A resilient identity‐based authenticated key exchange protocol. Issue 13 (23rd January 2015)

• Record Type: Journal Article
• Authors: Elashry, Ibrahim; Mu, Yi; Susilo, Willy
• Is Part Of: Security and communication networks. Volume 8:Issue 13(2015)
• Page Start: 2279
• Page End: 2290
• Publication Date: 2015-01-23
• Subjects: Computer networks -- Security measures -- Periodicals; Computer security -- Periodicals; Cryptography -- Periodicals; 005.805
• DOI: 10.1002/sec.1172
• Languages: English
• ISSNs: 1939-0114

Abstract

<abstract abstract-type="main" id="sec1172-abs-0001"> <title>Abstract</title> <p id="sec1172-para-0001">This paper presents a new security notion for key exchange (KE) protocols called resiliency. That is, if a shared secret between a group of parties is compromised or leaked, they can generate another completely new shared secret without the need to set up a new KE session. We present an identity‐based authenticated KE protocol that satisfies the resiliency security property. We prove that if an <italic>l</italic>‐bit shared secret key (<italic>SSK</italic>) is leaked, then two parties <italic>P</italic>₁ and <italic>P</italic>₂ can safely generate another shared secret <italic>S</italic><italic>S</italic><italic>K</italic>₁ without the need to establish a new session. We adjust the unauthenticated adversarial model of the Canetti–Krawczyk to meet this security property and prove the security of the proposed protocol using the Canetti–Krawczyk model based on the quadratic residuosity assumption. Copyright © 2015 John Wiley &amp; Sons, Ltd.</p> </abstract>