Abstract:Hao proposed the YAK as a robust key agreement based on public‐key authentication, and the author claimed that the YAK protocol withstands all known attacks and therefore is secure against an extremely strong adversary. However, Toorani showed the security flaws in the YAK protocol. This paper shows that the YAK protocol cannot withstand the known key security attack, and its consequences lead us to introduce a new key compromise impersonation attack, where an adversary is allowed to reveal both the shared static secret key between two‐party participation and the ephemeral private key of the initiator party in order to mount this attack. In addition, we present a new security model that covers these attacks against an extremely strong adversary. Moreover, we propose an improved YAK protocol to remedy these attacks and the previous attacks mentioned by Toorani on the YAK protocol, and the proposed protocol uses a verification mechanism in its block design that provides entity authentication and key confirmation. Meanwhile, we show that the proposed protocol is secure in the proposed formal security model under the gap Diffie‐Hellman assumption and the random oracle assumption. Moreover, we verify the security of the proposed protocol and YAK protocol by using an automatic verification method such as the Scyther tool, and the verification result shows that the security claims of the proposed protocol are proven, in contrast to those of the YAK protocol, which are not proven. The security and performance comparisons show that the improved YAK protocol outperforms previous related protocols.

On Weaknesses of the HDCP Authentication and Key Exchange Protocol and Its Repair.

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

Finding and Fixing Vulnerabilities in Several Three-Party Password Authenticated Key Exchange Protocols Without Server Public Keys.

Differential and Correlation Power Analysis Attacks on HMAC-Whirlpool

Weakness Analysis and Improvement of a Gateway-Oriented Password-Based Authenticated Key Exchange Protocol

Remarks on Unknown Key-Share Attack on Authenticated Multiple-Key Agreement Protocol

Security Analysis on S-3PAKE Protocol

Security Analysis of Shim's Authenticated Key Agreement Protocols from Pairings

A Note on the Security of KHL Scheme

Efficient and Practical DHEKE Protocols.

Link Protection System Based on RSA over HDMI

HDLock: Exploiting Privileged Encoding to Protect Hyperdimensional Computing Models against IP Stealing

Cryptanalysis and improvement of the YAK protocol with formal security proof and security verification via Scyther

Revisiting OAKE in the Eck Security Model

Defending Against Key Abuse Attacks In Kp-Abe Enabled Broadcast Systems

The Denial of Service Attack Analysis of WLAN Authentication Infrastructure

Cryptanalysis of a Three-Party Password-Based Authenticated Key Exchange Protocol Using Weil Pairing.

Cryptanalysis of two ID-based deniable authentication protocol from pairings

On the design of provably secure identity-based authentication and key exchange protocol for heterogeneous wireless access

The New Enhanced Simple Authenticated Key Agreement Algorithm

Designing Secure Quantum Key Agreement Protocols Against Dishonest Participants