© 2026 Aqora Quantum S.A.S.

Terms Privacy Legal Notice

ACM SIGSAC Conference on Computer and Communications Security (CCS)

New approaches for deniable authentication

Mario Di Raimondo, Rosario Gennaro

Published Nov 7, 2005• 69 citations

Abstract

Deniable Authentication protocols allow a Sender to authenticate a message for a Receiver, in a way that the Receiver cannot convince a third party that such authentication (or any authentication) ever took place.We present two new approaches to the problem of deniable authentication. The novelty of our schemes is that they do not require the use of CCA-secure encryption (all previous known solutions did), thus showing a different generic approach to the problem of deniable authentication. This new approach is practically relevant as it leads to more efficient protocols and security reductions.In the process we point out a subtle definitional issue for deniability. In particular we propose the notion of forward deniability, which requires that the authentications remain deniable even if the Sender wants to later prove that she authenticated a message. We show that forward deniability is not implied by the original notion of deniability, by showing some deniable protocols which are not forward deniable. Our new proposals are forward deniable.

DOI: 10.1145/1102120.1102137

Related papers

Universal Encrypted Deniable Authentication Protocol.

Zhenfu Cao

The notion of deniable authentication protocol was introduced in 1998 by Dwork et al. [11] and Aumann and Rabin [1, 2] independently. As a new cryptographic authentication protocol, a deniable authentication protocol enables an intended receiver to identify the source of a given message without being able to prove the identity of the sender to a third party. Over the past years, many deniable authentication protocols have been proposed. In this paper, we would like to present a universal encrypted deniable authentication protocol from any public key encryption scheme. Provided that the public key encryption scheme is secure, a secure deniable authentication protocol can be directly derived.

International journal of network security•Jan 1, 2009•3 citations

Cryptanalysis of a suite of deniable authentication protocols

Runze Zhu, Duncan S. Wong, C.H. Lee

A deniable authentication protocol allows a sender to transfer an authenticated message to a receiver in such a way that the receiver cannot prove to a third party about the source of the message. In 2001, Deng et al. proposed two deniable authentication protocols under the communication model defined by Aumann and Rabin in 1998. In this paper, we show that these two protocols have a common issue, which incurs vulnerability to the person-in-the-middle (PIM) attack. We also propose a modification for solving the problem.

IEEE Communications Letters•Jun 1, 2006•25 citations

An efficient deniable authentication protocol

Hui‐Feng Huang, Chin‐Chen Chang

The aim of deniable authenticated protocol allows the receiver to identity the source of a given message but not prove the identity of the sender to a third party. In this article, we propose a new non-interactive deniable authenticated protocol based on Diffie-Hellman key distribution protocol. It has lower communication costs and computational complexity than previously proposed schemes.

International Conference on Cyberworlds (CW)•Jan 1, 2005•1 citation

A novel certificateless deniable authentication protocol.

Chunhua Jin, Chunxiang Xu, Xiaojun Zhang +2 more

Abstract: Deniable authenticated protocol is a new and attractive protocol compared to the traditional authentication protocol. It allows the appointed receiver to identify the source of a given message, but not to prove the identity of the sender to a third party even if the appointed receiver is willing to reveal its private key. In this paper, we first define a security model for certificateless deniable authentication protocols. Then we propose a non-interactive certificateless deniable authentication protocol, by combining deniable authentication protocol with certificateless cryptography. In addition, we prove its security in the random oracle model.

•Jan 1, 2013•0 citations

Fully Deniable Mutual Authentication Protocol Based on RSA Signature.

Xi Lin, Lin Sun

Abstract: Deniable authentication protocols allow a sender to authenticate a receiver, in a way that the receiver cannot convince a third party that such authentication (or any authentication) ever took place. In this study, we construct a fully deniable mutual authentication protocol based on RSA signature, and then a deniable authenticated key exchange protocol is constructed from the proposed protocol.

•Jan 1, 2013•0 citations

A New Deniable Authentication Protocol with Anonymous Fair Protections

Shin‐Jia Hwang, Chien-Hung Chao

Intended receiver and deniability properties are two basic properties satisfied by deniable authentication protocols. Recently, a deniable authentication protocol with sender protection is proposed to protect the right of the real sender. In other words, the sender can prove that he/she really sent the message to guard against circumvention by some receivers. However, the honest receiver still suffers the circumventing risk due to the senders' deniability. If the sender sent a deniable authenticated message to the innocent receiver and claimed that the message was generated by receivers. Then the receiver has nothing to convince the others that he/she is innocent. To provide fair protection and anonymity both for senders and receivers, a new deniable authentication protocol with anonymous fair protection is proposed.

•May 27, 2010•0 citations

Deniable Authentication protocols allow a Sender to authenticate a message for a Receiver, in a way that the Receiver cannot convince a third party that such authentication (or any authentication) ever took place.We present two new approaches to the problem of deniable authentication. The novelty of our schemes is that they do not require the use of CCA-secure encryption (all previous known solutions did), thus showing a different generic approach to the problem of deniable authentication. This new approach is practically relevant as it leads to more efficient protocols and security reductions.In the process we point out a subtle definitional issue for deniability. In particular we propose the notion of forward deniability, which requires that the authentications remain deniable even if the Sender wants to later prove that she authenticated a message. We show that forward deniability is not implied by the original notion of deniability, by showing some deniable protocols which are not forward deniable. Our new proposals are forward deniable.

The notion of deniable authentication protocol was introduced in 1998 by Dwork et al. [11] and Aumann and Rabin [1, 2] independently. As a new cryptographic authentication protocol, a deniable authentication protocol enables an intended receiver to identify the source of a given message without being able to prove the identity of the sender to a third party. Over the past years, many deniable authentication protocols have been proposed. In this paper, we would like to present a universal encrypted deniable authentication protocol from any public key encryption scheme. Provided that the public key encryption scheme is secure, a secure deniable authentication protocol can be directly derived.

A deniable authentication protocol allows a sender to transfer an authenticated message to a receiver in such a way that the receiver cannot prove to a third party about the source of the message. In 2001, Deng et al. proposed two deniable authentication protocols under the communication model defined by Aumann and Rabin in 1998. In this paper, we show that these two protocols have a common issue, which incurs vulnerability to the person-in-the-middle (PIM) attack. We also propose a modification for solving the problem.

Abstract: Deniable authenticated protocol is a new and attractive protocol compared to the traditional authentication protocol. It allows the appointed receiver to identify the source of a given message, but not to prove the identity of the sender to a third party even if the appointed receiver is willing to reveal its private key. In this paper, we first define a security model for certificateless deniable authentication protocols. Then we propose a non-interactive certificateless deniable authentication protocol, by combining deniable authentication protocol with certificateless cryptography. In addition, we prove its security in the random oracle model.

Intended receiver and deniability properties are two basic properties satisfied by deniable authentication protocols. Recently, a deniable authentication protocol with sender protection is proposed to protect the right of the real sender. In other words, the sender can prove that he/she really sent the message to guard against circumvention by some receivers. However, the honest receiver still suffers the circumventing risk due to the senders' deniability. If the sender sent a deniable authenticated message to the innocent receiver and claimed that the message was generated by receivers. Then the receiver has nothing to convince the others that he/she is innocent. To provide fair protection and anonymity both for senders and receivers, a new deniable authentication protocol with anonymous fair protection is proposed.