Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Pacific-Asia Conference on Web Mining and Web-based Application

Improvement of a Three-party Key Exchange Protocol

Sida Lin, Qi Xie

Published Jun 1, 2009• 0 citations
Publisher

Abstract

Recently, Lu and Cao proposed a novel three-party key exchange protocol. Guo et al pointed out that their protocol cannot resist man-in-the-middle attack and undetectable on-line dictionary attack, and then an improved protocol was proposed in 2008.However, we show that Guo et alpsilas protocol is still vulnerable to undetectable on-line dictionary attack. To overcome the security flaw, an improved scheme is proposed.

DOI
10.1109/wmwa.2009.54

Related papers

Personalized two party key exchange protocol

Tong Yi, Minyong Shi, Wenqian Shang

This paper analyzes two existing protocols, points out that they cannot resist off-line dictionary attack. And considering most of protocols cannot meet the personalized requirements, this paper presents a personalized key exchange protocol, users can choose the number of generated session keys according to their own requirements. And through safety analysis, the protocol can resist various common attacks.

IEEE/ACIS International Conference on Computer and Information Science (ICIS)•Jun 1, 2015•3 citations

An improved certificateless authenticated key agreement protocol

Haomin Yang, Yaoxue Zhang, Yuezhi Zhou

Recently, Mokhtarnameh, Ho, Muthuvelu proposed a certificateless key agreement protocol. In this paper, we show that their protocol is unsecured against a man-in-the-middle attack. In addition, the authors claimed that their scheme provides a binding long-term public key with a corresponding partial private key. In fact, their protocol does not achieve the binding. We propose an improved key agreement protocol based on the protocol proposed by Mokhtarnameh et al. The improved protocol can resist the man-in-the-middle attack as well as satisfy the desired security properties for key agreement. It truly achieves the one-to-one correspondence between the long-term public key and the partial private key of a user. Compared with the other related protocols, the protocol has advantages in both security and computational efficiency.

IEEE International Conference on Communication Technology (ICCT)•Nov 1, 2012•5 citations

Cryptanalysis of a New Efficient Authenticated Multiple- Key Exchange Protocol from Bilinear Pairings

Qingfeng Cheng

Multiple-key exchange (MKE) protocols allow two parties to generate two or more shared session keys over insecure networks. In recent years, many MKE protocols have been proposed. However, most of them still have some security flaws. In this letter, we will analyze a new MKE protocol proposed by Farash et al. in 2012, and present two attacks against Farash et al.’s protocol.

International journal of network security•Jan 1, 2014•3 citations

Cryptanalysis and improvement of two certificateless three-party authenticated key agreement protocols

Haiyan Sun, Qiaoyan Wen, Hua Zhang +2 more

Recently, two certificateless three-party authenticated key agreement protocols were proposed, and both protocols were claimed they can meet the desirable security properties including forward security, key compromise impersonation resistance and so on. Through cryptanalysis, we show that one neither meets forward security and key compromise impersonation resistance nor resists an attack by an adversary who knows all users' secret values, and the other cannot resist key compromise impersonation attack. Finally, we propose improved protocols to make up two original protocols' security weaknesses, respectively. Further security analysis shows that our improved protocols can remove such security weaknesses.

arXiv:1301.5091•Jan 22, 2013•2 citations

A Computation-Efficient Three-Party Encrypted Key Exchange Protocol

Cheng‐Chi Lee, Shun‐Der Chen, Chin‐Ling Chen

Recently, Chen et al. proposed a three-party encrypted key exchange (3PEKE) protocol with password authentication which is called CCLC-3PEKE. The protocol simultaneously possesses round and computation efficiencies. However, the protocol is vulnerable to replaying attacks. Since the protocol is currently one of the most superior of all 3PEKE protocols, it seems valuable to remedy the security weakness and enhance their efficiency. Hence, we shall propose an efficient 3PEKE (L-3PEKE) scheme. Compare with other 3PEKE protocols, our proposed L-3PEKE is more secure and efficient.

Applied Mathematics & Information Sciences•Jan 1, 2012•21 citations

Analysis and improvement of certificateless two-party key agreement scheme

Jian Shu

Based on signcryption scheme,Liu-Xu proposes an efficient certificateless authenticated two-party key agreement protocol.Security analysis shows that the scheme hasn't achieved strong security due to redundancy of the exchange messages.The scheme is vulnerable to passive attack and active attack.To overcome the problem mentioned above,an improved scheme without using signcryption scheme is proposed.Analysis result proves that the efficiency and security of the proposed protocol is improved.

Computer Engineering and Applications Journal•Jan 1, 2012•0 citations
Recently, Lu and Cao proposed a novel three-party key exchange protocol. Guo et al pointed out that their protocol cannot resist man-in-the-middle attack and undetectable on-line dictionary attack, and then an improved protocol was proposed in 2008.However, we show that Guo et alpsilas protocol is still vulnerable to undetectable on-line dictionary attack. To overcome the security flaw, an improved scheme is proposed.
Recently, Mokhtarnameh, Ho, Muthuvelu proposed a certificateless key agreement protocol. In this paper, we show that their protocol is unsecured against a man-in-the-middle attack. In addition, the authors claimed that their scheme provides a binding long-term public key with a corresponding partial private key. In fact, their protocol does not achieve the binding. We propose an improved key agreement protocol based on the protocol proposed by Mokhtarnameh et al. The improved protocol can resist the man-in-the-middle attack as well as satisfy the desired security properties for key agreement. It truly achieves the one-to-one correspondence between the long-term public key and the partial private key of a user. Compared with the other related protocols, the protocol has advantages in both security and computational efficiency.
Recently, two certificateless three-party authenticated key agreement protocols were proposed, and both protocols were claimed they can meet the desirable security properties including forward security, key compromise impersonation resistance and so on. Through cryptanalysis, we show that one neither meets forward security and key compromise impersonation resistance nor resists an attack by an adversary who knows all users' secret values, and the other cannot resist key compromise impersonation attack. Finally, we propose improved protocols to make up two original protocols' security weaknesses, respectively. Further security analysis shows that our improved protocols can remove such security weaknesses.
Recently, Chen et al. proposed a three-party encrypted key exchange (3PEKE) protocol with password authentication which is called CCLC-3PEKE. The protocol simultaneously possesses round and computation efficiencies. However, the protocol is vulnerable to replaying attacks. Since the protocol is currently one of the most superior of all 3PEKE protocols, it seems valuable to remedy the security weakness and enhance their efficiency. Hence, we shall propose an efficient 3PEKE (L-3PEKE) scheme. Compare with other 3PEKE protocols, our proposed L-3PEKE is more secure and efficient.