A study on design and analysis of key-exchange protocol with privacy

Colin Boyd, Wenbo Mao

Colin Boyd, Wenbo Mao

Susmita Mandal

With the advancement in Internet-based technologies, network applications are no longer just limited to one-to-one communication; instead, it has become a publicly accessible resource. Regardless of this growth, such applications bring specific challenges concerning authentication, integrity, and privacy. Cryptography stands as an ideal solution to overcome these issues through an interactive method of secure communication called Key Exchange. Key exchange protocols allow two or more entities to agree upon a shared secret transmitted over a public channel without revealing any information to an eavesdropper. This thesis contributes to the design and analysis of the variants of key exchange protocols along with their applications. As per the security requirements, the proposed schemes are either designed in an interactive model or a non-interactive model. Each scheme undergoes a series of formal and informal security analysis. The formal analysis provides simulation result using cryptographic models. Whereas, an informal analysis showcases the theoretical proves on known attacks where an adversary controls the network. The performance analysis maps the protocol’s efficiency based on the computation cost and communication size. The first contribution introduces an interactive two-party authenticated key exchange protocol. We begin by investigating the security flaws in an existing system such as, lack of user anonymity, trace attack, clogging attack, and failure to resist replay attack. Then proposed an authenticated self-certified key exchange protocol that overcomes the addressed issues. Also, it eliminates the requirements of a trusted certificate authority to authorize the entities. The scheme achieves anonymity during session execution, mutual authentication and enables session key agreement.Based on the ideology, an application is designed, forsecure communication between ad-hoc nodes in a mobile ad-hoc network. The second contribution contributes to the design of an Identity-based authenticated three-party key exchange protocol that overcomes the incapability of managing huge peer-to-peer communication and high computation cost faced by two-party authenticated key exchange protocols. The proposed scheme preserves user privacy by enabling the property of anonymity and ensures non-repudiation. Based on the ideology, an application is designed to establish a secure session key between two users with the help of a trusted server for an electronic payment system. The third contribution proposes an interactive pairing-free certificateless authenticated group key agreement scheme suitable for a resource constrained mobile network. The scheme allows any user to join or leave the group dynamically. The key agreement protocol devised in this scheme ensures un-deniability property by incorporating the signcryption, and unsigncryption algorithm. The final contribution presents a non-interactive Identity-based deniable authentication protocol that allows an intended receiver to identify the origin of a given message without being able to prove sender’s identity to a third party.

Dushyant Kumar Yadav, Dinesh Yadav, Yogesh Pal +3 more

Internet of Medical Things (IoMT) is an advanced ecosystem made with the help of Internet of Things technology, smart sensors, medical equipment, and connected end users. Internet of Medical Things is very helpful to enhance efficiency, accuracy, and qualities traditional healthcare system. A smart IoMT contains end users, heterogeneous network, and private data is transferred through public channel. Therefore, it becomes hard to achieve both security and privacy in the IoMT system. In this article, we have focused on designing privacy preserving authenticated key mechanism between two parties. We have proposed a blockchain assisted authenticated key exchange mechanism for IoMT systems supporting fog computing paradigm. The proposed privacy preserving authenticated key exchange protocol is based post quantum assumption “ring learning with errors” and physical unclonable function (PUF), respectively. A detailed security analysis ensures that proposed protocol is secure against most of the existing attacks. This protocol is also secure against quantum attacks based on the assumption.

Sun Yu, Han Qingtong, Jianwei Liu

Li Li, Zhang Huanguo

Group key exchange protocols are basic protocols to provide privacy and integrity in secure group communication. This paper discusses the security of one type of group key exchange protocols and defines the kind of protocols as broadcaster group protocols. It points out two attacks on this kind of protocols. The first attack can be avoided by using fresh values in each action during one session of the group protocol. The second attack should be related with concrete application. It also proposes a dynamic key agreement protocol as an example of solutions at the last part of the paper.