Abstract:Cryptography algorithm standards play a key role both to the practice of information security and to cryptography theory research. Among them, the MQV and HMQV protocols ((H)MQV, in short) are a family of implicitly authenticated Diffie-Hellman key-exchange (DHKE) protocols that are among the most efficient and are widely standardized. In this work, from some new perspectives and under some new design rationales, and also inspired by the security analysis of HMQV, we develop a new family of practical implicitly authenticated DHKE (IA-DHKE) protocols, which enjoy notable performance among security, efficiency, privacy, fairness and easy deployment. We make detailed comparisons between our new protocols and (H)MQV, showing that the newly developed protocols outperform HMQV in most aspects. Very briefly speaking, we achieve: • The most efficient provably secure IA-DHKE protocol to date, and the first online-optimal provably secure IA-DHKE protocols. • The first IA-DHKE protocol that is provably secure, resilience to the leakage of DH components and exponents, under merely standard assumptions without additionally relying on the knowledge-of-exponent assumption (KEA). • The first provably secure privacy-preserving and computationally fair IA-DHKE protocol, with privacy-preserving properties of reasonable deniability and post-ID computability and the property of session-key computational fairness. Guided by our new design rationales, in this work we also formalize and introduce some new concept, say session-key computational fairness (as a complement to session-key security), to the literature.

Revisiting OAKE in the Eck Security Model

OAKE: a New Family of Implicitly Authenticated Diffie-Hellman Protocols.

One-Round Attribute-Based Key Exchange in the Multi-Party Setting.

Authenticated Key Exchange from Ideal Lattices

Handover Authenticated Key Exchange for Multi-access Edge Computing

Provably Secure Authenticated Key Exchange Protocol under the CDH Assumption

EKE Meets Tight Security in the Universally Composable Framework

A New Framework for Deniable Secure Key Exchange

Two-Pass Authenticated Key Exchange with Explicit Authentication and Tight Security.

On Security Analysis of an After-the-fact Leakage Resilient Key Exchange Protocol

Security analysis of the eCK model

Provably Secure Password Authenticated Key Exchange Based On Rlwe For The Post-Quantum World

After-the-Fact Leakage-Resilient Identity-Based Authenticated Key Exchange

Privacy-Preserving Authenticated Key Exchange in the Standard Model

Efficient Secure Authenticated Key Exchange Without NAXOS’ Approach Based on Decision Linear Problem

Quantum Authenticated Key Expansion with Key Recycling

A Provably-Secure and Efficient Verifier-Based Anonymous Password-Authenticated Key Exchange Protocol

Efficient anonymous roaming and its security analysis

Quantum-Safe Hybrid Key Exchanges with KEM-Based Authentication

Deniable Internet Key Exchange

Two-Message Authenticated Key Exchange from Public-Key Encryption.