On the security of three-party cryptographic protocols

裕治 渡邊

Chao Lv, Maode Ma, Hui Li +1 more

Three-party authenticated key exchange protocol (3PAKE) is an important cryptographic technique for secure communication which allows two parties to agree a new secure session key with the help of a trusted server. In this paper, we proposed a new three-party authenticated key exchange protocol which aims to achieve more efficiency with the same security level of other existing 3PAKE protocols. Security analysis and formal verification using AVISPA tools show that the proposed protocol is secure against various known attacks. Comparing with other typical 3PAKE protocols, the proposed protocol is more efficient with less computation complexity.

Ran Canetti

Bartosz Przydatek

Bin Liu, Fei Gao, Qiaoyan Wen

In order to reduce the requirements on quantum devices, Shih proposed two three-party quantum key distribution (QKD) protocols . However, Gao presented a simple and effective attack strategy (i.e., dense-coding attack) upon the two protocols . In this paper, we make a deep analysis on the reason why Shih three-party QKD protocols are not secure. Meanwhile, we improve the three-party QKD protocols so that they can resist the Gao attack. On this basis, we present a formalism of single-photon multiparty quantum cryptographic protocol with collective detection. In this formalism, single photons are employed and all participants, except one whom we call as the center, only need to have the ability to perform single qubit unitary operations. Considering the expensive quantum devices, this formalism is low-priced which means it is easy to realize. Further more, this formalism can be widely used in various quantum cryptographic protocols, such as quantum secret sharing, quantum coin flipping, and quantum secure direct communication.

Dharminder Chaudhary, Pradeep Kumar Dadsena, A Padmavathi +3 more

Once the shared secret key is established, three parties can use it for secure communication using symmetric-key encryption AES (128, 192, 256) algorithms or other cryptographic primitives. Although there are few third-party post-quantum authentication and key agreement protocols exist, but the recent studies in this article show that they are not anonymous or cannot provide forward secrecy. Most of the existing protocols enable adversaries to trace the source of messages. Many of third-party AKA schemes based on conventional public-key cryptosystems are vulnerable to quantum computers. Therefore, this paper contains a forward secure three-party post-quantum authenticated key establishment protocol for mobile devices. The proposed three-party key exchange protocol establishes an authenticated shared key that can be periodically refreshed to maintain forward secrecy. This protocol enables two parties to establish a shared session key even in the presence of quantum adversaries and enables them to communicate confidentially and securely over insecure networks. The protocol is anonymous as both the parties communicate using masked dynamic identities. A contrast study consisting of performance and security assessment is presented, which illustrates the suggested design is more applicable.