Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International journal of network security

Efficient Identity-based Authenticated Key Agreement Protocol with PKG Forward Secrecy

Shengbao Wang, Zhenfu Cao, Feng Cao

Published Sep 1, 2008• 16 citations
Publisher

Abstract

For an identity-based authenticated key agreement (IDAK) protocol, PKG forward secrecy is the strongest notion of forward secrecy, which is about the security of previously established session keys after the master secret key of the Private Key Generatior (PKG) is compromised. In this paper, we put forward a new identity-based authenticated key agreement protocol which achieves PKG for-ward secrecy. On its performance, we show that it is more computational efficient than a previously proposed protocol of Chen and Kudla (called Protocol 2'). Furthermore, we examine other security attributes that our new protocol possesses one bye one.

DOI
10.6633/ijns.200809.7(2).05

Related papers

Efficient ID-based authenticated key agreement protocol

Haiying Gao

Wang et al.(WANG SHENG-BAO,CAO ZHEN-FU,DONG XIAO-LEI.Provably secure identity-based authenticated key agreement protocols in the standard model.Chinese Journal of Computers,2007,30(10):1842-1854) proposed an ID-based Authenticated Key Agreement(IDAKA) protocol which was proved secure under standard model but without attribute of Private Key Generator(PKG) forward security.In order to remedy the flaw,a new protocol was introduced in which the shared secret message was calculated by the private key and temporary secret information of users of the protocol,and its security was also proved in standard model.Compared with known protocols,the new protocol is more efficient.Additionally,a method of jointly generating private key by PKG and user was proposed.The private key of user was calculated by the main secret key of system and secret information provided by user.It effectively solves the problem of PKG forward security of ID-based authenticated key agreement protocol.

Journal of Computer Applications•Jan 1, 2012•1 citation

New Identity-based Authenticated Key Agreement Protocol

Hui Ding, Yin Xin-chun

This paper designs an identity-based authenticated key agreement protocol with perfect forward security of Private Key Generator(PKG).It is proved to provide known key security,forward secrecy,key-compromise impersonation and so on in standard model.Its security is based on Bilinear Decisional Diffie-Hellman(BDDH) assumption,so its security is higher than the protocols based on the weaker assumption.

Jisuanji gongcheng•Jan 1, 2010•0 citations

A Secure ID-Based Explicit Authenticated Key Agreement Protocol without Key Escrow

Mengbo Hou, Qiuliang Xu

Key agreement protocols are essential for secure communications in open and distributed environments. Identity-based cryptography has become extremely fashionable in the last few years for its special advantages. In this paper, we point out some flaw in the scheme proposed by Wang et al., then we present a two-party identity-based explicit authenticated key agreement protocol with key confirmation, which was inspired on a new identity-based encryption scheme first proposed by Gentry and can be used properly in the escrowless mode. The scheme captures the attributes of known-key secrecy, key-compromise impersonation resilience, unknown key-share resilience, perfect forward secrecy, and no-key control. Especially, the scheme captures the PKG forward secrecy property. The PKG still could not recover all the userspsila past session keys even he knows the long-term private keys of all users.

International Conference on Information Assurance and Security (IAS)•Jan 1, 2009•1 citation

A one-round ID-based authenticated key agreement protocol with enhanced security

Mengbo Hou, Qiuliang Xu

Authenticated key agreement protocol is used to set up the session key and establish secure channel for network communication in the open environment. So far, great deals of identity-based protocols have been proposed to provide robust mutual authentication and key establishment in the two-party setting. Majority of the existing identity-based key agreement protocols require expensive bilinear pairing operation and only provide limited security attributes. Therefore, such protocols are unsuitable for real-world applications that require stronger sense of secrecy. In this paper, we first analysis some of the schemes proposed recently, and then present a one-round ID-based authenticated key agreement protocol with enhanced security attributes, which doesn't need pairing operation and achieves most of the required security attributes, such as known-key secrecy, perfect forward secrecy, PKG Forward Secrecy, key-compromise impersonation resilience, unknown key-share resilience and no key control. In addition, it captures the enhanced security attributes-Known session-specific temporary key information secrecy.

International Conference on Intelligent Control and Information Processing•Jul 1, 2011•2 citations

Cryptanalysis on Identity-based Authenticated Key Agreement Protocols from Pairings

Mengbo Hou, Qiuliang Xu, Shanqing Guo +1 more

Abstract—Two-party authenticated key agreement protocol is used to authenticate entities and establish session keys in an open network in order to provide secure communications between two parties. Several security attributes are highly desired for such protocols, such as perfect forward secrecy (the corruption of long-term keys of all the entities should not compromise any session key), PKG forward secrecy (the corruption of the PKG's master key in the ID-based system should not compromise the established session keys), and known session-key specific temporary information secrecy (The exposure of private temporary information should not compromise the secrecy of generated session keys). In 2005, Choie et al. proposed three identity-based authenticated key agreement protocols from pairings. Our analysis shows that they all didn't provide protection against known session-key specific temporary information attack and some of them are vulnerable against man-in-the-middle attack, such as the key replicating attack. We analyze some of the attacks under the BR93 security model. Index Terms—key agreement protocol, known session-key specific temporary information secrecy, key replicating attack, security model I.

Journal of Networks•Jun 16, 2010•8 citations

Analysis and improvement of ID-based authenticated key agreement protocols

Qiuliang Xu

The security attributes of three provable secure ID-based authenticated key agreement protocols are analyzed,and an enhanced ID-based authenticated key agreement protocol is presented based on the previous work.The new scheme achieves most of the known security attributes,such as known-key secrecy,key-compromise impersonation resilience,unknown key-share resilience,no-key control and message independence,especially the PKG-forward secrecy and known session-specific temporary information secrecy attributes,meanwhile keeping with the nice efficiency.

Computer Engineering and Applications Journal•Jan 1, 2010•0 citations
For an identity-based authenticated key agreement (IDAK) protocol, PKG forward secrecy is the strongest notion of forward secrecy, which is about the security of previously established session keys after the master secret key of the Private Key Generatior (PKG) is compromised. In this paper, we put forward a new identity-based authenticated key agreement protocol which achieves PKG for-ward secrecy. On its performance, we show that it is more computational efficient than a previously proposed protocol of Chen and Kudla (called Protocol 2'). Furthermore, we examine other security attributes that our new protocol possesses one bye one.
Wang et al.(WANG SHENG-BAO,CAO ZHEN-FU,DONG XIAO-LEI.Provably secure identity-based authenticated key agreement protocols in the standard model.Chinese Journal of Computers,2007,30(10):1842-1854) proposed an ID-based Authenticated Key Agreement(IDAKA) protocol which was proved secure under standard model but without attribute of Private Key Generator(PKG) forward security.In order to remedy the flaw,a new protocol was introduced in which the shared secret message was calculated by the private key and temporary secret information of users of the protocol,and its security was also proved in standard model.Compared with known protocols,the new protocol is more efficient.Additionally,a method of jointly generating private key by PKG and user was proposed.The private key of user was calculated by the main secret key of system and secret information provided by user.It effectively solves the problem of PKG forward security of ID-based authenticated key agreement protocol.
Key agreement protocols are essential for secure communications in open and distributed environments. Identity-based cryptography has become extremely fashionable in the last few years for its special advantages. In this paper, we point out some flaw in the scheme proposed by Wang et al., then we present a two-party identity-based explicit authenticated key agreement protocol with key confirmation, which was inspired on a new identity-based encryption scheme first proposed by Gentry and can be used properly in the escrowless mode. The scheme captures the attributes of known-key secrecy, key-compromise impersonation resilience, unknown key-share resilience, perfect forward secrecy, and no-key control. Especially, the scheme captures the PKG forward secrecy property. The PKG still could not recover all the userspsila past session keys even he knows the long-term private keys of all users.
Authenticated key agreement protocol is used to set up the session key and establish secure channel for network communication in the open environment. So far, great deals of identity-based protocols have been proposed to provide robust mutual authentication and key establishment in the two-party setting. Majority of the existing identity-based key agreement protocols require expensive bilinear pairing operation and only provide limited security attributes. Therefore, such protocols are unsuitable for real-world applications that require stronger sense of secrecy. In this paper, we first analysis some of the schemes proposed recently, and then present a one-round ID-based authenticated key agreement protocol with enhanced security attributes, which doesn't need pairing operation and achieves most of the required security attributes, such as known-key secrecy, perfect forward secrecy, PKG Forward Secrecy, key-compromise impersonation resilience, unknown key-share resilience and no key control. In addition, it captures the enhanced security attributes-Known session-specific temporary key information secrecy.
Abstract—Two-party authenticated key agreement protocol is used to authenticate entities and establish session keys in an open network in order to provide secure communications between two parties. Several security attributes are highly desired for such protocols, such as perfect forward secrecy (the corruption of long-term keys of all the entities should not compromise any session key), PKG forward secrecy (the corruption of the PKG's master key in the ID-based system should not compromise the established session keys), and known session-key specific temporary information secrecy (The exposure of private temporary information should not compromise the secrecy of generated session keys). In 2005, Choie et al. proposed three identity-based authenticated key agreement protocols from pairings. Our analysis shows that they all didn't provide protection against known session-key specific temporary information attack and some of them are vulnerable against man-in-the-middle attack, such as the key replicating attack. We analyze some of the attacks under the BR93 security model. Index Terms—key agreement protocol, known session-key specific temporary information secrecy, key replicating attack, security model I.
The security attributes of three provable secure ID-based authenticated key agreement protocols are analyzed,and an enhanced ID-based authenticated key agreement protocol is presented based on the previous work.The new scheme achieves most of the known security attributes,such as known-key secrecy,key-compromise impersonation resilience,unknown key-share resilience,no-key control and message independence,especially the PKG-forward secrecy and known session-specific temporary information secrecy attributes,meanwhile keeping with the nice efficiency.