Recently, Cao et al. proposed an identity-based pairing-free two-party authenticated key agreement (ID-2PAKA) protocol using elliptic curve cryptography (ECC). We have shown that Cao's protocol is vulnerable to two attacks called known session-specific temporary information attack (KSTIA) and key off-set attack (KOA). In this paper, we proposed an improved paring-free ID-2PAKA protocol based on ECC that not only eliminates the weaknesses of Cao et al.’s protocol, but also provides resilience against other known attacks, the detail security of which are provided. Our protocol requires minimal message exchanges and minimum computational overheads. Finally, the proposed protocol has been compared with other relevant protocols and expected outcome has been found.
Recently, Cao et al. proposed an identity-based pairing-free two-party authenticated key agreement (ID-2PAKA) protocol using elliptic curve cryptography (ECC). We have shown that Cao's protocol is vulnerable to two attacks called known session-specific temporary information attack (KSTIA) and key off-set attack (KOA). In this paper, we proposed an improved paring-free ID-2PAKA protocol based on ECC that not only eliminates the weaknesses of Cao et al.’s protocol, but also provides resilience against other known attacks, the detail security of which are provided. Our protocol requires minimal message exchanges and minimum computational overheads. Finally, the proposed protocol has been compared with other relevant protocols and expected outcome has been found.
In this modern era, the need for key agreement protocols equipped with high-speed Internet has become necessary in information/network security. An authenticated key agreement (AKA) protocol is a technique that negotiates a secret session key among various users in a network and is used in many scenarios like mutual authentication, data integrity, and many more. The current state-of-the-art include many AKA protocols that are either vulnerable to different attacks or incur massive communication and computational costs. This paper proposes an identity-based three-party authenticated key agreement (ID-3PAKA) protocol using elliptic curve cryptography (ECC). The proposed ID-3PAKA protocol generates a shared secret session key among three users. The security of the proposed ID-3PAKA protocol relies on the hardness assumption of the ECDLP and the CDH problems. The proposed ID-3PAKA protocol is safe against active and passive attacks, which is proved through the simulation of the OFMC and Cl-AtS back-ends of the AVISPA tool.
Two-Party Authenticated key agreement protocol is essential for setting up the common session key for parties to establish secure channel for network communication in the open environment. Most of proposed schemes require expensive bilinear pairing operation and only provide limited security attributes. So such protocols are unsuitable for real-world applications that require stronger sense of secrecy. In this paper, we first analysis two schemes recently proposed by Cao etc., and then present a one-round ID-based authenticated key agreement protocol with more desired security attributes, which need no pairing operations while still achieve nice computational efficiency. These security attributes include known-key secrecy, perfect forward secrecy, PKG forward secrecy, key-compromise impersonation resilience, unknown key-share resilience and no key control. Moreover, it captures the enhanced security attributes known session-specific temporary key information secrecy, which means that even the ephemeral secret key were compromised, the adversary can hardly acquire the agreed session key.
Authenticated key agreement (AK) protocol is crucial in providing data confidentiality and integrity for subsequent communications among two or more parties over a public network. Certificateless public key cryptography (CL-PKC) combines the advantage of the identity-based public key cryptography (ID-PKC) and the traditional public key cryptography (PKC). Unfortunately, construction of CL-PKC and AK protocols has so far depended on the use of identity-based encryption, which results in the bilinear pairing-based schemes that need costly operations. We present a secure certificateless authenticated key agreement protocol without paring, based on the certificateless encryption scheme proposed by J. Baek et al. It shows that the newly proposed scheme is of nice efficiency and practical. Moreover, it provides perfect forward secrecy, PKG forward secrecy and almost all the other known security attributes, such as known-key secrecy, key-compromise impersonation resilience, unknown key-share resilience, known session-specific temporary information security, message independence and no key control.
Abstract—Two-party authenticated key agreement protocol is used to authenticate entities and establish session keys in an open network in order to provide secure communications between two parties. Several security attributes are highly desired for such protocols, such as perfect forward secrecy (the corruption of long-term keys of all the entities should not compromise any session key), PKG forward secrecy (the corruption of the PKG's master key in the ID-based system should not compromise the established session keys), and known session-key specific temporary information secrecy (The exposure of private temporary information should not compromise the secrecy of generated session keys). In 2005, Choie et al. proposed three identity-based authenticated key agreement protocols from pairings. Our analysis shows that they all didn't provide protection against known session-key specific temporary information attack and some of them are vulnerable against man-in-the-middle attack, such as the key replicating attack. We analyze some of the attacks under the BR93 security model. Index Terms—key agreement protocol, known session-key specific temporary information secrecy, key replicating attack, security model I.
Authenticated key agreement protocol is used to set up the session key and establish secure channel for network communication in the open environment. So far, great deals of identity-based protocols have been proposed to provide robust mutual authentication and key establishment in the two-party setting. Majority of the existing identity-based key agreement protocols require expensive bilinear pairing operation and only provide limited security attributes. Therefore, such protocols are unsuitable for real-world applications that require stronger sense of secrecy. In this paper, we first analysis some of the schemes proposed recently, and then present a one-round ID-based authenticated key agreement protocol with enhanced security attributes, which doesn't need pairing operation and achieves most of the required security attributes, such as known-key secrecy, perfect forward secrecy, PKG Forward Secrecy, key-compromise impersonation resilience, unknown key-share resilience and no key control. In addition, it captures the enhanced security attributes-Known session-specific temporary key information secrecy.
Wang et al.(WANG SHENG-BAO,CAO ZHEN-FU,DONG XIAO-LEI.Provably secure identity-based authenticated key agreement protocols in the standard model.Chinese Journal of Computers,2007,30(10):1842-1854) proposed an ID-based Authenticated Key Agreement(IDAKA) protocol which was proved secure under standard model but without attribute of Private Key Generator(PKG) forward security.In order to remedy the flaw,a new protocol was introduced in which the shared secret message was calculated by the private key and temporary secret information of users of the protocol,and its security was also proved in standard model.Compared with known protocols,the new protocol is more efficient.Additionally,a method of jointly generating private key by PKG and user was proposed.The private key of user was calculated by the main secret key of system and secret information provided by user.It effectively solves the problem of PKG forward security of ID-based authenticated key agreement protocol.