Abstract:Identity-based authenticated key exchange (ID-AKE) allows two parties (whose identities are just their public keys) to agree on a shared session key over open channels. At ESORICS 2019, Tomida et al. proposed a highly efficient ID-AKE protocol, referred to as the TFNS19-protocol, under the motivation of providing authentication and secure communication for huge number of low-power IoT devices. The TFNS19-protocol currently stands for the most efficient ID-AKE based on bilinear pairings, where each user remarkably performs only a single pairing operation. But it does not consider users' identity privacy, and the security is based on relatively non-standard assumptions. In this work, we formulate and design identity-based identity-concealed AKE (IB-CAKE) protocols. Here, identity concealment means that the session transcript does not leak users' identity information. We present a simple and highly practical IB-CAKE protocol, which is computationally more efficient than the remarkable TFNS19-protocol in total. We present a new security model for IB-CAKE, and show it is stronger than the ID-eCK model used for the TFNS19-protocol. The security of our IB-CAKE protocol is proved under relatively standard assumptions in the random oracle model, assuming the security of the underlying authenticated encryption and the gap bilinear Diffie-Hellman (Gap-BDH) problem. Finally, we provide the implementation results for the proposed IB-CAKE scheme, and present performance benchmark.

ID-Based One Round Authenticated Tripartite Key Agreement Protocol with Pairings

New identity-based three-party authenticated key agreement protocol with provable security

Efficient Identity-Based and Authenticated Key Agreement Protocol

Certificateless Two-Party Authenticated Key Agreement Protocol Based on Bilinear Pairings

Provably secure and efficient certificateless authenticated tripartite key agreement protocol.

Cryptoanalysis of ID-based Proxy Re-Signature Scheme with Pairing-Free

Yet Another Certificateless Three-Party Authenticated Key Agreement Protocol

A Two-Party Identity-Based Key Agreement Protocol with Explicit Authentication

Simple three-party password-based key exchange protocol with provable security

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

Identity-Based Identity-Concealed Authenticated Key Exchange

Bilinear Pairings-Based Threshold Identity Authentication Scheme for Ad Hoc Network.

A Novel Threshold Distributed Authentication Scheme Using Bilinear Pairings

Cryptanalysis and Improvement of Several Identity-Based Authenticated and Pairing-Free Key Agreement Protocols for IoT Applications

Provably Secure Three-Party Password-Authenticated Key Exchange

Security Analysis of Shim's Authenticated Key Agreement Protocols from Pairings

Three-party Encrypted Key Exchange

A Certificateless Two-Party Key Agreement Protocol from Challenge-Response Signatures

Efficient three-party authenticated key agreement protocol in certificateless cryptography

Application of Bilinear Pairing in Cryptography

Secure Key Agreement Protocols for Three-Party Against Guessing Attacks