Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Weakness of Several Identity-based Tripartite Authenticated Key Agreement Protocols.

Xi Lin, Lin Sun

Published Jan 1, 2013• 2 citations
OpenAlex

Abstract

Abstract: Key agreement allows multi-parties exchanging public information to create a common secret key that is known only to those entities over an insecure network. In recent years, several identity-based authenticated key agreement protocols have been proposed. In this study, we analyze three identity-based tripartite authenticated key agreement protocols. After the analysis, we found that these protocols do not possess the desirable security attributes.

Related papers

Cryptanalysis of Two Tripartite Authenticated Key Agreement Protocols

Yang Lu, Quanling Zhang, Jiguo Li

The tripartite authenticated key agreement (AKA) protocol is crucial in providing data confidentiality to subsequent communications among three parties over an insecure public network. In recent years, several identity-based and certificate less tripartite AKA protocols have been proposed. Unfortunately, most of them are insecure. In this paper, we analyze an identity-based tripartite AKA protocol and a certificate less tripartite AKA protocol. Our cryptanalysis shows that one neither meets the desirable security properties.

International Symposium on Distributed Computing and Applications for Business Engineering and Science (DCABES)•Aug 1, 2015•3 citations

An Improvement of Certification-based One-Round Tripartite Key Agreement Protocols

Kambombo Mtong, Eun‐Jun Yoon

Key agreement protocols allow multi-parties exchanging public information to create a common secret key that is known only to those entities over an insecure network. Since Joux first published the pairing-based one round tripartite key agreement protocol, many authenticated protocols have been proposed. Unfortunately, many of them have been broken while others have been shown to be deficient in some desirable security attributes. In 2004, Cheng et al. presented two protocols aimed at strengthening Shim’s certificate-based and Zhang et al.’s tripartite identitybased protocols. This paper reports that 1) In Cheng et al.’s identity-based protocol, an adversary can extract long-term private keys of all the parties involved; and 2) Cheng et al.’s certificationbased protocol is weak against key integrity attacks. This paper suggests possible remedies for the security flaws in both protocols and then presents a modified Cheng et al.’s identity-based, oneround tripartite protocol that is more secure than the original protocol.

IEIE Transactions on Smart Processing and Computing•Oct 1, 2013•0 citations

An attribute‐based tripartite key agreement protocol

Majid Bayat, Mohammad Reza Aref

Summary Tripartite key agreement protocols enable three users to share a common and secure secret key by exchanging some information in a public channel. In this paper, we introduce the first attribute‐based tripartite key agreement protocol, which is a kind of identity‐based tripartite key agreement protocols, which the identities consist of descriptive attributes. Also, we propose an extended security model for these protocols and prove the security of our protocol in the random oracle model.Copyright © 2014 John Wiley & Sons, Ltd.

International Journal of Communication Systems•Jan 7, 2014•3 citations

Cryptanalysis on Identity-based Authenticated Key Agreement Protocols from Pairings

Mengbo Hou, Qiuliang Xu, Shanqing Guo +1 more

Abstract—Two-party authenticated key agreement protocol is used to authenticate entities and establish session keys in an open network in order to provide secure communications between two parties. Several security attributes are highly desired for such protocols, such as perfect forward secrecy (the corruption of long-term keys of all the entities should not compromise any session key), PKG forward secrecy (the corruption of the PKG's master key in the ID-based system should not compromise the established session keys), and known session-key specific temporary information secrecy (The exposure of private temporary information should not compromise the secrecy of generated session keys). In 2005, Choie et al. proposed three identity-based authenticated key agreement protocols from pairings. Our analysis shows that they all didn't provide protection against known session-key specific temporary information attack and some of them are vulnerable against man-in-the-middle attack, such as the key replicating attack. We analyze some of the attacks under the BR93 security model. Index Terms—key agreement protocol, known session-key specific temporary information secrecy, key replicating attack, security model I.

Journal of Networks•Jun 16, 2010•8 citations

A New Identity-Based Tripartite Authenticated Key Agreement Protocol

Hongyuan Wang

Now,most of the tripartite authenticated key agreement protocols have been proven to be insecure.We design the new identity-based tripartite authenticated key agreement protocol,it is based on the secure IBE scheme by Peng.This protocol's security based on bilinear decisional Diffie-Hellman assumption.This protocol could provide known key security,PKG forward secrecy,key-compromise impersonation resilience and unknown key-share resilience,so it's a secure tripartite authenticated key agreement protocol.

Microelectronics & Computer•Jan 1, 2011•0 citations

Efficient three-party authenticated key agreement protocol in certificateless cryptography

Hu Xiong, Zhong Chen, Zhiguang Qin

Key agreement protocols are multi-party protocols in which entities exchange public information allowing them to create a common secret key that is known only to those entities and which cannot be predetermined by any party. Key agreement can be achieved using a public key infrastructure or identity-based cryptography. However, the former suffers from a heavy certificate management burden, while the latter is subject to the so-called key escrow problem. Recently, the notion of certificateless public key cryptography (CL-PKC) was introduced to mitigate these limitations. In this paper, we introduce the notion of three-party authenticated key agreement into CL-PKC and propose a concrete certificateless three-party authenticated key agreement protocol. We show that the proposed protocol is secure (i.e. conforms to defined security attributes) while being efficient.

International Journal of Computer Mathematics•Jun 13, 2011•2 citations
Abstract: Key agreement allows multi-parties exchanging public information to create a common secret key that is known only to those entities over an insecure network. In recent years, several identity-based authenticated key agreement protocols have been proposed. In this study, we analyze three identity-based tripartite authenticated key agreement protocols. After the analysis, we found that these protocols do not possess the desirable security attributes.
The tripartite authenticated key agreement (AKA) protocol is crucial in providing data confidentiality to subsequent communications among three parties over an insecure public network. In recent years, several identity-based and certificate less tripartite AKA protocols have been proposed. Unfortunately, most of them are insecure. In this paper, we analyze an identity-based tripartite AKA protocol and a certificate less tripartite AKA protocol. Our cryptanalysis shows that one neither meets the desirable security properties.
Key agreement protocols allow multi-parties exchanging public information to create a common secret key that is known only to those entities over an insecure network. Since Joux first published the pairing-based one round tripartite key agreement protocol, many authenticated protocols have been proposed. Unfortunately, many of them have been broken while others have been shown to be deficient in some desirable security attributes. In 2004, Cheng et al. presented two protocols aimed at strengthening Shim’s certificate-based and Zhang et al.’s tripartite identitybased protocols. This paper reports that 1) In Cheng et al.’s identity-based protocol, an adversary can extract long-term private keys of all the parties involved; and 2) Cheng et al.’s certificationbased protocol is weak against key integrity attacks. This paper suggests possible remedies for the security flaws in both protocols and then presents a modified Cheng et al.’s identity-based, oneround tripartite protocol that is more secure than the original protocol.
Summary Tripartite key agreement protocols enable three users to share a common and secure secret key by exchanging some information in a public channel. In this paper, we introduce the first attribute‐based tripartite key agreement protocol, which is a kind of identity‐based tripartite key agreement protocols, which the identities consist of descriptive attributes. Also, we propose an extended security model for these protocols and prove the security of our protocol in the random oracle model.Copyright © 2014 John Wiley & Sons, Ltd.
Abstract—Two-party authenticated key agreement protocol is used to authenticate entities and establish session keys in an open network in order to provide secure communications between two parties. Several security attributes are highly desired for such protocols, such as perfect forward secrecy (the corruption of long-term keys of all the entities should not compromise any session key), PKG forward secrecy (the corruption of the PKG's master key in the ID-based system should not compromise the established session keys), and known session-key specific temporary information secrecy (The exposure of private temporary information should not compromise the secrecy of generated session keys). In 2005, Choie et al. proposed three identity-based authenticated key agreement protocols from pairings. Our analysis shows that they all didn't provide protection against known session-key specific temporary information attack and some of them are vulnerable against man-in-the-middle attack, such as the key replicating attack. We analyze some of the attacks under the BR93 security model. Index Terms—key agreement protocol, known session-key specific temporary information secrecy, key replicating attack, security model I.
Now,most of the tripartite authenticated key agreement protocols have been proven to be insecure.We design the new identity-based tripartite authenticated key agreement protocol,it is based on the secure IBE scheme by Peng.This protocol's security based on bilinear decisional Diffie-Hellman assumption.This protocol could provide known key security,PKG forward secrecy,key-compromise impersonation resilience and unknown key-share resilience,so it's a secure tripartite authenticated key agreement protocol.
Key agreement protocols are multi-party protocols in which entities exchange public information allowing them to create a common secret key that is known only to those entities and which cannot be predetermined by any party. Key agreement can be achieved using a public key infrastructure or identity-based cryptography. However, the former suffers from a heavy certificate management burden, while the latter is subject to the so-called key escrow problem. Recently, the notion of certificateless public key cryptography (CL-PKC) was introduced to mitigate these limitations. In this paper, we introduce the notion of three-party authenticated key agreement into CL-PKC and propose a concrete certificateless three-party authenticated key agreement protocol. We show that the proposed protocol is secure (i.e. conforms to defined security attributes) while being efficient.