ACM Asia Conference on Computer and Communications Security (ASIA CCS)

An ID-based authenticated key exchange protocol based on bilinear Diffie-Hellman problem

Hai Huang, Zhenfu Cao

Published Mar 10, 2009• 78 citations

Abstract

In this paper, we present a new ID-based two-party authenticated key exchange (AKE) protocol, which makes use of a new technique called twin Diffie-Hellman problem proposed by Cash, Kiltz and Shoup. We show that our scheme is secure under bilinear Diffie-Hellman (BDH) assumption in the enhanced Canetti-Krawczyk (eCK) model, which better supports the adversary's queries than previous AKE models. To the best of our knowledge, our scheme is the first ID-based AKE protocol provably secure in eCK model.

DOI: 10.1145/1533057.1533101

Related papers

A New ID-Based Authenticated Key Agreement Between Members of Distinct Domains

Song Xia, Juan You, Wenbao Han +1 more

Most ID-based AKA protocols require that all parties are members of the same domain. In this paper, we present a new ID-based AKA protocol between members of distinct domains, which makes use of a new technique called twin Diffie-Hellman problem proposed by Cash, Kiltz and Shoup. It is inspired on a new ID-based two-party authenticated key exchange protocol proposed by Hai Huang and Zhenfu Cao. We show that our scheme is secure in the enhanced Canetti-Krawczyk (eCK) model, which better supports the adversary's queries than previous AKA models. To the best of our knowledge, our scheme is the first ID-based AKA protocol between members of distinct domains provably secure in eCK model.

International Conference on Multimedia Information Networking and SecurityJan 1, 20091 citation

id-eCK Secure ID-Based Authenticated Key Exchange on Symmetric and Asymmetric Pairing

Atsushi Fujioka, Fumitaka Hoshino, Tetsutaro Kobayashi +3 more

In this paper, we propose an identity-based authenticated key exchange (ID-AKE) protocol that is secure in the identity-based extended Canetti-Krawczyk (id-eCK) model in the random oracle model under the gap Bilinear Diffie-Hellman assumption. The proposed ID-AKE protocol is the most efficient among the existing ID-AKE protocols that is id-eCK secure, and it can be extended to use in asymmetric pairing.

IEICE Transactions on Fundamentals of Electronics Communications and Computer SciencesJan 1, 20138 citations

Authenticated Key Exchange Protocol in the Standard Model under Weaker Assumptions

Janaka Alawatugoda

A two-party authenticated key exchange (AKE) protocol allows each of the two parties to share a common secret key over insecure channels, even in the presence of active adversaries who can actively control and modify the exchanged messages. To capture the malicious behaviors of the adversaries, there have been many efforts to define security models. Amongst them, the extended Canetti–Krawczyk (eCK) security model is considered one of the strongest security models and has been widely adopted. In this paper, we present a simple construction of a pairing-based eCK-secure AKE protocol in the standard model. Our protocol can be instantiated with a suitable signature scheme (i.e., an existentially unforgeable signature scheme against adaptive chosen message attacks). The underlying assumptions of our construction are the decisional bilinear Diffie–Hellman assumption and the existence of a pseudorandom function. Note that the previous eCK-secure protocol constructions either relied on random oracles for their security or used somewhat strong assumptions, such as the existence of strong-pseudorandom functions, target collision-resistant functions, etc., while our protocol construction uses fewer and more-standard assumptions in the standard model. Furthermore, preserving the same security argument, our protocol can be instantiated with any appropriate signature scheme that comes in the future with better efficiency.

CryptographyJan 5, 20232 citations

Practical Certificateless Authenticated Two-party Key Protocol

Jian Shu

Recently,Lippold et al.proposed certificateless authenticated two-party key agreement with provable security,their scheme suffers from computation burden.Basesd on twin diffie-hellman problem introduced by Cash,Kiltz and Shoup,A new scheme using bilinear pair is proposed.When compared with Lippold's scheme,the proposed protocol,with the same message bandwidth,achieves efficiency in computational cost.The security of the proposed scheme has been proven in the random oracle model under CDH assumption and BDH assumption.

Journal of Chinese Computer SystemsJan 1, 20100 citations

Efficient strongly-secure identity-based authenticated key agreement protocol

Jian Shu

Most of the existing Identity-based(ID) authenticated protocols are proven secure in the Canetti-Krawczyk(CK) model which is weaker than the extended Canetti-Krawczyk(eCK) model.Based on NAXOS trick,a new scheme using bilinear pairing was proposed.The security of the scheme was proven in the eCK model under the random oracle assumption and the Gap Bilinear Diffie-Hellman(GBDH) assumption.The proposed protocol was efficient in computational cost and communication round when compared with other solutions.The new protocol also satisfied master key forward security,perfect forward security and anti-key-leak disguise.

Journal of Computer ApplicationsJan 1, 20120 citations

Strongly-secure and Efficient Authenticated Key Exchange Protocol

Jinyue Xia

This paper presents an Authenticated Key Exchange(AKE) protocol,named AKE-1.Compared with previous protocols,the proposal is more efficient and proven to be safe in newly enhanced Canetti-Krawczyk(eCK07) model under the random oracle assumption and the Computational Diffie-Hellman(CDH) assumption.It uses a technique named trapdoor test,recently proposed by Cash,Kiltz and Shoup.In addition,it presents a one-pass variant(for only one entity on line) and three-pass variant(providing key confirmation) of AKE-1 for different applications.

Jisuanji gongchengJan 1, 20100 citations