Simulatable certificateless two-party authenticated key agreement protocol

Zhang, Lei; Zhang, Futai; Wu, Qianhong; Domingo‐Ferrer, Josep

doi:10.1016/j.ins.2009.11.036

Cited by 74 publications

(55 citation statements)

References 20 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Therefore, the key escrow problem in ID-PKC is eliminated. Many certificateless cryptosystems have been proposed, including encryption schemes [1,10,24,25], signature schemes [1,11,28,29], key agreement protocols [1,31], threshold cryptosystems [8,14,23,26], and signcryption schemes [3,4,5,12,13,21,22]. As the adversary models in CLC are more complex, the security proofs in CLC are more challenging.…”

Section: Introductionmentioning

confidence: 99%

On security of a certificateless signcryption scheme

Miao

Zhang

et al. 2013

Information Sciences

Self Cite

View full text Add to dashboard Cite

It would be interesting if a signcryption scheme in the standard model could be made certificateless. One of the interesting attempts is due to Liu et al. [Z. Liu, Y. Hu, X. Zhang, H. Ma, Certificateless signcryption scheme in the standard model, Information Sciences 180 (3) (2010) [452][453][454][455][456][457][458][459][460][461][462][463][464]. In this paper, we provide a cryptanalysis on this scheme by depicting two kinds of subtle public key replacement attacks against it. Our analysis reveals that it does not meet the basic requirements of confidentiality and non-repudiation. AbstractIt would be interesting if a signcryption scheme in the standard model could be made certificateless. One of interesting attempts is due to Liu, Hu, Zhang and Ma, who published a certificateless signcryption scheme in the standard model in Volume 180 (3), Information Science, in 2010. In this paper, we provide a cryptanalysis on this scheme and show that it is insecure under two kinds of subtle public key replacement attacks. We show that it does not meet the basic requirements of confidentiality and non-repudoation.

show abstract

Section: Introductionmentioning

confidence: 99%

On security of a certificateless signcryption scheme

Miao

Zhang

et al. 2013

Information Sciences

Self Cite

View full text Add to dashboard Cite

show abstract

“…Therefore, an active adversary who has control over the communication channel can mount a man-in-the-middle attack [11]. Authenticated KA [19,20] enables two or more parties to establish a shared session key over an insecure channel.…”

Section: Introductionmentioning

confidence: 99%

Provably Secure Certificateless One-Way and Two-Party Authenticated Key Agreement Protocol

Zhang

2013

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Abstract. Key agreement protocols are one of the fundamental primitives in cryptography. In this paper, we formalize the security model for certificateless one-way and two-party authenticated key agreement protocols and propose a concrete certificateless one-way and two-party authenticated key agreement protocol. The security of our protocol is proven under the computational Diffie-Hellman, square computational Diffie-Hellman and gap bilinear Diffie-Hellman assumptions. As for efficiency, the protocol requires only one pass and has low communication overhead.

show abstract

“…Some early certificateless key exchange protocols (2005 till 2010) [7][8][9][10][11][12][13] have been proposed with heuristic security analysis. These protocols involve bilinear pairings and the pairing is regarded as a computationally expensive operation.…”

Section: Introductionmentioning

confidence: 99%

Avoiding Key Off-Set attack in a Pairing-Free Certificateless Key Agreement Protocol based on ECC

Elkamchouchi¹,

Elkhair²,

Abouelseoud³

2013

IJCA

View full text Add to dashboard Cite

A key establishment protocol allows entities to establish a common secret key to ensure secure communications over an insecure public network. This paper proposes two new twoparty key agreement protocols. Both protocols do not involve bilinear pairings. The first protocol is a certificate-based key agreement protocol that is more efficient than [1] due to its dependence on the elliptic curve discrete logarithm problem and the second is an extension to a certificateless key agreement protocol. Both protocols depend on the use of an authentication message to check that the shared session key is equal for both entities before using it. This authentication message prevents the key off-set attack that is valid for the Haiyan-Sun protocol [2]. The security analysis of the second protocol is discussed. The proposed certificateless key agreement protocol is compared with other protocols in literature [2,3,4] and it requires minimal computational cost. Moreover, this protocol is implemented using the Mathematica (7) program.

show abstract

Simulatable certificateless two-party authenticated key agreement protocol

Cited by 74 publications

References 20 publications

On security of a certificateless signcryption scheme

On security of a certificateless signcryption scheme

Provably Secure Certificateless One-Way and Two-Party Authenticated Key Agreement Protocol

Avoiding Key Off-Set attack in a Pairing-Free Certificateless Key Agreement Protocol based on ECC

Contact Info

Product

Resources

About