Efficient Identity-based Authenticated Key Agreement Protocol with PKG Forward Secrecy

Shengbao Wang, Zhenfu Cao, Feng Cao

For an identity-based authenticated key agreement (IDAK) protocol, PKG forward secrecy is the strongest notion of forward secrecy, which is about the security of previously established session keys after the master secret key of the Private Key Generatior (PKG) is compromised. In this paper, we put forward a new identity-based authenticated key agreement protocol which achieves PKG for-ward secrecy. On its performance, we show that it is more computational efficient than a previously proposed protocol of Chen and Kudla (called Protocol 2'). Furthermore, we examine other security attributes that our new protocol possesses one bye one.

Yongge Wang

Shuai Shao, Guoai Xu, Xinxin Niu

Xue Zhang, Guangsong Li, 韩文报 +2 more

Abstract:Current identity-based authenticated key agreement schemes still have restriction on PKG system parameters.The assumption limits the application in real network environment.In order to solve these problems,an identity-based cross-domain authenticated key agreement protocol was proposed.There is no restriction on PKG system parameters so that public system parameters,system master keys and system public keys can be totally different.The security of this scheme was analyzed under the eCK model,and the result showed that this protocol satisfies the basic security requirements,perfect forward secrecy and PKG forward secrecy.Moreover,this protocol is robust to the existing attacks such as key compromise impersonation attack and ephemeral key compromise impersonation attack. Comparison with some typical identity-based multi-domain authenticated key agreement protocols showed that this scheme is more secure and efficient.

Hoonjung Lee, Donghyun Kim, Sangjin Kim +1 more

Han Jiang

The certificateless -based authenticated key agreement protocols have the advantages of simplicity of managing identities compared to the PKI-based schemes,as well as avoiding the key escrow issues inherited in the identity-based schemes. This paper proposes a two-party certificateless-based authenticated key agreement scheme based on a provably secure certificateless-based public key encryption scheme.The comparisons with other comparable schemes in security and efficiency show that,the new scheme achieves more of the desired security attributes,such as perfect forward secrecy,PKG forward secrecy,known session-specific temporary information secrecy and key escrowless.Meanwhile it keeps the nice computational efficiency.