- 期刊
Revisit of McCullagh-Barreto Two-Party ID-Based Authenticated Key Agreement Protocols
並列摘要
We revisit the two-party identity-based authenticated key agreement protocol (2P-IDAKA) and its variant resistant to key-compromise impersonation due to McCullagh & Barreto (2005). Protocol 2P-IDAKA carries a proof of security in the Bellare & Rogaway (1993) model. In this paper, we demonstrated why both the protocol and its variant are not secure if the adversary is allowed to send a Reveal query to reveal non-partner players who had accepted the same session key (i.e., termed key-replicating attack in recent work of Krawczyk (2005)). We also demonstrate that both protocols do not achieve the key integrity property, first discussed by Janson & Tsudik (1995).
延伸閱讀
- 陳柏諭（2011）。The Study of Authentication and Certificateless Key Agreement Protocol〔碩士論文，亞洲大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0118-1511201215471708
- Zhu, H., & Zhang, Y. (2017). An Improved Two-party Password-Authenticated Key Agreement Protocol with Privacy Protection Based on Chaotic Maps. International Journal of Network Security, 19(4), 487-497. https://doi.org/10.6633/IJNS.201707.19(4).1
- Farash, M. S., & Attari, M. A. (2014). A Pairing-free ID-based Key Agreement Protocol with Different PKGs. International Journal of Network Security, 16(3), 168-173. https://doi.org/10.6633/IJNS.201405.16(3).02
- Cheng, Q. F., & Tang, C. M. (2015). Cryptanalysis of an ID-based Authenticated Dynamic Group Key Agreement with Optimal Round. International Journal of Network Security, 17(6), 678-682. https://doi.org/10.6633/IJNS.201511.17(6).04
- Zhu, D., Wang, L., & Zhu, H. (2021). Two Lightweight Authenticated Key Agreement Protocols Using Physically Unclonable Function with Privacy Protection. International Journal of Network Security, 23(2), 278-285. https://doi.org/10.6633/IJNS.202103_23(2).11