Security weakness of two identity-based multiple key agreement protocols

Qingfeng Cheng, Siqi Lu, Jinhua Zhao

Published Jan 1, 2014• 1 citation

Abstract

Multiple key agreement (MKA) protocols allow two parties to generate two or more session keys in a run, which will be used for future secure communications in public network. In recent years, many MKA protocols have been proposed. However, most of them do not consider ephemeral key compromise resilience and also suffer from other security flaws. In this paper, we analyze Dehkordi and Alimoradi's MKA protocol and Tan's MKA protocol. We will present ephemeral key compromise attack against Dehkordi and Alimoradi's MKA protocol, and prove that Tan's MKA protocol cannot provide mutual security.

DOI: 10.1049/cp.2014.0623

Related papers

Cryptanalysis of an Identity-Based Multiple Key Agreement Scheme.

Qingfeng Cheng

Multiple key agreement (MKA) protocols allow two parties to generate two or more session keys in one session, which will be used for future secure communications in public network. In recent years, many MKA protocols have been proposed. However, most of them do not consider ephemeral key compromise resilience, and some of them still exists security flaws. In this paper, we analyze the scheme proposed by Dehkordi and Alimoradi in 2011, which is announced with stronger security. We will present ephemeral key compromise attack and impersonation attack against Dehkordi and Alimoradi’s protocol. For overcoming these security flaws, we also propose an improvement of Dehkordi and Alimoradi’s protocol.

Jan 1, 20121 citation

Identity-based Authenticated Multiple Key Agreement Protocol with PKG Forward Security

Zuowen Tan

Authenticated multiple key agreement protocols not only allow participants to agree the multiple session keys within one run of the protocol but also ensure the authenticity of the other party.In 2011, Dehkordi et al. proposed an identity-based authenticated multiple key agreement protocol.In this paper, we demonstrate that Dehkordi et al.'s protocol is vulnerable to impersonation attacks.Furthermore, we have found that their protocol cannot provide perfect forward security or mutual security.Then we propose an identity-based authenticated multiple key agreement protocol which removes the weaknesses of the Dehkordi et al.'s protocol.Compared with the multiple key agreement protocols in the literature, the proposed protocol is more efficient and holds stronger security.

KSII Transactions on Internet and Information SystemsJan 1, 20125 citations

An Enhanced ID-based Authenticated Multiple Key Agreement Protocol

Zuowen Tan

Authenticated multiple key agreement protocols not only allow participants to agree the multiple session keys within one run of the protocol but also ensure the authenticity of the other party. In 2011, Dehkordi et al. proposed an identity-based authenticated multiple key agreement protocol. In this paper, we demonstrate that Dehkordi et al.’s protocol is vulnerable to impersonation attack. Furthermore, we have found that their protocol cannot provide perfect forward security or mutual security. Then we propose an identity-based multiple key agreement protocol which removes the weaknesses of the Dehkordi et al.’s protocol. Compared with the multiple key agreement protocols in the literature, the proposed protocol is more efficient and holds stronger security. DOI: http://dx.doi.org/10.5755/j01.itc.42.1.1381

Information Technology And ControlMar 13, 20132 citations

Identity-Based One Round Key Agreement Protocol without Bilinear Pairings

Wenhao Liu, Shengbao Wang, Xiao Tan +2 more

Almost all the existing identity-based key agreement (ID-KA) protocols cannot achieve both ephemeral secret reveal resilience and pairing-free. In this paper, a pairing-free ID-KA protocol is proposed, which captures all basic desirable security properties including key generation center forward secrecy, key compromise impersonation resilience and ephemeral secrets reveal resistance. On the other hand, the proposed scheme only needs one round communication between the two parties. Compared with the previous ID-KA protocols, the proposed scheme is more secure and efficient.

International Conference on P2P, Parallel, Grid, Cloud and Internet Computing (3PGCIC)Nov 1, 20152 citations

Multiple Key Exchange Protocol with Strong Security

Zhang Shi-wu

All existing two party multiple key exchange protocols cannot resist ephemeral key compromise attack.To solve this problem,a new two party authenticated key exchange protocol based bilinear map is proposed for enhancing the security and efficiency of two party key exchange protocols.Four different session keys can be computed through one session of the proposed protocol.Compared with existing protocols,the new protocol with stronger security can resist ephemeral key compromise attack and provide mutual authentication.

Jisuanji gongchengJan 1, 20110 citations

Security weaknesses of two-party ID-based authenticated key agreement protocols

Jianzhong Zhang, Zuoshun Wu

We analyse the existing ID-based authenticated key agreement protocols, and find out that several proposed protocols of this type do not satisfy related security attributes. This paper reviews Wang's, He's and Guo's protocols sequentially, and shows key compromise impersonation attack on Wang's scheme, ephemeral secrets reveal attack on He's scheme, key reveal attack and ephemeral secrets reveal attack on Guo's scheme, respectively, Finally, this paper proposes some improving suggestions on corresponding weaknesses of these protocols.

International Conference on Automatic Control and Artificial Intelligence (ACAI)Jan 1, 20120 citations