Improvement of authenaticated multiple-key agreement protocol

ABSTRACT

Recently, Yen and Joye showed that Harn and Lin's authenticated multiple-key agreement protocol is insecure against forgery and consequently proposed a revised protocol to repair it. Later, Wu et al. showed that Yen-Joye revision is also insecure and therefore an improved protocol was proposed. However, Wu et al.'s protocol violates the original requirement in which no one-way hash function is needed. On the other hand, in order to overcome Yen-Joye and Wu et al.'s attacks, Harn and Lin proposed a modified version by modifying the signature signing equation. But the modified version increases one exponentiation in the verification equation. Afterward Zhou et al. showed that the second Harh-Lin protocol is insecure against impersonation attack, i. e., a cheater can impersonate a valid user to execute the protocol successfully and obtains parts of the valid session keys. Then they proposed an improved version to enhance the second Harh-Lin protocol. In this paper, we first show that Zhou et al.'s protocol still suffers the impersonation attack, then we propose an improved scheme that is secure against forgery and doesn't involve any one-way hash function. Compared with all above modified versions, our scheme is secure and efficient.

REFERENCES

• 1: L. HARN, and H. Y. LIN, An authenticated key agreement protocol without using one-way function. Proc. 8th National Conf. Information Security, Kaohsiung, Taiwan, pp. 155--160, (1998)
• 2: S. M. YEN, and M. JOYE, Improved authenticated multiple-key agreement protocol, Electron. Lett., pp. 1738--1739, (1998)
• 3: T. S. WU, W. H. HE, and C. L HSU, Security of authenticated multiple-key agreement protocols, Electron. Lett., pp. 391--392 (1999)
• 4: L. HARN, and H. Y. LIN, Authenticated key agreement protocol without using one-way functions. Electron. Lett., pp. 629--630 (2001)
• 5: H. S. Zhou, L. Fan and J. H. Li, Remarks on unknown key share attack on authenticated multiple-key agreement protocol, Electron. Lett., pp. 1248--1249, (2003)
• 6: C. H. LIM, and P. J. LEE, Security of interactive DSA batch verification, Electron. Lett., pp. 1592--1593 (1994)
• 7: K. H. Rosen, Elementary Number Theory and Its Application-3rd edition, (1992)
• 8: R C Peralta, A simple and fast probabilistic algorithm for computing square roots modulo a prime number, IEEE Transactions on Information Theory, v.32 n.6, p.846-847, Nov. 1986 [doi>10.1109/TIT.1986.1057236]

INDEX TERMS

Keywords:
authenticated, key agreement, multiple-key