Recently, Kim et al. proposed two new robust E-mail protocols with perfect forward secrecy. The current letter shows that their protocol 2 is susceptible to two impersonation attacks
In IEEE Communication Letters, Kim et al. and Sun et al. proposed several e–mail protocols and claimed that they provide perfect forward secrecy. In this paper, we show that under the assumption that the e–mail server is also malicious, Kim et al.'s two e–mail protocols do not provide perfect forward secrecy. While one of Sun et al.'s e–mail protocol provides perfect forward secrecy, it does not provide message authentication. We thus propose an improvement to Sun et al.'s e–mail protocol so that it provides both perfect forward secrecy and message authentication.
Electronic mail, E-mail in short, has been used to transfer various types of electronic data on Internet. In order to deliver the E-mail from the sender to the receiver both efficiently and securely, the E-mail system usually employs both conventional and public key cryptographic systems. The basic protection in an E-mail system is to encrypt the bulk mail using a conventional cryptosystem with a short-term key and to protect the short-term key using a public-key cryptosystem with the receiver's public key. However this protection cannot provide perfect forward secrecy because once the receiver's secret key is disclosed, all previous used short-term keys will also be opened and hence all previous E-mails will be learned. Two new E-mail protocols providing perfect forward secrecy are proposed In this work.