Hybrid Protocol For Password-based Key Exchange in Three-party Setting.

TingMao Chang, Zhou Jin, Yajuan Zhang, Yuefei Zhu

Published Jan 1, 2006• 0 citations

Abstract

Modular design is a common approach for dealing with complex tasks in modern cryptology. The critical of this approach is that designing a secure hybrid protocol. In this paper, we study password-based key exchange in the three-party setting within the UC framework and design a hybrid protocol that UC-securely realizes such task. That is, we firstly define an appropriate ideal functionality F3-pwKE for password-based three-party key exchange. Next we partition the task into two sub-tasks, three-party key distribution and password-based two-party key exchange, and propose relevant two ideal functionalities, F3-KD, FpwKE. Finally, we present a (F3-KD, FpwKE) -hybrid protocol for password-based three-party key exchange that is proved to be UC-secure with respect to nonadaptive party corruption. Keywords—Password-based, Universally composable, Key exchange, Three-party setting, Hybrid protocol

Related papers

Hybrid Protocol for Password-Based Key Exchange in Three-party Setting

Xinzheng He, Bei Ru, Fei Jinlong +1 more

Modular design is a common approach for dealing with complex tasks in modern cryptology. The critical of this approach is to design a secure hybrid protocol. In this paper, we study password-based key exchange in the three-party setting within the UC framework and design a hybrid protocol that UC-securely realizes such task. Next we partition the task into two sub-tasks, three-party key distribution and password-based two-party key exchange, and propose relevant two ideal functionalities, F3pKD, FpwKE. Finally, we present a (F3pKD, FpwKE) -hybrid protocol for password-based three-party key exchange that is proved to be UC-secure with respect to non-adaptive party corruption.

International Conference on Networks Security, Wireless Communications and Trusted Computing (NSWCTC)Apr 1, 20090 citations

Universally Composable Three-Party Key Distribution.

Zhou Jin, TingMao Chang, Yajuan Zhang +1 more

In this paper, we formulate and realize a definition of security for three-party key distribution within the universally composable (UC) framework. That is, an appropriate ideal functionality that captures the basic security requirements of three-party key distribution is formulated. We show that UC definition of security for three-party key distribution protocol is strictly more stringent than a previous definition of security which is termed AKE-security. Finally, we present a real-life protocol that securely realizes the formulated ideal functionality with respect to non-adaptive adversaries. Keywords—Key distribution, Universally composable, AKEsecurity

Jan 1, 20061 citation

A Universally Composable PAKE with Zero Communication Cost

Lawrence Roy, Jiayu Xu

A Password-Authenticated Key Exchange (PAKE) protocol allows two parties to agree upon a cryptographic key, when the only information shared in advance is a low-entropy password. The standard security notion for PAKE (Canetti et al., Eurocrypt 2005) is in the Universally Composable (UC) framework. We show that unlike most UC security notions, UC PAKE does not imply correctness. While Canetti et al. has briefly noticed this issue, we present the first comprehensive study of correctness in UC PAKE: We show that TrivialPAKE, a no-message protocol that does not satisfy correctness, is a UC PAKE; We propose nine approaches to guaranteeing correctness in the UC security notion of PAKE, and show that seven of them are equivalent, whereas the other two are unachievable; We prove that a direct solution, namely changing the UC PAKE functionality to incorporate correctness, is impossible; Finally, we show how to naturally incorporate correctness by changing the model—we view PAKE as a three-party protocol, with the man-in-the-middle adversary as the third party. In this way, we hope to shed some light on the very nature of UC-security in the man-in-the-middle setting.

Lecture notes in computer scienceJan 1, 20238 citations

Universally Composable Three-Party Key Distribution

TingMao Chang, Yuefei Zhu, Zhou Jin +1 more

International Conference on Availability, Reliability and Security (ARES)Jan 1, 20072 citations

Universal Composable Password Authenticated Key Exchange Protocol in the Standard Model

Hu Xue, Pla Information

Through constructing and utilizing non-malleable,extractable,and weak simulation-sound trapdoor commitment schemes and corresponding smooth projective hash function familes,this paper proposes an efficient two-party password authenticated key exchange(PAKE) protocol within the universal composable(UC) framework,which is the optimal two-round PAKE protocol in this setting.Rigorous security proofs based on standard assumptions in the presence of static corruption adversary are then given out.Comparisons with previously proposed protocols show that,this protocol avoids the use of zero-knowledge protocols,and achieves a higher performance in terms of communication efficiency while attaining a comparable computational complexity.

Jan 1, 20110 citations

Universally Composable Secure Group Communication.

Youliang Tian, Changgen Peng

Abstract. This paper analyzes group communication within the universally composable framework. We first propose the group communication model, identity-based signcrytion mod-el and group key distribution model in the UC framework by designing the ideal functionality FSAGCOM, FIDSC and FGKD, respectively. Then, we construct a UC secure identity-based signcryption protocol πIDSC. Moreover, we shows that the identity-based signcryption πIDSC securely realizes the ideal functionality FIDSC if and only if the corresponding protocol ID-SC is secure. Finally, based on the identity-based protocol, we propose a group communica-tion scheme πSAGCOM, which can securely realizes the ideal functionality FSAGCOM in the (FIDSC,FGKD)-hybrid model.

Jan 1, 20142 citations