Improved authenticated key agreement protocol based on Bi-ISIS problem

SK Hafizul Islam, Sherali Zeadally

Zhang Long-xiang

Daya Sagar Gupta, G. P. Biswas

Wang et al. proposed a new hard problem on lattices which is an extension of the small integer solution (SIS) on lattices. This new generated hard problem is named to be bilateral in-homogeneous small integer solution (Bi-ISIS). Using the hardness of Bi-ISIS, Wang et al. proposed a new key exchange protocol, which is based on the lattice-based cryptography. In this paper, we signalize that Wang et al.’s lattice-based key exchange protocol is vulnerable to an attack, namely, man-in-the-middle (MITM) attack. Through this attack, Eavesdropper can intercept the authenticated messages and communicate the unauthentic messages among the communicating parties.

S WANG, Zhenfu Cao, Kim‐Kwang Raymond Choo +1 more

An Braeken, Awaneesh Kumar Yadav

With the rise of new advancements in quantum computing, more attention is given to the development of post-quantum security primitives and protocols. Recently, several authentication, key agreement and signature schemes relying on the hardness of the Inhomogeneous Small Inter Solution (ISIS) and its variants have been defined in literature. The advantage of these schemes is that they are simple, easy to implement and possess a reasonable communication and computation cost, compared to other post-quantum alternatives. Unfortunately, we show serious attacks on six different categories of these schemes, corresponding with more than ten publications in recent highly reputed journals. These vulnerabilities pose serious risks to consumer electronics, including IoT devices, smart home systems, and wearable technologies, where secure communication and authentication are vital. Exploitation of these vulnerabilities could lead to unauthorized access, device tampering, and data breaches, significantly impacting user trust and device functionality. Finally, we discuss the feasibility of defining post-quantum secure key exchange protocols, based on the ISIS problem and propose a high level approach to derive secure post-quantum protocols.

Yongge Wang