E-SAKA Algorithm for Key Agreement

yang zhaolu,fan lei,li jianhua

DOI: https://doi.org/10.3969/j.issn.1002-0802.2003.03.036

2003-01-01

Abstract:Key agreement is the procedure that t he two sides of the communication negotiate a session key.A simple au-thenticated key agreement algorith m(SAKA)and its enhanced protocols have been developed.They are simple,but some weak-nesses are founded in them.

What problem does this paper attempt to address?

Simple authenticated key agreement protocol resistant to password guessing attacks.

Her-Tyan Yeh,Hung-Min Sun

DOI: https://doi.org/10.1145/583800.583802

2002-01-01

Abstract:AbstractPassword-based mechanism is the widely used method for user authentication. Many password-based authenticated key exchange protocols have been proposed to resist password guessing attacks. In this paper, we present a simple authenticated key agreement protocol called SAKA which is simple and cost-effective. To examine its security, we provide a formal proof of security to show its strength against both passive and active adversaries. Compared with the previously best protocols, SAKA has less number of steps and less computation cost.
The New Enhanced Simple Authenticated Key Agreement Algorithm

Rui Jiang,LI Jian-Hua,Li Pan,蒋睿,李建华,潘理

2006-01-01

Abstract:Simple authenticated key agreement algorithm is one of the Diffie-Hellman key agreement variations. It prevents man-in-the-middle attack with only two more packets required to agree on the secret session key, but it has some weaknesses. In this paper, a new enhanced simple authenticated key agreement algorithm is proposed to overcome these weaknesses on the basis of analyzing the weaknesses of the related protocols. The new enhanced simple authenticated key agreement algorithm can get over replay attack and password guessing attack, provide perfect forward secrecy, and hold the merits of the simple authenticated key agreement algorithm.
Robust and Efficient Remote Authentication with Key Agreement Protocol

Hong-bin TANG,Xin-song LIU

DOI: https://doi.org/10.3724/sp.j.1087.2012.01381

2012-01-01

Abstract:Password-based authentication and key exchange protocol have been widely used in various network services due to easy memory of password.Unfortunately,password-based authentication scheme also suffers from attacks because of the low entropy of password.In the year 2011,Islam et al.(ISLAM SK H,BISWAS G P.Improved remote login scheme based on ECC.IEEE-International Conference on Recent Trends in Information Technology.Washington,DC: IEEE Computer Society,2011: 1221-1226)proposed an improved remote login scheme based on Elliptic Curve Cryptography(ECC).Whereas,the scheme was vulnerable to stolen-verifier and impersonation attacks and failed to provide mutual authentication.Therefore,the authors proposed a password-based Remote Authentication with Key Agreement(RAKA) protocol using ECC to tackle the problems in Islam et al.'s scheme.RAKA was based on Elliptic Curve Discrete Logarithm Problem(ECDLP) and needed to compute six elliptic curve scale multiplications and seven hash function operations during a protocol run.The efficiency improves by about 15%.It is more secure and efficient than Islam et al.'s scheme.
An Identity Based Authenticated Key Agreement Protocol

JIN Li-jie,XU Chun-xiang

DOI: https://doi.org/10.3969/j.issn.1009-8054.2007.08.008

2007-01-01

Abstract:Key Agreement protocols should provide enough security, and the computation cost of them should be as low as possible. An ID-based authenticated key agreement protocol BAKAP(ID-Based Authenticated Key agreement Protocol)is proposed in this paper. This protocol provides some security properties such as known key security, perfect forward secrecy, key-compromise impersonation,unknown key-share resilience and key control. In the proposed protocol, each party is required to perform two elliptic curve point multiplications and one evaluation of the pairing. BAKAP has advantages over other protocols in the moderate computation cost,and therefor is quite practical.
Secure Key Agreement Protocols for Three-Party Against Guessing Attacks

HM Sun,BC Chen,T Hwang

DOI: https://doi.org/10.1016/j.jss.2003.11.017

IF: 3.5

2004-01-01

Journal of Systems and Software

Abstract:Key exchange protocol is important for sending secret messages using the session key between two parties. In order to reach the objective, the premise is to generate a session key securely. Encryption key exchange was first proposed to generate a session key with a weak authenticated password against guessing attacks. Next, another authenticated key exchange protocols for three-party, two clients who request the session key and one server who authenticates the user's identity and assist in generating a session key, were proposed. In this paper, we focus on the three-party authenticated key exchange protocol. In addition to analyzing and improving a password-based authenticated key exchange protocol, a new verified-based protocol is also proposed.
Secure one-pass and two-party authenticated key agreement protocol

Yang ZHANG,Chaoyang LI,Xiangjun XIN,Fagen LI

DOI: https://doi.org/10.16186/j.cnki.1673-9787.2017.05.015

2017-01-01

Abstract:In order to improve the security and efficiency of the key agreement protocol,a secure one-pass and two-party authenticated key agreement protocol is proposed.In this protocol,a certificateless digital signature is sent to the receiver,in which the sender's public key,identification number,time stamp,and other identifiable information are signed.Then,the receiver verifies the variety of the digital signature.The session key is built by using the Diffie-Hellman key agreement protocol.The new protocol can be proved to be secure in random oracle model;it can also satisfy the properties of known session key secrecy,forward secrecy,uncontrollability of the session key and key compromise impersonation resilience.
Efficient source-independent quantum conference key agreement

Bao Yu,Yi-Ran Xiao,Yu-chen Song,Xiao-Yu Cao,Yao Fu,Hua-Lei Yin,Zeng-Bing Chen

DOI: https://doi.org/10.1364/oe.527862

IF: 3.8

2024-06-22

Optics Express

Abstract:Yu Bao, Yi-Ran Xiao, Yu-Chen Song, Xiao-Yu Cao, Yao Fu, Hua-Lei Yin, Zeng-Bing Chen Quantum conference key agreement (QCKA) enables the unconditional secure distribution of conference keys among multiple participants. Due ... [Opt. Express 32, 24629-24642 (2024)]

optics
Research and Improvement on EAP-AKA

ZHANG Shu-bin,SUN Hao,WU Yue

DOI: https://doi.org/10.3969/j.issn.1009-8054.2007.10.031

2007-01-01

Abstract:This paper describes EAP-AKA authentication method. By giving the safety assessment of the authentication method,some security loopholes are pointed out,the possible attacks analyzed,some improvement suggestions according to these problems proposed,and the feasibility of the modified agreement illustrated.
Simple three-party password-based key exchange protocol with provable security

Hu Xiong,Yanan Chen,Zhong Chen,Fagen Li

DOI: https://doi.org/10.2316/Journal.202.2013.1.202-3540

2015-01-01

International Journal of Computers and Applications

Abstract:Three-party password-based authenticated key exchange (3PAKE) protocols allow two users (clients) to establish a session key with the help of an authenticated server over an insecure channel. Owning to the significance in building a secure communication channel, a number of approaches have been suggested over the years. However, the lack of formal security proof is a major issue in the related literature. In this paper, we propose a simple 3PAKE protocol based upon elliptic curve cryptography along with formal security proof under the decisional Diffie-Hellman assumption. Experimental results by using the automated validation of Internet security protocols and applications tool also show that the proposed protocol is secure against various malicious attacks. Compared with previous work, the proposed protocol has lower computation costs and lighter communication loads.
A novel session key agreement algorithm

Hongzhou Ning,Yun Liu,Dequan He

DOI: https://doi.org/10.3321/j.issn:1002-0470.2005.11.003

2005-01-01

Abstract:After expanding the definition of Chebyshev polynomials, the Chebyshev polynomials on finite fields Zp are formed. Using their one-way and semi-group properties on the finite fields, a novel session key agreement algorithm is presented. The algorithm has the fairness of the session key agreement. Compared with Diffie-Hellman algorithm, the algorithm does not need to look for primitive element in running, but select common integer number. And the attack to the algorithm is more complex. Finally, the security of the session key agreement algorithm is analyzed and it is concluded that any polynomials, which have semi-group property on real fields, can be used to construct session key agreement algorithm.
Yet Another Certificateless Three-Party Authenticated Key Agreement Protocol

Jianbin Hu,Hu Xiong,Zhi Guan,Cong Tang,Yonggang Wang,Wei Xin,Zhong Chen

DOI: https://doi.org/10.1109/ISPAW.2011.15

2011-01-01

Abstract:Key agreement protocols are multi-party protocols in which entities exchange public information allowing them to create a common secret key that is known only to those entities and which cannot be predetermined by any party. Recently, the notion of certificateless public key cryptography was introduced to mitigate the heavy certificate management burden in traditional public key infrastructure and key escrow problem in ID-based cryptosystem. In this paper, we present an efficient certificateless three-party authenticated key agreement protocol based on certificateless signature scheme. We show that the proposed protocol is secure (i.e. conforms to defined security attributes) while being efficient.
An Improved Authenticated Key Agreement Protocol

Wang Changji,Yang Bo,Wu Jianping

DOI: https://doi.org/10.1007/s11767-005-0007-z

2005-01-01

Abstract:In 1999, Seo and Sweeney proposed a simple authenticated key agreement protocol that was designed to act as a Diffie-Hellman key agreement protocol with user authentication. Various attacks on this protocol are described and enhanced in the literature. Recently, Ku and Wang proposed an improved authenticated key agreement protocol, where they asserted the protocol could withstand the existing attacks. This paper shows that Ku and Wang’s protocol is still vulnerable to the modification attack and presents an improved authenticated key agreement protocol to enhance the security of Ku and Wang’s protocol. The protocol has more efficient performance by replacing exponentiation operations with message authentication code operations.
SAKE*: A Symmetric Authenticated Key Exchange Protocol with Perfect Forward Secrecy for Industrial Internet of Things

Qing Fan,Jianhua Chen,Mohammad Shojafar,Saru Kumari,Debiao He

DOI: https://doi.org/10.1109/tii.2022.3145584

IF: 12.3

2022-01-01

IEEE Transactions on Industrial Informatics

Abstract:Security in the Industrial Internet of Things (IIoT) is vital as there are some cases where IIoT devices collect sensory information for crucial social production and life. Thus, designing secure and efficient communication channels is always a research hotspot. However, end devices have memory, computation, and power-supplying capacities limitations. Moreover, perfect forward secrecy (PFS), which means that long-term key exposure still discloses previous session keys, is a critical security property for authentication and key exchange (AKE). This article proposes an AKE protocol named SAKE* for the IIoT environment, where two types of keys (i.e., a master key and an evolution key) guarantee PFS. In addition, the SAKE* protocol merely uses concatenation, XOR, and hash-function operations to achieve lightweight authentication, key exchange, and message integrity. We also compare the SAKE* protocol with seven current and IoT-related authentication protocols regarding security properties and performance. Comparison results indicate that the SAKE* protocol consumes the least computation resource and third-least communication cost among eight AKE protocols while equipping 12 security properties.
Security analysis of the eCK model

NI Liang,CHEN Gong-liang,LI Jian-hua

DOI: https://doi.org/10.6040/j.issn.1671-9352.1.2013.089

2013-01-01

Abstract:Authenticated key agreement(AKA) protocol should capture desirable security properties as many as possible.As a formal method recently proposed to design and analyze tw o-party AKA protocols,the eCK model is currently receiving more and more attention,and the exact security guarantees that can be provided by this model are w orthy of in-depth research.Hence,the relationship betw een the eCK model and the basic desirable security properties for AKA protocols is analyzed in detail.The conclusions indicate that AKA protocols w ith provable security in the eCK model capture most basic desirable security properties.Thereafter,the advantages and disadvantages of the eCK model are also summarized.
A key for John Doe: modeling and designing Anonymous Password-Authenticated Key Exchange protocols

María Isabel González Vasco,Angel L. Pérez del Pozo,Claudio Soriente,Maria Isabel Gonzalez Vasco,Angel Perez Del Pozo

DOI: https://doi.org/10.1109/tdsc.2019.2919013

2019-01-01

IEEE Transactions on Dependable and Secure Computing

Abstract:Anonymous Password-Authenticated Key Exchange ($sf{ APAKE}$APAKE) can be seen as the hybrid offspring of standard key exchange and anonymous password authentication protocols. $sf{ APAKE}$APAKE allows a client holding a low-entropy password to establish a session key with a server, provided that the client's password is in the server's set. Moreover, no information about the password input by the client or the set of valid passwords held by the server should leak to the other party–beyond whether the client's password lies or not in the server's password database. To the best of our knowledge, all $sf{ APAKE}$APAKE proposals to date either assume client storage or force the client to remember the index assigned to its password in the server's database. Furthermore, earlier works either provide only informal definitions or fail in some sense to properly model the primitive. In this paper, we provide a formal security model for $sf{ APAKE}$APAKE, capturing security and ano-ymity provisions for both clients and servers. In addition, we present two $sf{ APAKE}$APAKE protocols that only require clients to remember a password and that attain our sought key secrecy and anonymity guarantees. Our first protocol leverages oblivious pseudo-random functions, while the second one builds upon a special type of identity-based encryption scheme.

computer science, information systems, software engineering, hardware & architecture
A Key-Agreement Protocol Based on Static Parameters and Hash Functions

Behrooz Khadem,Amin Masoumi,M. S. Farash

DOI: https://doi.org/10.48550/arXiv.2010.08769

2020-10-17

Abstract:Wireless Body Sensor Network (WBSN) is a developing technology with constraints in energy consumption, coverage radius, communication reliability. Also, communications between nodes contain very sensitive personal information in which sometimes due to the presence of hostile environments, there are a wide range of security risks. As such, designing authenticated key agreement (AKA) protocols is an important challenge in these networks. Recently, Li et al. proposed a lightweight scheme using the hash and XOR functions which is much more efficient compared with similar schemes based on elliptic curve. However, the investigations revealed that the claim concerning the unlinkability between the sessions of a sensor node is NOT true. The present paper considers the security issues of the scheme proposed by Li et al. and some of its new extensions in order to propose a new AKA scheme with anonymity and unlinkability of the sensor node sessions. The results of theoretical analysis compared with similar schemes indicate that the proposed scheme reduces average energy consumption and average computation time by 61 percent while reduces the average communication cost by 41 percent. Further, it has been shown by formal and informal analysis that, Besides the two anonymity and unlinkability features, the other main features of the security in the proposed scheme are comparable and similar to the recent similar schemes.

Cryptography and Security
Key Agreement and Identity Authentication Protocols for Ad Hoc Networks

Jun Yao,Guihua Zeng

DOI: https://doi.org/10.1109/ITCC.2004.1286740

2004-01-01

Abstract:Key agreement and identity authentication protocolsplay important role in ad hoc networks. Inthis paper, two novel key agreement protocols areproposed and their security and efficiency are analyzed.Besides, an identity authentication protocolbased on the threshold group signatures is presented.Compared with the existing algorithms,it is safe, efficient and adaptable to the multi-hopcharacteristic of ad hoc networks. In addition, theprivacy of the basic group key and identity certificateis guaranteed by the intractability of computingdiscrete logarithm.
New identity-based three-party authenticated key agreement protocol with provable security

Hu Xiong,Zhong Chen,Fagen Li

DOI: https://doi.org/10.1016/j.jnca.2012.10.001

IF: 7.574

2013-01-01

Journal of Network and Computer Applications

Abstract:Key agreement allows multi-parties exchanging public information to create a common secret key that is known only to those entities over an insecure network. In the recent years, several identity-based (ID-based) authenticated key agreement protocols have been proposed and most of them broken. In this paper, we formalize the security model of ID-based authenticated tripartite key agreement protocol and propose a provably secure ID-based authenticated key agreement protocol for three parties with formal security proof under the computational Diffie-Hellman assumption. Experimental results by using the AVISPA tool show that the proposed protocol is secure against various malicious attacks.
A Provably Secure Biometrics-Based Authenticated Key Agreement Scheme for Multi-Server Environments

Xiong Li,Jianwei Niu,Saru Kumari,SK Hafizul Islam,Fan Wu,Muhammad Khurram Khan,Ashok Kumar Das

DOI: https://doi.org/10.1007/s11042-017-4390-x

IF: 2.017

2014-01-01

Wireless Personal Communications

Abstract:The widespread popularity of the computer networks has triggered concerns about information security. Password-based user authentication with key agreement protocols have drawn attentions since it provides proper authentication of a user before granting access right to services, and then ensure secure communication over insecure channels. Recently, Lee et al. pointed out different security flaws on Tsaur et al.'s multi-server user authentication protocol, and they further proposed an extended chaotic maps-based user authentication with key agreement protocol for multi-server environments. However, we observed that Lee et al.'s protocol has some functionality and security flaws, i.e., it is inefficient in detection of unauthorized login and it does not support password change mechanism. Besides, their protocol is vulnerable to registration center spoofing attack and server spoofing attack. In order to remedy the aforementioned flaws, we proposed a novel chaotic maps-based user authentication with key agreement protocol for multi-server environments. The proposed protocol is provably secure in the random oracle model under the chaotic-maps based computational Diffie-Hellman assumption. In addition, we analyzed our protocol using BAN logic model. We also compared our protocol with Lee et al.'s protocol in aspects of computation cost, functionalities and securities.
KASE-AKA: Key-aggregate keyword searchable encryption against keyword guessing attack and authorization abuse

Caihui Lan,Haifeng Li,Caifen Wang,Xiaodong Yang,Hailong Yao

DOI: https://doi.org/10.1016/j.csi.2024.103852

IF: 3.721

2024-03-18

Computer Standards & Interfaces

Abstract:Key-Aggregate Searchable (KASE) can enable a data owner to delegate search rights over a set of data files to multiple users through a single aggregated authorization key in multi-user data sharing environments. Despite the elegance of the KASE concept, designing a KASE scheme that simultaneously prevents authorization from being abused and resists offline keyword guessing attacks is a formidable challenge. To respond the challenge, we propose a secure Key Aggregation Keyword Searchable Encryption against Keyword Guessing Attack and Authorization Abuse (KASE-AKA) scheme. Compared with existing KASE schemes, our KASE-AKA scheme has the following merits: (1) supporting dynamic update of user data search right through a user data search right list maintained by the semi-trust cloud server. (2) preventing the authorization from being abused since the authorization key (aggregate key) associates the user's public key, a subset of access rights, and a common secret value that only the cloud and data owner can collaboratively generate. (3) providing resistance against offline keyword guessing attacks. Correctness proof, security analysis and performance evaluation demonstrate that the proposed KASE-AKA scheme is provably secure, highly efficient and more feasible in practical application scenarios.

computer science, software engineering, hardware & architecture

E-SAKA Algorithm for Key Agreement

Simple authenticated key agreement protocol resistant to password guessing attacks.

The New Enhanced Simple Authenticated Key Agreement Algorithm

Robust and Efficient Remote Authentication with Key Agreement Protocol

An Identity Based Authenticated Key Agreement Protocol

Secure Key Agreement Protocols for Three-Party Against Guessing Attacks

Secure one-pass and two-party authenticated key agreement protocol

Efficient source-independent quantum conference key agreement

Research and Improvement on EAP-AKA

Simple three-party password-based key exchange protocol with provable security

A novel session key agreement algorithm

Yet Another Certificateless Three-Party Authenticated Key Agreement Protocol

An Improved Authenticated Key Agreement Protocol

SAKE*: A Symmetric Authenticated Key Exchange Protocol with Perfect Forward Secrecy for Industrial Internet of Things

Security analysis of the eCK model

A key for John Doe: modeling and designing Anonymous Password-Authenticated Key Exchange protocols

A Key-Agreement Protocol Based on Static Parameters and Hash Functions

Key Agreement and Identity Authentication Protocols for Ad Hoc Networks

New identity-based three-party authenticated key agreement protocol with provable security

A Provably Secure Biometrics-Based Authenticated Key Agreement Scheme for Multi-Server Environments

KASE-AKA: Key-aggregate keyword searchable encryption against keyword guessing attack and authorization abuse