Abstract:Authenticated Key Exchange (AKE) between any two entities is one of the most important security protocols available for securing our digital networks and infrastructures. In PQCrypto 2023, Bruckner, Ramacher and Striecks proposed a novel hybrid AKE (HAKE) protocol, dubbed Muckle+, that is particularly useful in large quantum-safe networks consisting of a large number of nodes. Their protocol is hybrid in the sense that it allows key material from conventional and post-quantum primitives, as well as from quantum key distribution, to be incorporated into a single end-to-end shared key. To achieve the desired authentication properties, Muckle+ utilizes post-quantum digital signatures. However, available instantiations of such signatures schemes are not yet efficient enough compared to their post-quantum key-encapsulation mechanism (KEM) counterparts, particularly in large networks with potentially several connections in a short period of time. To mitigate this gap, we propose Muckle# that pushes the efficiency boundaries of currently known HAKE constructions. Muckle# uses post-quantum key-encapsulating mechanisms for implicit authentication inspired by recent works done in the area of Transport Layer Security (TLS) protocols, particularly, in KEMTLS (CCS'20). We port those ideas to the HAKE framework and develop novel proof techniques on the way. Due to our novel KEM-based approach, the resulting protocol has a slightly different message flow compared to prior work that we carefully align with the HAKE framework and which makes our changes to the Muckle+ non-trivial.

Handover Authenticated Key Exchange for Multi-access Edge Computing

AEAKA: An Adaptive and Efficient Authentication and Key Agreement Scheme for IoT in Cloud-Edge-Device Collaborative Environments

Identity-Based Edge Computing Anonymous Authentication Protocol

Lightweight anonymous authentication and key agreement protocols for mobile edge computing

Revisiting OAKE in the Eck Security Model

A Lightweight Mutual Authentication Scheme for Power Edge Computing System

Multi-Access Edge Computing Handover Strategies, Management, and Challenges: A Review

Multilayer Consensus ECC-Based Password Authenticated Key-Exchange (MCEPAK) Protocol for Smart Grid System

Quantum-Safe Hybrid Key Exchanges with KEM-Based Authentication

LAKEE: A Lightweight Authenticated Key Exchange Protocol for Power Constrained Devices

A Secure Network Access Approach Based on Heterogeneous Key Exchange Protocol

AADEC: Anonymous and Auditable Distributed Access Control for Edge Computing Services

Provably Secure Authenticated Key Exchange Protocol under the CDH Assumption

Secure authenticated key exchange for WSNs in IoT applications

An Efficient Leakage-Resilient Authenticated Key Exchange Protocol Suitable for IoT Devices

Power Terminal Lightweight Authentication Protocol for Edge Computing

After-the-Fact Leakage-Resilient Identity-Based Authenticated Key Exchange

An Id-Based Three-Party Authenticated Key Exchange Protocol Using Elliptic Curve Cryptography for Mobile-Commerce Environments

Authentication and Key Exchange Protocol with Provable Security for Heterogeneous Wireless Access

Identity-Based Identity-Concealed Authenticated Key Exchange

A provable secure and lightweight ECC-based authenticated key agreement scheme for edge computing infrastructure in smart grid