A New Two-Pass Key Agreement Protocol

Abstract

Diffie-Hellman key agreement protocol is the first and most famous protocol, but it has many flaws and drawbacks. Therefore, this paper proposes a new two-pass authenticated key agreement protocol (AK) and extent its capabilities to support key confirmation as a three-pass authenticated key agreement with key confirmation protocol (AKC). The present protocols are based on Diffie-Heliman problem and it is worldng over elliptic curve group in the setting of asymmetric techniques. I INTRODUCTIONKey agreement refers to one form of key establishment protocols in which two or more users execute a protocol to securely share a session key. The most famous protocol for key agreement was proposed by Diffie and Hellman which is based on concept of public-key cryptography [1]. There are two versions ofthe Diffie-Hellman protocol namely static and ephemeral. In the first one, the entities exchange static public keys, and in the second, the entities exchange ephemeral public keys. Therefore, the static protocol has a major drawback, is that the entities S and B compute the same session key for each run of the protocol. Also the ephemeral Diffie-Hellman protocol is vulnerable to a man-in-the-middle attack.In order to counter these weaknesses, a new authenticated key agreement protocol is introduced in this paper. The important feature of the proposed protocol is the established session key is formed as combination of static and ephemeral private keys of two entities A and B. The discussion shows the present protocol meets all security and efficiency attributes. II DESIRABLE SECURITY AND EFFICIENCY AITRIBUTES OF AK AND AKC PROTOCLSDesirable security attributes of AK and AKC protocols are as follows [2, 3, 5].

On the Resilience of Key Agreement Protocols to Key Compromise Impersonation

“…However, this does not seem possible unless either one of r A or w B are available to Eve. Similar reasoning also applies to the MQV protocol where the use of a non standard function 1 destroys the algebraic structure of the group. To be honest, resistance to KCI attacks was not the main design goal of the MQV protocol (and perhaps neither for the MTI/A0 protocol).…”

“…The SSEB key agreement protocol of Figure 6 was designed by Al-Sultan et al [1]. The session key is derived from the expression (r A r B + w A w B )P .…”

S-wane Model Designed to Improve Security Association Negotiation Process in IPv6

“…That is why we chose to compare it with Station -To -Station Protocol (STS) [9], New two-Pass Key Agreement [10] and HMGV(Hashed Menezes-Qu-Vanstone) [11]. The Protocol choice is motivated by shared concerns.…”

Efficient Diffie-Hellmann two-party key agreement protocols based on elliptic curves

“…The SSEB key agreement protocol described in Figure 6 was proposed by Al-Sultan et al [1]. The conjectured security attributes are KK-S, FS, KCI-R, UKS-R.…”