Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Journal of Communications

Analysis and improvement of an ID-based authenticated key agreement protocol

Xiao Guo-zhen

Published Jan 1, 2008• 2 citations
OpenAlex

Abstract

The security of a recently proposed ID-based authenticated key agreement protocol was analyzed. Although it is provably secure in the standard model, a malicious PKG （private key generator） can still obtain all of the agreed ses-sion keys, that is, it doesn’t provide PKG-forward secrecy in escrowless mode. To satisfy the security requirement in es-crowless mode, an improved version of the protocol was presented and it was proved to be a secure authenticated key agreement in the standard model. Results show that it provides perfect forward secrecy and PKG-forward secrecy.

Related papers

Improvement of identity-based authenticated key agreement protocol

Chi Xu, Wen Fang Zhang, Zhen Hu

The security of a recently proposed ID-based authenticated key agreement protocol was analyzed,and an enhanced ID-based authenticated key agreement protocol is presented based on the previous work. a malicious PKG (private key generator) can still obtain all of the agreed session keys, that is, it doesn't provide PKG-forward secrecy in escrowless mode. Aiming at the security flaws of an existing ID-based key agreement Protocol and a key agreement Protocol for multi-trustdomain proposed based on the new variant mode of ID- Base public key infrastrueture(PKI), an improved scheme is proposed. The new scheme can avoid excessive power of KGC to make up the security flaws in the original protocols, which has a higher level of security. The new schemes have many properties such as equal contribution; non-key control; against man-in-middle attack; etc.

International Conference on Computer Application and System Modeling•Oct 1, 2010•0 citations

Analysis and improvement of identity-based authenticated key agreement

MU Ning-bo

The security of a provably secure identity-based authenticated key agreement protocol in the standard model was analyzed,and it was found that the protocol used in escrowless mode has security flaws.When the private key generator(PKG) is controlled or attacked,all of the session keys can be obtained.To resist this attack,the identity-based authenticated key agreement protocol was improved.This new protocol was proven to be secure in the standard model and has the property of not needing session key escrow.

Harbin Gongcheng Daxue Xuebao/Journal of Harbin Engineering University•Jan 1, 2009•0 citations

Analysis and improvement of ID-based authenticated key agreement protocols

Qiuliang Xu

The security attributes of three provable secure ID-based authenticated key agreement protocols are analyzed,and an enhanced ID-based authenticated key agreement protocol is presented based on the previous work.The new scheme achieves most of the known security attributes,such as known-key secrecy,key-compromise impersonation resilience,unknown key-share resilience,no-key control and message independence,especially the PKG-forward secrecy and known session-specific temporary information secrecy attributes,meanwhile keeping with the nice efficiency.

Computer Engineering and Applications Journal•Jan 1, 2010•0 citations

Efficient ID-based authenticated key agreement protocol

Haiying Gao

Wang et al.(WANG SHENG-BAO,CAO ZHEN-FU,DONG XIAO-LEI.Provably secure identity-based authenticated key agreement protocols in the standard model.Chinese Journal of Computers,2007,30(10):1842-1854) proposed an ID-based Authenticated Key Agreement(IDAKA) protocol which was proved secure under standard model but without attribute of Private Key Generator(PKG) forward security.In order to remedy the flaw,a new protocol was introduced in which the shared secret message was calculated by the private key and temporary secret information of users of the protocol,and its security was also proved in standard model.Compared with known protocols,the new protocol is more efficient.Additionally,a method of jointly generating private key by PKG and user was proposed.The private key of user was calculated by the main secret key of system and secret information provided by user.It effectively solves the problem of PKG forward security of ID-based authenticated key agreement protocol.

Journal of Computer Applications•Jan 1, 2012•1 citation

A Secure ID-Based Explicit Authenticated Key Agreement Protocol without Key Escrow

Mengbo Hou, Qiuliang Xu

Key agreement protocols are essential for secure communications in open and distributed environments. Identity-based cryptography has become extremely fashionable in the last few years for its special advantages. In this paper, we point out some flaw in the scheme proposed by Wang et al., then we present a two-party identity-based explicit authenticated key agreement protocol with key confirmation, which was inspired on a new identity-based encryption scheme first proposed by Gentry and can be used properly in the escrowless mode. The scheme captures the attributes of known-key secrecy, key-compromise impersonation resilience, unknown key-share resilience, perfect forward secrecy, and no-key control. Especially, the scheme captures the PKG forward secrecy property. The PKG still could not recover all the userspsila past session keys even he knows the long-term private keys of all users.

International Conference on Information Assurance and Security (IAS)•Jan 1, 2009•1 citation

New Identity-based Authenticated Key Agreement Protocol

Hui Ding, Yin Xin-chun

This paper designs an identity-based authenticated key agreement protocol with perfect forward security of Private Key Generator(PKG).It is proved to provide known key security,forward secrecy,key-compromise impersonation and so on in standard model.Its security is based on Bilinear Decisional Diffie-Hellman(BDDH) assumption,so its security is higher than the protocols based on the weaker assumption.

Jisuanji gongcheng•Jan 1, 2010•0 citations
The security of a recently proposed ID-based authenticated key agreement protocol was analyzed. Although it is provably secure in the standard model, a malicious PKG （private key generator） can still obtain all of the agreed ses-sion keys, that is, it doesn’t provide PKG-forward secrecy in escrowless mode. To satisfy the security requirement in es-crowless mode, an improved version of the protocol was presented and it was proved to be a secure authenticated key agreement in the standard model. Results show that it provides perfect forward secrecy and PKG-forward secrecy.
The security of a recently proposed ID-based authenticated key agreement protocol was analyzed,and an enhanced ID-based authenticated key agreement protocol is presented based on the previous work. a malicious PKG (private key generator) can still obtain all of the agreed session keys, that is, it doesn't provide PKG-forward secrecy in escrowless mode. Aiming at the security flaws of an existing ID-based key agreement Protocol and a key agreement Protocol for multi-trustdomain proposed based on the new variant mode of ID- Base public key infrastrueture(PKI), an improved scheme is proposed. The new scheme can avoid excessive power of KGC to make up the security flaws in the original protocols, which has a higher level of security. The new schemes have many properties such as equal contribution; non-key control; against man-in-middle attack; etc.
The security of a provably secure identity-based authenticated key agreement protocol in the standard model was analyzed,and it was found that the protocol used in escrowless mode has security flaws.When the private key generator(PKG) is controlled or attacked,all of the session keys can be obtained.To resist this attack,the identity-based authenticated key agreement protocol was improved.This new protocol was proven to be secure in the standard model and has the property of not needing session key escrow.
The security attributes of three provable secure ID-based authenticated key agreement protocols are analyzed,and an enhanced ID-based authenticated key agreement protocol is presented based on the previous work.The new scheme achieves most of the known security attributes,such as known-key secrecy,key-compromise impersonation resilience,unknown key-share resilience,no-key control and message independence,especially the PKG-forward secrecy and known session-specific temporary information secrecy attributes,meanwhile keeping with the nice efficiency.
Wang et al.(WANG SHENG-BAO,CAO ZHEN-FU,DONG XIAO-LEI.Provably secure identity-based authenticated key agreement protocols in the standard model.Chinese Journal of Computers,2007,30(10):1842-1854) proposed an ID-based Authenticated Key Agreement(IDAKA) protocol which was proved secure under standard model but without attribute of Private Key Generator(PKG) forward security.In order to remedy the flaw,a new protocol was introduced in which the shared secret message was calculated by the private key and temporary secret information of users of the protocol,and its security was also proved in standard model.Compared with known protocols,the new protocol is more efficient.Additionally,a method of jointly generating private key by PKG and user was proposed.The private key of user was calculated by the main secret key of system and secret information provided by user.It effectively solves the problem of PKG forward security of ID-based authenticated key agreement protocol.
Key agreement protocols are essential for secure communications in open and distributed environments. Identity-based cryptography has become extremely fashionable in the last few years for its special advantages. In this paper, we point out some flaw in the scheme proposed by Wang et al., then we present a two-party identity-based explicit authenticated key agreement protocol with key confirmation, which was inspired on a new identity-based encryption scheme first proposed by Gentry and can be used properly in the escrowless mode. The scheme captures the attributes of known-key secrecy, key-compromise impersonation resilience, unknown key-share resilience, perfect forward secrecy, and no-key control. Especially, the scheme captures the PKG forward secrecy property. The PKG still could not recover all the userspsila past session keys even he knows the long-term private keys of all users.