.

Jul 24, 20211 citation