Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Jisuanji yingyong yanjiu

Analysis and improvement of two-party key authenticated agreement scheme

Jian Shu

Published Jan 1, 2011• 0 citations
OpenAlex

Abstract

Based on signcryption scheme,Liu-Xu proposed an efficient and strong secure two-party key agreement protocol,which worked in an elliptic curve group.Security analysis showed that the scheme did not achieve strong security.The protocol,however,was susceptible to leakage of ephemeral secrets attack,and couldn't provide perfect forward security.Accor-dingly,the current paper demonstrated the vulnerability of Liu-Xu's protocol against such attacks due to redundancy of the exchange messages,and then presented an improved protocol in order to resolve such problems.

Related papers

Analysis and improvement of certificateless two-party key agreement scheme

Jian Shu

Based on signcryption scheme,Liu-Xu proposes an efficient certificateless authenticated two-party key agreement protocol.Security analysis shows that the scheme hasn't achieved strong security due to redundancy of the exchange messages.The scheme is vulnerable to passive attack and active attack.To overcome the problem mentioned above,an improved scheme without using signcryption scheme is proposed.Analysis result proves that the efficiency and security of the proposed protocol is improved.

Computer Engineering and Applications Journal•Jan 1, 2012•0 citations

Analysis and improvement certificateless authenticated key agreement protocol

Jian Shu

This paper studied two-party authenticated agreement protocol in the certificateless public setting.Analyzed the security of Liu-xu's certificateless authenticated two-party key agreement protocol,and it was shown that the scheme did not achieve strong security.The scheme was vulnerable to key compromise impersonation attack and leakage of ephemeral secrets attack.The reason why the attack can work was analyzed and proposed an improved scheme to remove the attack.It is not hard to devise certificateless authenticated two-party key agreement protocols that look secure,but making the proofs word is not always so simple.

Jisuanji yingyong yanjiu•Jan 1, 2012•0 citations

Security weaknesses of two-party ID-based authenticated key agreement protocols

Jianzhong Zhang, Zuoshun Wu

We analyse the existing ID-based authenticated key agreement protocols, and find out that several proposed protocols of this type do not satisfy related security attributes. This paper reviews Wang's, He's and Guo's protocols sequentially, and shows key compromise impersonation attack on Wang's scheme, ephemeral secrets reveal attack on He's scheme, key reveal attack and ephemeral secrets reveal attack on Guo's scheme, respectively, Finally, this paper proposes some improving suggestions on corresponding weaknesses of these protocols.

International Conference on Automatic Control and Artificial Intelligence (ACAI)•Jan 1, 2012•0 citations

Analysis and Improvement of Authenticated Key Agreement Protocol Based on Signcryption

Jian Shu

The key establishment protocol called LLH can not resist impersonation attack.Aiming at this problem,an improved protocol based on signcryption is proposed.It uses elliptic curve cryptosystem technology under the computational Diffie-Hellman assumption,combines authentication and session key and implements the functions of mutual authentication and key confirmation,so that the security is enhanced.Theoretical analysis results show that the proposed protocol has strong security features and can be resistant to impersonation attack.

Jisuanji gongcheng•Jan 1, 2012•0 citations

Certificateless two-party key agreement scheme without bilinear pairing

XU Chun-xiang

A few of certificateless key agreement schemes have been proposed in recent years,all of them need pairing operations,what's more,most of them are vulnerable to the key compromise impersonation attack and resistance to leakage of ephemeral keys.The provably secure certificateless key agreement protocol was proposed by Lippold in 2009,but their protocol suffered from computation burden.In order to solve the above-mentioned problem,this paper proposed a new pairing-free certificateless two party key agreement scheme (CL-KA) and presened its security properties.The new scheme was secure as long as each party had at least one uncompromised secret.Thus,the new scheme was secure even if the key generation centre learned the ephemeral secrets of both parties.The new scheme achieves efficiency in computational cost when compared with Lippold's protocol.

Jisuanji yingyong yanjiu•Jan 1, 2010•3 citations

An efficient and secure one-round authenticated key agreement protocol without pairings

Mengbo Hou, Qiuliang Xu

Two-Party Authenticated key agreement protocol is essential for setting up the common session key for parties to establish secure channel for network communication in the open environment. Most of proposed schemes require expensive bilinear pairing operation and only provide limited security attributes. So such protocols are unsuitable for real-world applications that require stronger sense of secrecy. In this paper, we first analysis two schemes recently proposed by Cao etc., and then present a one-round ID-based authenticated key agreement protocol with more desired security attributes, which need no pairing operations while still achieve nice computational efficiency. These security attributes include known-key secrecy, perfect forward secrecy, PKG forward secrecy, key-compromise impersonation resilience, unknown key-share resilience and no key control. Moreover, it captures the enhanced security attributes known session-specific temporary key information secrecy, which means that even the ephemeral secret key were compromised, the adversary can hardly acquire the agreed session key.

International Conference on Multimedia Technology (ICMT)•Jul 1, 2011•4 citations
Based on signcryption scheme,Liu-Xu proposed an efficient and strong secure two-party key agreement protocol,which worked in an elliptic curve group.Security analysis showed that the scheme did not achieve strong security.The protocol,however,was susceptible to leakage of ephemeral secrets attack,and couldn't provide perfect forward security.Accor-dingly,the current paper demonstrated the vulnerability of Liu-Xu's protocol against such attacks due to redundancy of the exchange messages,and then presented an improved protocol in order to resolve such problems.
This paper studied two-party authenticated agreement protocol in the certificateless public setting.Analyzed the security of Liu-xu's certificateless authenticated two-party key agreement protocol,and it was shown that the scheme did not achieve strong security.The scheme was vulnerable to key compromise impersonation attack and leakage of ephemeral secrets attack.The reason why the attack can work was analyzed and proposed an improved scheme to remove the attack.It is not hard to devise certificateless authenticated two-party key agreement protocols that look secure,but making the proofs word is not always so simple.
We analyse the existing ID-based authenticated key agreement protocols, and find out that several proposed protocols of this type do not satisfy related security attributes. This paper reviews Wang's, He's and Guo's protocols sequentially, and shows key compromise impersonation attack on Wang's scheme, ephemeral secrets reveal attack on He's scheme, key reveal attack and ephemeral secrets reveal attack on Guo's scheme, respectively, Finally, this paper proposes some improving suggestions on corresponding weaknesses of these protocols.
The key establishment protocol called LLH can not resist impersonation attack.Aiming at this problem,an improved protocol based on signcryption is proposed.It uses elliptic curve cryptosystem technology under the computational Diffie-Hellman assumption,combines authentication and session key and implements the functions of mutual authentication and key confirmation,so that the security is enhanced.Theoretical analysis results show that the proposed protocol has strong security features and can be resistant to impersonation attack.
A few of certificateless key agreement schemes have been proposed in recent years,all of them need pairing operations,what's more,most of them are vulnerable to the key compromise impersonation attack and resistance to leakage of ephemeral keys.The provably secure certificateless key agreement protocol was proposed by Lippold in 2009,but their protocol suffered from computation burden.In order to solve the above-mentioned problem,this paper proposed a new pairing-free certificateless two party key agreement scheme (CL-KA) and presened its security properties.The new scheme was secure as long as each party had at least one uncompromised secret.Thus,the new scheme was secure even if the key generation centre learned the ephemeral secrets of both parties.The new scheme achieves efficiency in computational cost when compared with Lippold's protocol.
Two-Party Authenticated key agreement protocol is essential for setting up the common session key for parties to establish secure channel for network communication in the open environment. Most of proposed schemes require expensive bilinear pairing operation and only provide limited security attributes. So such protocols are unsuitable for real-world applications that require stronger sense of secrecy. In this paper, we first analysis two schemes recently proposed by Cao etc., and then present a one-round ID-based authenticated key agreement protocol with more desired security attributes, which need no pairing operations while still achieve nice computational efficiency. These security attributes include known-key secrecy, perfect forward secrecy, PKG forward secrecy, key-compromise impersonation resilience, unknown key-share resilience and no key control. Moreover, it captures the enhanced security attributes known session-specific temporary key information secrecy, which means that even the ephemeral secret key were compromised, the adversary can hardly acquire the agreed session key.