Abstract:Key exchange protocol plays an important role in cryptosystem, by which two sides who communicate with each other over an open network can obtain a common session key to keep the communication secret.Both two communication entities make full use of the received messages to compute a secret session key.In 1976, Diffie and Hellman [1] put forward a first key exchange protocol, which cannot make authentication of two communication entities possible.On account of lacking mutual authentication, two parties are subject to the man-in the-middle attack.Since then, some two-party authentication key exchange (2PAKE) protocols are proposed [2][3][4][7][8][9][10].Two authentication key exchange protocols furnish mutual authentication of two entities and are suitable for application in public channel.On the basis of new cryptographic techniques, 2PAKE protocols can be divided into three classes.(1) A public-key-based key exchange protocol authenticates each other and builds a common session key by means of public-key technology of cryptography.However, it takes much time to verify the process for certificates in a public-key cryptosystem.(2) A two-party password-based authentication key exchange (2PAKE) protocol allows two sides to have a share in a common password so as to obtain a secret session key.But it is unfit for large area wide range of communication environment to share a secret password for building the common session key.(3) An ID-based key exchange protocol utilizes some user's information (identity, e-mail or social security number) as its public key.Miller [5] and Koblitz [6] propose the concept of ECC.Yang et al. [11] proposed 2PAKE on basis of ECC [12] to increasing the level of security.In 2009, Yoon et al. [13] pointed out that Yang et al.'s protocol cannot furnish forward secrecy and be subject to impersonation attacks.Compared with Yoon et al.'s scheme, He et al.'s scheme [14] is more fit and efficient in mobile environment.This is because Yoon et al.'s protocol cannot furnish prefect forward secrecy.However, He et al.'s protocol doesn't surmount weakness.A legal party cannot confirm whether or not private key of the user is correct.Based on the above protocols, Chou et al. propose an ID-based authenticated scheme [15].However, their protocol cannot resist impersonation attacks.In this paper, we proposed new protocol can resist impersonation attack, public key problem, unknown key share attack, mutual authentication, forward secrecy and deniable authentication attack.Meanwhile, we show that our protocol is efficient.The remainder of this paper is organized as follows.Section 2 describes some preliminaries.We propose our protocol in Section 3. The security analysis of the proposed protocol is presented in Section 4. Comparisons are given in Section 5.

Key Agreement Protocol in Ad-Hoc Networks

Pre-shared Key Agreement for Secure Public Wi-Fi

Key Agreement and Identity Authentication Protocols for Ad Hoc Networks

A Secure and Efficient Password-Authenticated Group Key Exchange Protocol for Mobile Ad Hoc Networks.

A group key establishment scheme for ad hoc networks

New identity-based three-party authenticated key agreement protocol with provable security

Lightweighted Key Exchange Protocol in Ad Hoc Networks

A Fresh Two-party Authentication Key Exchange Protocol for Mobile Environment

An Improved Authenticated Key Agreement Protocol

Provably Secure Password-Authenticated Key Exchange Using Diffie-Hellman

Yet Another Certificateless Three-Party Authenticated Key Agreement Protocol

A Dynamic Scheme For Authenticated Group Key Agreement Protocol

A key for John Doe: modeling and designing Anonymous Password-Authenticated Key Exchange protocols

A Novel Identity Authentication And Key Agreement Scheme For Ad Hoc Network Security

Improvement of an Authenticated Key Agreement Protocol

Authenticating Tripartite Key Agreement Protocol with Pairings

Efficient Identity-Based and Authenticated Key Agreement Protocol

A Key-Agreement Protocol Based on Static Parameters and Hash Functions

A Multihop Key Agreement Scheme for Wireless Ad Hoc Networks Based on Channel Characteristics

Authenticated and communication efficient group key agreement for clustered ad hoc networks

Password-based Dynamic Group Key Agreement