Computer Engineering and Applications Journal

Analysis and improvement of certificateless two-party key agreement scheme

Jian Shu

Published Jan 1, 2012• 0 citations

Abstract

Based on signcryption scheme,Liu-Xu proposes an efficient certificateless authenticated two-party key agreement protocol.Security analysis shows that the scheme hasn't achieved strong security due to redundancy of the exchange messages.The scheme is vulnerable to passive attack and active attack.To overcome the problem mentioned above,an improved scheme without using signcryption scheme is proposed.Analysis result proves that the efficiency and security of the proposed protocol is improved.

Related papers

Analysis and improvement certificateless authenticated key agreement protocol

Jian Shu

This paper studied two-party authenticated agreement protocol in the certificateless public setting.Analyzed the security of Liu-xu's certificateless authenticated two-party key agreement protocol,and it was shown that the scheme did not achieve strong security.The scheme was vulnerable to key compromise impersonation attack and leakage of ephemeral secrets attack.The reason why the attack can work was analyzed and proposed an improved scheme to remove the attack.It is not hard to devise certificateless authenticated two-party key agreement protocols that look secure,but making the proofs word is not always so simple.

Jisuanji yingyong yanjiuJan 1, 20120 citations

Analysis and improvement of two-party key authenticated agreement scheme

Jian Shu

Based on signcryption scheme,Liu-Xu proposed an efficient and strong secure two-party key agreement protocol,which worked in an elliptic curve group.Security analysis showed that the scheme did not achieve strong security.The protocol,however,was susceptible to leakage of ephemeral secrets attack,and couldn't provide perfect forward security.Accor-dingly,the current paper demonstrated the vulnerability of Liu-Xu's protocol against such attacks due to redundancy of the exchange messages,and then presented an improved protocol in order to resolve such problems.

Jisuanji yingyong yanjiuJan 1, 20110 citations

Certificateless authenticated tripartite key agreement protocol

LI Xu-don

In order to resist against the active attacks,Chen Jia-qi proposed an authenticated tripartite key agreement protocol based on certificateless cryptography in 2010. However,the protocol couldn't resist the passive opponent's attack,and it also couldn't meet some security attributes stated by Chen Jia-qi. In order to solve the above problems,based on an efficient certificateless two-party authenticated key agreement protocol given by He De-biao,this paper proposed a new certificateless authenticated tripartite key agreement protocol. The security and efficiency of the new protocol were analyzed. The result shows that the new protocol satisfies the security properties of the certificateless authenticated tripartite key agreement protocol. Compared with the protocol proposed by Chen Jia-qi,the efficiency of the new protocol is higher,which attributes to the reduced number of pairings in the new protocol.

Jisuanji yingyong yanjiuJan 1, 20140 citations

Attack and improvement of a certificateless two-party authenticated key agreement protocol

Zhang Quan-lin

This paper analyzed a bilinear pairing-free certificateless two-party authenticated key agreement protocol proposed by Kim et al. The protocol did not satisfy an important security feature that was the basic impersonation attack under public key replacement attack. As well as,it mounted a specific attack on the protocol. Then an improved certificateless two-party authenticated key agreement protocol was presented in order to satisfy the missing security property. The analysis shows that the improved protocol can efficiently withstand public key replacement attack and satisfy some necessary security properties.

Information technology newsletterJan 1, 20150 citations

Authenticated tripartite key agreement protocol based on certificateless cryptography

Jiaqi Chen, Jun Feng, Hao Yan

In order to make key agreement protocol to resist against the active attacks, proposed a certificateless authenticated tripartite key agreement protocol. First, analysed the existing key agreement protocol. Then designed a security tripartite key agreement scheme based on the theory of certificateless cryptography. This protocol builds a security tripartite session key only need one round message exchange, which can strongly overcome the key escrow and offer perfect forward secrecy. The analysis of security and complexity shows that this protocol is secure and effective.

Jisuanji yingyong yanjiuJan 1, 20101 citation

Certificateless two-party key agreement scheme without bilinear pairing

XU Chun-xiang

A few of certificateless key agreement schemes have been proposed in recent years,all of them need pairing operations,what's more,most of them are vulnerable to the key compromise impersonation attack and resistance to leakage of ephemeral keys.The provably secure certificateless key agreement protocol was proposed by Lippold in 2009,but their protocol suffered from computation burden.In order to solve the above-mentioned problem,this paper proposed a new pairing-free certificateless two party key agreement scheme (CL-KA) and presened its security properties.The new scheme was secure as long as each party had at least one uncompromised secret.Thus,the new scheme was secure even if the key generation centre learned the ephemeral secrets of both parties.The new scheme achieves efficiency in computational cost when compared with Lippold's protocol.

Jisuanji yingyong yanjiuJan 1, 20103 citations