Rethinking the security of some authenticated group key agreement schemes.

Qiang Tang, Chris J. Mitchell

Published Jan 1, 2004• 6 citations

Abstract

In this paper we analyse three improved authenticated group key agreement schemes, all of which are based on the conference key distribution systems proposed by Burmester and Desmedt. We show that all the schemes suffer from a type of impersonation attack, although these schemes are claimed to be secure.

Related papers

Security properties of two authenticated conference key agreement protocols

Qiang Tang

Abstract. In this paper we analyse the security of two authenticated group key agreement schemes based on the group key agreement protocol of Burmester and Desmedt. One scheme was proposed by Burmester and Desmedt, and uses a separate authentication scheme to achieve authentication among the participants. We show that this scheme suffers from a number of security vulnerabilities. The other scheme was generated using the general protocol compiler of Katz and Yung. We show that in some circumstances, even if key confirmation is implemented, this scheme still suffers from insider attacks (which are not covered by the security model used by Katz and Yung). 1

Jan 1, 20050 citations

An Insider Attack Resistant Group Key Agreement Protocol from Pairings

Yongzhong He, Xiaoyong Li, Zhen Han

Authenticated group key agreement allows a group of users to generate a shared key which satisfies various security requirements. Several identity-based authenticated group key agreement schemes are proposed. However, these schemes are shown to be vulnerable to insider impersonation attacks that any two malicious group members can impersonate other user to agree some session keys in a new group. In this paper, a simple two round authenticated group agreement scheme based on Burmester and Desmedt's scheme is proposed. Compared to previous protocols, our protocol is efficient while secure against various known attacks, including key exposure attacks and insider impersonation attacks.

International Conference on Innovative Computing, Information and ControlSep 1, 20074 citations

Enhancement of an Authenticated 3-round Identity-Based Group Key Agreement Protocol

Wei Yuan, Liang Qing Hu, Hongtu Li +2 more

In 2008, Gang Yao et al. proposed an authenticated 3-round identity-based group key agreement protocol, which is based on Burmester and Desmedt’s protocol proposed at Eurocrypt 94. However, their protocol can only prevent passive attack. If the active attack is allowed, the protocol is vulnerable and an internal attacker can forge her neighbor’s keying material. It is obvious that the protocol do not achieve the aim of authentication. In this paper, we discuss the flaws to attack this protocol and propose an enhanced provably-secure protocol based on their protocol. At last, we make a detailed security analysis of our enhanced authenticated identity-based group key agreement protocol.

Journal of NetworksOct 19, 20110 citations

An Efficient Authenticated Group Key Agreement Protocol

Yongzhong He, Han Zhen

Authenticated group key agreement is an important cryptographic mechanism underlying many collaborative and distributed applications. Some identity-based authenticated group key agreement schemes are proposed, however most of these protocols are vulnerable to insider attacks, while the other protocols are not efficient in communication. In this paper a new authenticated group key agreement protocol is proposed based on a modified identity-based cryptography infrastructure with new system setup and key extraction algorithms. The main feature of this protocol is that it needs only one round, which is optimal in terms of communication complexity; meanwhile the protocol is secure against insider attacks such as impersonation attacks and other known attacks.

IEEE International Carnahan Conference on Security Technology (ICCST)Oct 1, 200713 citations

ID-Based Authenticated Dynamic Group Key Agreement

王莺洁, 潘军, 诸鸿文

Two ID-based authenticated group key agreement schemes, proposed by Choi et al and Du et al, are insecure against an impersonation attack and they only discussed the static group. This paper proposed a variant of BD protocol, which is fully authenticated by a proven-secure ID-based signature scheme. The protocol can resist the impersonation attack, and other security attributes are also satisfied. Compared with Choi et al and Du et al schemes, the proposed one is more efficient and applicable for dynamic groups.

上海交通大学学报：英文版Jan 1, 20054 citations

Security Analysis and Improvements of Hierarchical Identity Based Authenticated Key Agreement Scheme

Mao Kefei, Jie Chen, Jianwei Liu

The security of hierarchical identity based authenticated key agreement scheme which was proposed by CAO et al. (2014) is cryptanalyzed. First, it is pointed out that the scheme is not completely secure against the basic impersonation attack. Then, the process and the reasons of the attack are described. Finally, an improvement scheme to mend the security leaks is proposed based on the hierarchical identity based encryption (BONEH et al. 2005). The security proof of the proposal is presented in the BJM model. The computation efficiency of the

JOURNAL OF ELECTRONICS INFORMATION TECHNOLOGYJan 1, 20161 citation