Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Information Sciences

An improved identity-based key agreement protocol and its security proof

S WANG, Zhenfu Cao, Kim‐Kwang Raymond Choo, Lu Wang

Published Oct 5, 2008• 58 citations
Publisher
DOI
10.1016/j.ins.2008.09.020

Related papers

Efficient Identity-Based and Authenticated Key Agreement Protocol

Yongge Wang

Lecture notes in computer science•Jan 1, 2013•90 citations

Security Proof for the Improved Ryu-Yoon-Yoo Identity-Based Key Agreement Protocol.

Shengbao Wang, Zhenfu Cao, Kim‐Kwang Raymond Choo +1 more

Abstract. Key agreement protocols are essential for secure communications in open and distributed environments. The protocol design is, however, extremely error-prone as evidenced by the iterative process of fixing discovered attacks on published protocols. We revisit an efficient identity-based (ID-based) key agreement protocol due to Ryu, Yoon and Yoo. The protocol is highly efficient and suitable for real-world applications despite offering no resilience against key-compromise impersonation (K-CI). We then show that the protocol is, in fact, insecure against reflection attacks. A slight modification to the protocol is proposed, which results in significant benefits for the security of the protocol without compromising on its efficiency. Finally, we prove the improved protocol secure in a widely accepted model.

•Jan 1, 2008•3 citations

A New Two-Party Identity-Based Authenticated Key Agreement

Noel McCullagh, Paulo S. L. M. Barreto

Lecture notes in computer science•Jan 1, 2005•219 citations

Security-provable Identity-based Authenticated Key Agreement Protocol

Yafei Wang

Most Identity-based Authenticated Key Agreement(ID-AKA) protocols have poor performance on security and the efficiency.To solve this problem,this paper presents an improved ID-AKA protocol.Security proof with the modular approach in the mBR model is provided,which means the new protocol satisfies perfect forward security,PKG forward security,resistant to key-compromise impersonation.Furthermore,the new protocol can satisfy resistance to leakage of ephemeral secrets.Compared with previous ID-AKA protocols which can satisfy the same security properties,the new protocol has higher efficiency.

Jisuanji gongcheng•Jan 1, 2012•0 citations

Efficient identity-based authenticated key agreement protocol from pairings

YoungJu Choie, Eunkyung Jeong, Eunjeong Lee

Applied Mathematics and Computation•Mar 6, 2004•78 citations

On the Security of Wang's Provably Secure Identity-based Key Agreement Protocol

Maurizio Adriano Strangio

In a 2005 IACR report, Wang published an efficient identity-based key agreement protocol (IDAK) suitable for resource constrained devices. The author shows that the IDAK key agreement protocol is secure in the Bellare-Rogaway model with random oracles and also provides separate ad-hoc security proofs claiming that the IDAK protocol is not vulnerable to Key Compromise Impersonation attacks and also enjoys Perfect Forward Secrecy (PFS). In this report, we review the security properties of the protocol and point out that it is vulnerable to Unknown Key Share attacks. Although such attacks are often difficult to setup in a real world environment they are nevertheless interesting from a theoretical point of view so we provide a version of the protocol that fixes the problem in a standard way. We also provide a security proof of the IDAK protocol based on the Gap Bilinear Diffie Hellman and random oracle assumptions in the stronger extended Canetti-Krawczyk security model of distributed computing.

arXiv:1312.4363•Dec 16, 2013•0 citations
Abstract. Key agreement protocols are essential for secure communications in open and distributed environments. The protocol design is, however, extremely error-prone as evidenced by the iterative process of fixing discovered attacks on published protocols. We revisit an efficient identity-based (ID-based) key agreement protocol due to Ryu, Yoon and Yoo. The protocol is highly efficient and suitable for real-world applications despite offering no resilience against key-compromise impersonation (K-CI). We then show that the protocol is, in fact, insecure against reflection attacks. A slight modification to the protocol is proposed, which results in significant benefits for the security of the protocol without compromising on its efficiency. Finally, we prove the improved protocol secure in a widely accepted model.
Most Identity-based Authenticated Key Agreement(ID-AKA) protocols have poor performance on security and the efficiency.To solve this problem,this paper presents an improved ID-AKA protocol.Security proof with the modular approach in the mBR model is provided,which means the new protocol satisfies perfect forward security,PKG forward security,resistant to key-compromise impersonation.Furthermore,the new protocol can satisfy resistance to leakage of ephemeral secrets.Compared with previous ID-AKA protocols which can satisfy the same security properties,the new protocol has higher efficiency.
In a 2005 IACR report, Wang published an efficient identity-based key agreement protocol (IDAK) suitable for resource constrained devices. The author shows that the IDAK key agreement protocol is secure in the Bellare-Rogaway model with random oracles and also provides separate ad-hoc security proofs claiming that the IDAK protocol is not vulnerable to Key Compromise Impersonation attacks and also enjoys Perfect Forward Secrecy (PFS). In this report, we review the security properties of the protocol and point out that it is vulnerable to Unknown Key Share attacks. Although such attacks are often difficult to setup in a real world environment they are nevertheless interesting from a theoretical point of view so we provide a version of the protocol that fixes the problem in a standard way. We also provide a security proof of the IDAK protocol based on the Gap Bilinear Diffie Hellman and random oracle assumptions in the stronger extended Canetti-Krawczyk security model of distributed computing.