Cryptanalysis of an Identity-Based Multiple Key Agreement Scheme.

Qingfeng Cheng

Published Jan 1, 2012• 1 citation

Abstract

Multiple key agreement (MKA) protocols allow two parties to generate two or more session keys in one session, which will be used for future secure communications in public network. In recent years, many MKA protocols have been proposed. However, most of them do not consider ephemeral key compromise resilience, and some of them still exists security flaws. In this paper, we analyze the scheme proposed by Dehkordi and Alimoradi in 2011, which is announced with stronger security. We will present ephemeral key compromise attack and impersonation attack against Dehkordi and Alimoradi’s protocol. For overcoming these security flaws, we also propose an improvement of Dehkordi and Alimoradi’s protocol.

Related papers

Security weakness of two identity-based multiple key agreement protocols

Qingfeng Cheng, Siqi Lu, Jinhua Zhao

Multiple key agreement (MKA) protocols allow two parties to generate two or more session keys in a run, which will be used for future secure communications in public network. In recent years, many MKA protocols have been proposed. However, most of them do not consider ephemeral key compromise resilience and also suffer from other security flaws. In this paper, we analyze Dehkordi and Alimoradi's MKA protocol and Tan's MKA protocol. We will present ephemeral key compromise attack against Dehkordi and Alimoradi's MKA protocol, and prove that Tan's MKA protocol cannot provide mutual security.

Jan 1, 20141 citation

Identity-based Authenticated Multiple Key Agreement Protocol with PKG Forward Security

Zuowen Tan

Authenticated multiple key agreement protocols not only allow participants to agree the multiple session keys within one run of the protocol but also ensure the authenticity of the other party.In 2011, Dehkordi et al. proposed an identity-based authenticated multiple key agreement protocol.In this paper, we demonstrate that Dehkordi et al.'s protocol is vulnerable to impersonation attacks.Furthermore, we have found that their protocol cannot provide perfect forward security or mutual security.Then we propose an identity-based authenticated multiple key agreement protocol which removes the weaknesses of the Dehkordi et al.'s protocol.Compared with the multiple key agreement protocols in the literature, the proposed protocol is more efficient and holds stronger security.

KSII Transactions on Internet and Information SystemsJan 1, 20125 citations

An Enhanced ID-based Authenticated Multiple Key Agreement Protocol

Zuowen Tan

Authenticated multiple key agreement protocols not only allow participants to agree the multiple session keys within one run of the protocol but also ensure the authenticity of the other party. In 2011, Dehkordi et al. proposed an identity-based authenticated multiple key agreement protocol. In this paper, we demonstrate that Dehkordi et al.’s protocol is vulnerable to impersonation attack. Furthermore, we have found that their protocol cannot provide perfect forward security or mutual security. Then we propose an identity-based multiple key agreement protocol which removes the weaknesses of the Dehkordi et al.’s protocol. Compared with the multiple key agreement protocols in the literature, the proposed protocol is more efficient and holds stronger security. DOI: http://dx.doi.org/10.5755/j01.itc.42.1.1381

Information Technology And ControlMar 13, 20132 citations

Cryptanalysis of a New Efficient Authenticated Multiple- Key Exchange Protocol from Bilinear Pairings

Qingfeng Cheng

Multiple-key exchange (MKE) protocols allow two parties to generate two or more shared session keys over insecure networks. In recent years, many MKE protocols have been proposed. However, most of them still have some security flaws. In this letter, we will analyze a new MKE protocol proposed by Farash et al. in 2012, and present two attacks against Farash et al.’s protocol.

International journal of network securityJan 1, 20143 citations

Identity-Based One Round Key Agreement Protocol without Bilinear Pairings

Wenhao Liu, Shengbao Wang, Xiao Tan +2 more

Almost all the existing identity-based key agreement (ID-KA) protocols cannot achieve both ephemeral secret reveal resilience and pairing-free. In this paper, a pairing-free ID-KA protocol is proposed, which captures all basic desirable security properties including key generation center forward secrecy, key compromise impersonation resilience and ephemeral secrets reveal resistance. On the other hand, the proposed scheme only needs one round communication between the two parties. Compared with the previous ID-KA protocols, the proposed scheme is more secure and efficient.

International Conference on P2P, Parallel, Grid, Cloud and Internet Computing (3PGCIC)Nov 1, 20152 citations

Improvement of identity-based authenticated key agreement protocol

Chi Xu, Wen Fang Zhang, Zhen Hu

The security of a recently proposed ID-based authenticated key agreement protocol was analyzed,and an enhanced ID-based authenticated key agreement protocol is presented based on the previous work. a malicious PKG (private key generator) can still obtain all of the agreed session keys, that is, it doesn't provide PKG-forward secrecy in escrowless mode. Aiming at the security flaws of an existing ID-based key agreement Protocol and a key agreement Protocol for multi-trustdomain proposed based on the new variant mode of ID- Base public key infrastrueture(PKI), an improved scheme is proposed. The new scheme can avoid excessive power of KGC to make up the security flaws in the original protocols, which has a higher level of security. The new schemes have many properties such as equal contribution; non-key control; against man-in-middle attack; etc.

International Conference on Computer Application and System ModelingOct 1, 20100 citations