Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Journal of Southwest China Normal University

Research and Design on an Efficient,DDoS-Resistant Internet Key Exchange Protocol

Zhipeng Li

Published Jan 1, 2009• 0 citations
OpenAlex

Abstract

For the weakness of the existent internet key exchange protocols on the protection of the identities and DDoS(distributed denial of service) attacks,TKE(Trusted Key Exchange) is presented as a new key exchange protocol in this paper.This protocol based on the assistant verification via the third trusted principal prevents attackers from obtaining the identity of Initiator or Responder and provides the most notably ability against susceptibility to DDoS.

Related papers

Design of a Trusted Third Party Key Exchange Protocol for Secure Internet of Things (IoT)

P. K Jamshiya, Divya M Menon

IoT incorporates a system of physical objects that are interconnected to exchange and collect data over the internet. The services provided by IoT, though improves the standard of our lives, have major challenges on securing networks and data in transmission because of the innumerable devices and services that are associated with it. Securing data is essential and it must not be seen as an afterthought. This paper proposes a secure Trusted-third-party based key exchange protocol (STKEP) for data communication in Internet of Things (IOT). This work employs an elliptic curve cryptographic method for encryption process. A session key is used to encrypt the data which is transmitted between the communication parties with the help of a trusted third party.

International Conference Inventive Communication and Computational Technologies•Apr 1, 2018•1 citation

Formal Protocol Design of ESIKE Based on Authentication Tests

Rui Jiang, Aiqun Hu, Jianhua Li

In this paper, we first present a concrete formal protocol design approach, which is based on authentication tests, to create an Efficient and Secure Internet Key Exchange (ESIKE) protocol. Then we formally prove the secure properties of ESIKE with strand space model and authentication tests. The ESIKE protocol overcomes the security shortages of the Internet Key Exchange (IKE), and can provide secure negotiation of session key and Security Association (SA), protection of endpoints ’ identities, and mutual authentication between the initiator and the responder. It needs only three messages and less computational load, so it is simple and efficient.

•Feb 15, 2012•2 citations

Key Agreement Protocols Resistant to a Denial-of-Service Attack

Sadaki Hirose

SUMMARY In this manuscript, two key agreement protocols which are resistant to a denial-of-service attack are constructed from a key agreement protocol in [9] provably secure against passive and active attacks. The denial-of-service attack considered is the resource-exhaustion attack on a responder. By the resource-exhaustion attack, a malicious initiator executes a key agreement protocol simultaneously as many times as possible to exhaust the responder’s resources and to disturb executions of it between honest initiators and the responder. The resources are the storage and the CPU. The proposed protocols are the first protocols resistant to both the storage-exhaustion attack and the CPU-exhaustion attack. The techniques used in the construction are stateless connection, weak key confirmation, and enforcement of heavy computation. The stateless connection is effective to enhancing the resistance to the storage-exhaustion attack. The weak key confirmation and the enforcement of heavy computation are effective to enhancing the resistance to the CPU-exhaustion attack.

IEICE Transactions on Information and Systems•Apr 1, 2001•9 citations

Internet key exchange protocol based on zero knowledge proof

Xiaoyuan Yang

IKE protocol,with its complexity,is vulnerable to multiple attacks.This paper first analyzes its flaws,and then based on the idea of zero knowledge proof,proposes a new protocol,which can resist MITM attack efficiently as well as reduce system consumption.This protocol fits the users who need more strong security protect for their data.

Computer Engineering and Applications Journal•Jan 1, 2010•0 citations

Authenticated Deniable Internet KeyExchange

R.Pitch, S. Saranya

We propose two public-key schemes to achieve deniable authentication for the Internet Key Exchange (IKE). Authentication in security had is the essential factor in the key establishment over Internet. The Deniable Internet key exchange protocol gives more value to the IKE standard. Our schemes can in some situations be more efficient than existing IKE protocols as well as having stronger deniability properties. Key-exchange, in particular Diffie–Hellman key exchange (DHKE), is among the core cryptographic mechanisms for ensuring network security. For key-exchange over the Internet, both security and privacy are desired. In this paper, we develop a family of privacy-preserving authenticated DHKE protocols named deniable Internet key-exchange (DIKE), both in the traditional PKI setting and in the identity-based setting. The newly developed DIKE protocols are of conceptual clarity and practical (online) efficiency. They provide useful privacy protection to both protocol participants, and add novelty and new value to the IKE standard.

International Journal of Innovative Research in Computer and Communication Engineering•Jan 1, 2015•0 citations

Provably Secure Internet Key Exchange Protocol

Jianfeng Ma

IKEv2 can not achieve active identity protection to initiator in initial exchange,and it has the security flaw of authentication failure.So an improvement protocol is presented.In the new protocol,the SIGn-andMAc approach is adopted to realize explicit key authentication and the responder is first authenticated to actively protect the initiator's identity.By including the peer's identity in the sending messages,the new protocol solves the problem of authentication failure.Moreover,the non-repudiation of the peers for their interactions is also achieved.The analysis results show that our protocol is session key secure and has a good performance.

Journal of Wuhan University•Jan 1, 2006•0 citations
For the weakness of the existent internet key exchange protocols on the protection of the identities and DDoS(distributed denial of service) attacks,TKE(Trusted Key Exchange) is presented as a new key exchange protocol in this paper.This protocol based on the assistant verification via the third trusted principal prevents attackers from obtaining the identity of Initiator or Responder and provides the most notably ability against susceptibility to DDoS.
IoT incorporates a system of physical objects that are interconnected to exchange and collect data over the internet. The services provided by IoT, though improves the standard of our lives, have major challenges on securing networks and data in transmission because of the innumerable devices and services that are associated with it. Securing data is essential and it must not be seen as an afterthought. This paper proposes a secure Trusted-third-party based key exchange protocol (STKEP) for data communication in Internet of Things (IOT). This work employs an elliptic curve cryptographic method for encryption process. A session key is used to encrypt the data which is transmitted between the communication parties with the help of a trusted third party.
In this paper, we first present a concrete formal protocol design approach, which is based on authentication tests, to create an Efficient and Secure Internet Key Exchange (ESIKE) protocol. Then we formally prove the secure properties of ESIKE with strand space model and authentication tests. The ESIKE protocol overcomes the security shortages of the Internet Key Exchange (IKE), and can provide secure negotiation of session key and Security Association (SA), protection of endpoints ’ identities, and mutual authentication between the initiator and the responder. It needs only three messages and less computational load, so it is simple and efficient.
SUMMARY In this manuscript, two key agreement protocols which are resistant to a denial-of-service attack are constructed from a key agreement protocol in [9] provably secure against passive and active attacks. The denial-of-service attack considered is the resource-exhaustion attack on a responder. By the resource-exhaustion attack, a malicious initiator executes a key agreement protocol simultaneously as many times as possible to exhaust the responder’s resources and to disturb executions of it between honest initiators and the responder. The resources are the storage and the CPU. The proposed protocols are the first protocols resistant to both the storage-exhaustion attack and the CPU-exhaustion attack. The techniques used in the construction are stateless connection, weak key confirmation, and enforcement of heavy computation. The stateless connection is effective to enhancing the resistance to the storage-exhaustion attack. The weak key confirmation and the enforcement of heavy computation are effective to enhancing the resistance to the CPU-exhaustion attack.
We propose two public-key schemes to achieve deniable authentication for the Internet Key Exchange (IKE). Authentication in security had is the essential factor in the key establishment over Internet. The Deniable Internet key exchange protocol gives more value to the IKE standard. Our schemes can in some situations be more efficient than existing IKE protocols as well as having stronger deniability properties. Key-exchange, in particular Diffie–Hellman key exchange (DHKE), is among the core cryptographic mechanisms for ensuring network security. For key-exchange over the Internet, both security and privacy are desired. In this paper, we develop a family of privacy-preserving authenticated DHKE protocols named deniable Internet key-exchange (DIKE), both in the traditional PKI setting and in the identity-based setting. The newly developed DIKE protocols are of conceptual clarity and practical (online) efficiency. They provide useful privacy protection to both protocol participants, and add novelty and new value to the IKE standard.
IKEv2 can not achieve active identity protection to initiator in initial exchange,and it has the security flaw of authentication failure.So an improvement protocol is presented.In the new protocol,the SIGn-andMAc approach is adopted to realize explicit key authentication and the responder is first authenticated to actively protect the initiator's identity.By including the peer's identity in the sending messages,the new protocol solves the problem of authentication failure.Moreover,the non-repudiation of the peers for their interactions is also achieved.The analysis results show that our protocol is session key secure and has a good performance.