Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Computer Engineering and Applications Journal

Cryptanalysis and improvement of TTS group key agreement protocol

Xianfeng Guo

Published Jan 1, 2008• 0 citations
OpenAlex

Abstract

This work investigates the group key agreement protocols,and points out that Wang et al's key agreement protocol(Tree and Threshold Scheme,TST) is not only non-contributory,but also vulnerable to key control i.e.the sponsor of the key agreement can predetermine the group key.To over come the security flaws,this paper presents an improve scheme(I-TTS).Security analysis indicate that I-TTS scheme is contributory,and no one can predetermine the negotiated group key.Further more,the I-TTS scheme is perfect forward secrecy.

Related papers

Analysis and improvement of two-party key authenticated agreement scheme

Jian Shu

Based on signcryption scheme,Liu-Xu proposed an efficient and strong secure two-party key agreement protocol,which worked in an elliptic curve group.Security analysis showed that the scheme did not achieve strong security.The protocol,however,was susceptible to leakage of ephemeral secrets attack,and couldn't provide perfect forward security.Accor-dingly,the current paper demonstrated the vulnerability of Liu-Xu's protocol against such attacks due to redundancy of the exchange messages,and then presented an improved protocol in order to resolve such problems.

Jisuanji yingyong yanjiu•Jan 1, 2011•0 citations

An Enhanced Two-Party Key Agreement Protocol in the Key Escrow Mode

Mengbo Hou, Qiuliang Xu

In an open and distributed environment, authenticated key agreement protocol, as an important cryptographic primitive, is used to authenticate entities and establish session key in order to provide secure communications. Key escrow is essential in situations where confidentiality and audit trail are legal requirements, whilst perfect forward secrecy and known session-specific temporary information secrecy attributes are desirable to provide stronger security. In this paper, we give a cryptanalysis on the scheme due to Wang et al., which is based on the identity-based encryption scheme proposed by Gentry (Eurocrypt'06), and then present an enhanced secure two-party identity-based authenticated key agreement protocol. The new proposed protocol achieves most of the required security attributes and can be used properly in the escrow mode. Security analysis shows that it achieves the attributes of known-key secrecy, key-compromise impersonation resilience, unknown key-share resilience and no key control. In addition, it captures the perfect forward secrecy and known session-specific temporary information secrecy attributes.

International Conference on Multimedia Information Networking and Security•Jan 1, 2009•0 citations

Cryptanalysis and improvement of the Lee-Lee identity-based key agreement protocol

Shuangqing Liu, Shengbao Wang, Qizhen Wang +2 more

Authenticated key agreement protocols are essential for secure communications in open and distributed environments. The protocol design is, however, extremely error-prone due to the inherent complexity of this problem. In this paper, we revisit an efficient identity-based (ID-based) authenticated key agreement protocols due to Lee and Lee. We reveal previously unpublished flaws in the protocol, whereby we demonstrate that it is vulnerable to key control attacks which violate its claimed security attributes. We then put forward an improved protocol to fix the identified security problem.

International Conference on Information Management and Engineering (ICIME)•Jan 1, 2010•0 citations

Improvement of identity-based authenticated key agreement protocol

Chi Xu, Wen Fang Zhang, Zhen Hu

The security of a recently proposed ID-based authenticated key agreement protocol was analyzed,and an enhanced ID-based authenticated key agreement protocol is presented based on the previous work. a malicious PKG (private key generator) can still obtain all of the agreed session keys, that is, it doesn't provide PKG-forward secrecy in escrowless mode. Aiming at the security flaws of an existing ID-based key agreement Protocol and a key agreement Protocol for multi-trustdomain proposed based on the new variant mode of ID- Base public key infrastrueture(PKI), an improved scheme is proposed. The new scheme can avoid excessive power of KGC to make up the security flaws in the original protocols, which has a higher level of security. The new schemes have many properties such as equal contribution; non-key control; against man-in-middle attack; etc.

International Conference on Computer Application and System Modeling•Oct 1, 2010•0 citations

Cryptanalysis of Improved One-round Lin-Li's Tripartite Key Agreement Protocol

Meng-Hui Lim, Sang-Gon Lee, Hoon Jae Lee

A tripartite authenticated key agreement protocol is designed for three entities to communicate securely over an open network particularly with a shared key. Recently, we have improved a one-round tripartite authenticated key agreement protocol proposed by Lin-Li due to its vulnerability to the forging attack in our previous report. However, we have later discovered that both the original Lin-Li's scheme and our previous enhanced protocol are vulnerable to the insider replay attack. Moreover, we have also realized that both protocols have falsely claimed the forward secrecy attribute. In this paper, we will revise our improvements and again secure this protocol against these cryptanalytic attacks while recovering the precious perfect forward secrecy property.

International Conference on Advanced Communication Technology•Feb 1, 2008•5 citations

Cryptanalysis on Improved One-round Lin-Li's Tripartite Key Agreement Protocol.

Meng-Hui Lim, Sang-Gon Lee, Hoon Jae Lee

A tripartite authenticated key agreement protocol is designed for three entities to communicate securely over an open network particularly with a shared key. Recently, we have improved a one-round tripartite authenticated key agreement protocol proposed by Lin-Li due to its vulnerability to the forging attack in our previous report. However, we have later discovered that both the original Lin-Li’s scheme and our previous enhanced protocol are vulnerable to the insider replay attack. Moreover, we have also realized that both protocols have falsely claimed the forward secrecy attribute. In this paper, we will revise our improvements and again secure this protocol against these cryptanalytic attacks while recovering the precious perfect forward secrecy property. 1.

•Jan 1, 2007•3 citations
This work investigates the group key agreement protocols,and points out that Wang et al's key agreement protocol(Tree and Threshold Scheme,TST) is not only non-contributory,but also vulnerable to key control i.e.the sponsor of the key agreement can predetermine the group key.To over come the security flaws,this paper presents an improve scheme(I-TTS).Security analysis indicate that I-TTS scheme is contributory,and no one can predetermine the negotiated group key.Further more,the I-TTS scheme is perfect forward secrecy.
Based on signcryption scheme,Liu-Xu proposed an efficient and strong secure two-party key agreement protocol,which worked in an elliptic curve group.Security analysis showed that the scheme did not achieve strong security.The protocol,however,was susceptible to leakage of ephemeral secrets attack,and couldn't provide perfect forward security.Accor-dingly,the current paper demonstrated the vulnerability of Liu-Xu's protocol against such attacks due to redundancy of the exchange messages,and then presented an improved protocol in order to resolve such problems.
In an open and distributed environment, authenticated key agreement protocol, as an important cryptographic primitive, is used to authenticate entities and establish session key in order to provide secure communications. Key escrow is essential in situations where confidentiality and audit trail are legal requirements, whilst perfect forward secrecy and known session-specific temporary information secrecy attributes are desirable to provide stronger security. In this paper, we give a cryptanalysis on the scheme due to Wang et al., which is based on the identity-based encryption scheme proposed by Gentry (Eurocrypt'06), and then present an enhanced secure two-party identity-based authenticated key agreement protocol. The new proposed protocol achieves most of the required security attributes and can be used properly in the escrow mode. Security analysis shows that it achieves the attributes of known-key secrecy, key-compromise impersonation resilience, unknown key-share resilience and no key control. In addition, it captures the perfect forward secrecy and known session-specific temporary information secrecy attributes.
Authenticated key agreement protocols are essential for secure communications in open and distributed environments. The protocol design is, however, extremely error-prone due to the inherent complexity of this problem. In this paper, we revisit an efficient identity-based (ID-based) authenticated key agreement protocols due to Lee and Lee. We reveal previously unpublished flaws in the protocol, whereby we demonstrate that it is vulnerable to key control attacks which violate its claimed security attributes. We then put forward an improved protocol to fix the identified security problem.
The security of a recently proposed ID-based authenticated key agreement protocol was analyzed,and an enhanced ID-based authenticated key agreement protocol is presented based on the previous work. a malicious PKG (private key generator) can still obtain all of the agreed session keys, that is, it doesn't provide PKG-forward secrecy in escrowless mode. Aiming at the security flaws of an existing ID-based key agreement Protocol and a key agreement Protocol for multi-trustdomain proposed based on the new variant mode of ID- Base public key infrastrueture(PKI), an improved scheme is proposed. The new scheme can avoid excessive power of KGC to make up the security flaws in the original protocols, which has a higher level of security. The new schemes have many properties such as equal contribution; non-key control; against man-in-middle attack; etc.
A tripartite authenticated key agreement protocol is designed for three entities to communicate securely over an open network particularly with a shared key. Recently, we have improved a one-round tripartite authenticated key agreement protocol proposed by Lin-Li due to its vulnerability to the forging attack in our previous report. However, we have later discovered that both the original Lin-Li's scheme and our previous enhanced protocol are vulnerable to the insider replay attack. Moreover, we have also realized that both protocols have falsely claimed the forward secrecy attribute. In this paper, we will revise our improvements and again secure this protocol against these cryptanalytic attacks while recovering the precious perfect forward secrecy property.
A tripartite authenticated key agreement protocol is designed for three entities to communicate securely over an open network particularly with a shared key. Recently, we have improved a one-round tripartite authenticated key agreement protocol proposed by Lin-Li due to its vulnerability to the forging attack in our previous report. However, we have later discovered that both the original Lin-Li’s scheme and our previous enhanced protocol are vulnerable to the insider replay attack. Moreover, we have also realized that both protocols have falsely claimed the forward secrecy attribute. In this paper, we will revise our improvements and again secure this protocol against these cryptanalytic attacks while recovering the precious perfect forward secrecy property. 1.