Cryptanalysis and Enhancement of an Anonymous Self-Certified Key Exchange Protocol

Mandal, Susmita; Mohanty, Sanghamitra; Majhi, Banshidhar

doi:10.1007/s11277-017-5156-5

Cited by 13 publications

(15 citation statements)

References 41 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Alzahrani et al [6] proposed an ECC-based key-agreement protocol for D2D communications in IoV networks that does not need a TA in the authentication and key-agreement phase. They analyzed and revealed security pitfalls of protocols by Islam and Biswas [7] and Mandal et al [8]. In this article, we demonstrate that the protocol proposed by Alzahrani et al [6] suffers from some problems in design and is insecure against insider attacks, key compromise attack, and fails to provide anonymity.…”

Section: Introductionmentioning

confidence: 66%

“…In order to reduce evaluation overhead and authenticate public keys, and to solve the key escrow problem, Islam and Biswas [7] designed an ECC-based key agreement protocol along with the self-certified public key for two-party communications. Mandal et al [8] improved the security issues of Islam and Biswas' protocol. Nevertheless, Alzahrani et al [6] showed that both protocols by Islam-Biswas [7] and Mandal et al [8] suffered from key compromise impersonation attacks and do not ensure the anonymity of IoT devices.…”

Section: Literature Reviewmentioning

confidence: 99%

See 1 more Smart Citation

A Secure Anonymous D2D Mutual Authentication and Key Agreement Protocol for IoT Environments

Hajian

Haghighat

Erfani

2021

Preprint

View full text Add to dashboard Cite

Internet of Things (IoT) is a developing technology in our time that is prone to security problems as it uses wireless and shared networks. A challenging scenario in IoT environments is Device-to-Device (D2D) communication that an authentication server as a trusted third-party, does not involve in the authentication and key agreement process. It is only involved in the process of allocating long-term secret keys and their update. A lot of authentication protocols have been suggested for such situations. This article demonstrated that three state-of-the-art related protocols failed to remain anonymous, insecure against key compromise impersonation (KCI) attack, and clogging attack. To counter the pitfalls of them, a new D2D mutual authentication and key agreement protocol is designed here. The proposed protocol is anonymous, untraceable, and highly secure. Moreover, there is no need for a secure channel to generate a pair of private and public keys in the registration phase.) Formal security proof and security analysis using BAN logic, Real-Or-Random (ROR) model, and Scyther tool showed that our proposed protocol satisfied security requirements. Furthermore, communication cost, computation cost, and energy consumption comparisons denoted our schema has better performance, compared to other protocols.

show abstract

Section: Introductionmentioning

confidence: 66%

Section: Literature Reviewmentioning

confidence: 99%

A Secure Anonymous D2D Mutual Authentication and Key Agreement Protocol for IoT Environments

Hajian

Haghighat

Erfani

2021

Preprint

View full text Add to dashboard Cite

show abstract

mentioning

confidence: 99%

“…By simulating a clogging attack [1–5], an adversary forces a communicating entity to process a forged/replayed authentication request by the adversary impersonating on behalf of a legitimate entity. The clogging attack represents a significant class of denial of services (DoS) attack and quality of services (QoS) degradation attack [3–6]. The clogging attack can be launched through the replay of old messages and get these accepted as legitimate and fresh ones from the receiving entity or adversary can try to construct a forged message, which can pass authentication requests from the receiving entity [6].…”

mentioning

confidence: 99%

See 1 more Smart Citation

Further comments on ‘SFVCC: Chaotic map‐based security framework for vehicular cloud computing’

Irshad¹,

Chaudhry

2020

IET intell. transp. syst

View full text Add to dashboard Cite

SiSMA‐SWMS: Signature‐based Secure Monitoring Approach for Smart Waste Monitoring Systems

Lama,

Karmakar

2024

Security and Privacy

View full text Add to dashboard Cite

With the speedy growth of the populace, corresponding waste also grows, notably raising greater concern about the monitoring of waste in urban areas. Although the traditional method of waste monitoring has benefited city waste management systems, it remains time‐consuming, inefficient, and detrimental to public health. This situation can be improved by integrating advanced technologies, which can significantly enhance the flexibility and performance of waste monitoring systems. However, these advanced technologies encounter numerous security challenges. In this article, we have implemented a signature‐based monitoring approach to oversee the status of smart bins. To ensure the security, robustness, and reliability of the introduced protocol, we utilized tools such as AVISPA, Scyther, the ROR model, and Mao and Boyd logic. As discussed in the informal security analysis, the introduced protocol successfully fulfills the security requirements for smart waste monitoring systems. Finally, an in‐depth comparative analysis of the related works and the introduced protocol shows that the latter provides greater security, reliability, and efficiency. As a result, the reliability and hardness of the cryptographic operations used in the introduced protocol make it secure enough to use in real‐world applications.

show abstract

Cryptanalysis and Enhancement of an Anonymous Self-Certified Key Exchange Protocol

Cited by 13 publications

References 41 publications

A Secure Anonymous D2D Mutual Authentication and Key Agreement Protocol for IoT Environments

A Secure Anonymous D2D Mutual Authentication and Key Agreement Protocol for IoT Environments

Further comments on ‘SFVCC: Chaotic map‐based security framework for vehicular cloud computing’

SiSMA‐SWMS: Signature‐based Secure Monitoring Approach for Smart Waste Monitoring Systems

Contact Info

Product

Resources

About