Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Jisuanji yingyong yanjiu

Extended identity-based authenticated key agreement in standard model

Min Chen

Published Jan 1, 2014• 0 citations
OpenAlex

Abstract

The existing identity-based authenticated key agreement(ID-AKA) protocols in standard model either had known security flaws or could be verified security in weak security models.This paper proposed an extended ID-AKA protocol,which fully considered the security needs for leaking the long-term private keys,the session temporary secrets and the PKG master key.It further defined two types of fresh oracle and a session-state query,based on the ID-BJM security model,in which simulated secure games of key-compromise impersonation and perfect forward secrecy respectively.The new protocol was proven to meet the strong security with the improved ID-BJM model.The comparative analysis shows that the new protocol not only has high security,but lower computational costs.And the extended ID-AKA protocol can be used to build secure point to point communication channel on the application scenarios without key escrow.

Related papers

Security-provable Identity-based Authenticated Key Agreement Protocol

Yafei Wang

Most Identity-based Authenticated Key Agreement(ID-AKA) protocols have poor performance on security and the efficiency.To solve this problem,this paper presents an improved ID-AKA protocol.Security proof with the modular approach in the mBR model is provided,which means the new protocol satisfies perfect forward security,PKG forward security,resistant to key-compromise impersonation.Furthermore,the new protocol can satisfy resistance to leakage of ephemeral secrets.Compared with previous ID-AKA protocols which can satisfy the same security properties,the new protocol has higher efficiency.

Jisuanji gongcheng•Jan 1, 2012•0 citations

A one-round ID-based authenticated key agreement protocol with enhanced security

Mengbo Hou, Qiuliang Xu

Authenticated key agreement protocol is used to set up the session key and establish secure channel for network communication in the open environment. So far, great deals of identity-based protocols have been proposed to provide robust mutual authentication and key establishment in the two-party setting. Majority of the existing identity-based key agreement protocols require expensive bilinear pairing operation and only provide limited security attributes. Therefore, such protocols are unsuitable for real-world applications that require stronger sense of secrecy. In this paper, we first analysis some of the schemes proposed recently, and then present a one-round ID-based authenticated key agreement protocol with enhanced security attributes, which doesn't need pairing operation and achieves most of the required security attributes, such as known-key secrecy, perfect forward secrecy, PKG Forward Secrecy, key-compromise impersonation resilience, unknown key-share resilience and no key control. In addition, it captures the enhanced security attributes-Known session-specific temporary key information secrecy.

International Conference on Intelligent Control and Information Processing•Jul 1, 2011•2 citations

Cryptanalysis on Identity-based Authenticated Key Agreement Protocols from Pairings

Mengbo Hou, Qiuliang Xu, Shanqing Guo +1 more

Abstract—Two-party authenticated key agreement protocol is used to authenticate entities and establish session keys in an open network in order to provide secure communications between two parties. Several security attributes are highly desired for such protocols, such as perfect forward secrecy (the corruption of long-term keys of all the entities should not compromise any session key), PKG forward secrecy (the corruption of the PKG's master key in the ID-based system should not compromise the established session keys), and known session-key specific temporary information secrecy (The exposure of private temporary information should not compromise the secrecy of generated session keys). In 2005, Choie et al. proposed three identity-based authenticated key agreement protocols from pairings. Our analysis shows that they all didn't provide protection against known session-key specific temporary information attack and some of them are vulnerable against man-in-the-middle attack, such as the key replicating attack. We analyze some of the attacks under the BR93 security model. Index Terms—key agreement protocol, known session-key specific temporary information secrecy, key replicating attack, security model I.

Journal of Networks•Jun 16, 2010•8 citations

Strongly Secure Certificateless Authenticated Key Agreement Protocol in Standard Model

Yanhong Zhang, Ming CHEN

Abstract:Based on Zhang’s security model, an improved pairing-free certificateless key agreement,CL-AKA random oracle model, was proposed. An ephemeral-secret query and three types of fresh oracles were further defined in the improved CL-AKA random oracle model to achieve the simulation of key-compromise impersonation, disclosure of ephemeral secrets and perfect forward secrecy. A CL-AKA protocol with strong security was proposed, costing only 9 scalar multiplications on the elliptic curve. The secure of the new protocol was proved in the improved model. The comparative analysis pointed out that the new protocol with strong security and low computing costs can be used to build secure mobile communication environment.

•Jan 1, 2013•0 citations

Analysis and improvement of identity-based authenticated key agreement

MU Ning-bo

The security of a provably secure identity-based authenticated key agreement protocol in the standard model was analyzed,and it was found that the protocol used in escrowless mode has security flaws.When the private key generator(PKG) is controlled or attacked,all of the session keys can be obtained.To resist this attack,the identity-based authenticated key agreement protocol was improved.This new protocol was proven to be secure in the standard model and has the property of not needing session key escrow.

Harbin Gongcheng Daxue Xuebao/Journal of Harbin Engineering University•Jan 1, 2009•0 citations

A strongly secure identity-based authenticated key agreement protocol without pairings under the GDH assumption

Haiyan Sun, Qiaoyan Wen, Hua Zhang +1 more

Among the existing identity-based authenticated key agreement ID-AKA protocols, there are only a few of them that can resist to leakage of ephemeral secret keys, which is about the protection of the session secret key after the ephemeral secret keys of users are compromised. However, all these ID-AKA protocols with leakage of ephemeral secret keys resistance require expensive bilinear pairing operations. In this paper, we present a pairing-free ID-AKA protocol with ephemeral secrets leakage resistance. We also provide a full proof of its security in the extended Canetti-Krawczyk model, which not only can capture resistance to leakage of ephemeral secret keys but also can capture other basic security properties such as master key forward security and key compromise impersonation resistance. Compared with the existing ID-AKA protocols, our scheme is a good trade-off between security and efficiency. Copyright © 2015 John Wiley & Sons, Ltd.

Security and Communication Networks•Mar 23, 2015•19 citations
The existing identity-based authenticated key agreement(ID-AKA) protocols in standard model either had known security flaws or could be verified security in weak security models.This paper proposed an extended ID-AKA protocol,which fully considered the security needs for leaking the long-term private keys,the session temporary secrets and the PKG master key.It further defined two types of fresh oracle and a session-state query,based on the ID-BJM security model,in which simulated secure games of key-compromise impersonation and perfect forward secrecy respectively.The new protocol was proven to meet the strong security with the improved ID-BJM model.The comparative analysis shows that the new protocol not only has high security,but lower computational costs.And the extended ID-AKA protocol can be used to build secure point to point communication channel on the application scenarios without key escrow.
Most Identity-based Authenticated Key Agreement(ID-AKA) protocols have poor performance on security and the efficiency.To solve this problem,this paper presents an improved ID-AKA protocol.Security proof with the modular approach in the mBR model is provided,which means the new protocol satisfies perfect forward security,PKG forward security,resistant to key-compromise impersonation.Furthermore,the new protocol can satisfy resistance to leakage of ephemeral secrets.Compared with previous ID-AKA protocols which can satisfy the same security properties,the new protocol has higher efficiency.
Authenticated key agreement protocol is used to set up the session key and establish secure channel for network communication in the open environment. So far, great deals of identity-based protocols have been proposed to provide robust mutual authentication and key establishment in the two-party setting. Majority of the existing identity-based key agreement protocols require expensive bilinear pairing operation and only provide limited security attributes. Therefore, such protocols are unsuitable for real-world applications that require stronger sense of secrecy. In this paper, we first analysis some of the schemes proposed recently, and then present a one-round ID-based authenticated key agreement protocol with enhanced security attributes, which doesn't need pairing operation and achieves most of the required security attributes, such as known-key secrecy, perfect forward secrecy, PKG Forward Secrecy, key-compromise impersonation resilience, unknown key-share resilience and no key control. In addition, it captures the enhanced security attributes-Known session-specific temporary key information secrecy.
Abstract—Two-party authenticated key agreement protocol is used to authenticate entities and establish session keys in an open network in order to provide secure communications between two parties. Several security attributes are highly desired for such protocols, such as perfect forward secrecy (the corruption of long-term keys of all the entities should not compromise any session key), PKG forward secrecy (the corruption of the PKG's master key in the ID-based system should not compromise the established session keys), and known session-key specific temporary information secrecy (The exposure of private temporary information should not compromise the secrecy of generated session keys). In 2005, Choie et al. proposed three identity-based authenticated key agreement protocols from pairings. Our analysis shows that they all didn't provide protection against known session-key specific temporary information attack and some of them are vulnerable against man-in-the-middle attack, such as the key replicating attack. We analyze some of the attacks under the BR93 security model. Index Terms—key agreement protocol, known session-key specific temporary information secrecy, key replicating attack, security model I.
Abstract:Based on Zhang’s security model, an improved pairing-free certificateless key agreement,CL-AKA random oracle model, was proposed. An ephemeral-secret query and three types of fresh oracles were further defined in the improved CL-AKA random oracle model to achieve the simulation of key-compromise impersonation, disclosure of ephemeral secrets and perfect forward secrecy. A CL-AKA protocol with strong security was proposed, costing only 9 scalar multiplications on the elliptic curve. The secure of the new protocol was proved in the improved model. The comparative analysis pointed out that the new protocol with strong security and low computing costs can be used to build secure mobile communication environment.
The security of a provably secure identity-based authenticated key agreement protocol in the standard model was analyzed,and it was found that the protocol used in escrowless mode has security flaws.When the private key generator(PKG) is controlled or attacked,all of the session keys can be obtained.To resist this attack,the identity-based authenticated key agreement protocol was improved.This new protocol was proven to be secure in the standard model and has the property of not needing session key escrow.
Among the existing identity-based authenticated key agreement ID-AKA protocols, there are only a few of them that can resist to leakage of ephemeral secret keys, which is about the protection of the session secret key after the ephemeral secret keys of users are compromised. However, all these ID-AKA protocols with leakage of ephemeral secret keys resistance require expensive bilinear pairing operations. In this paper, we present a pairing-free ID-AKA protocol with ephemeral secrets leakage resistance. We also provide a full proof of its security in the extended Canetti-Krawczyk model, which not only can capture resistance to leakage of ephemeral secret keys but also can capture other basic security properties such as master key forward security and key compromise impersonation resistance. Compared with the existing ID-AKA protocols, our scheme is a good trade-off between security and efficiency. Copyright © 2015 John Wiley & Sons, Ltd.