Flaw and amendment of a two-party authenticated key agreement protocol for post-quantum environments. (September 2021)

• Record Type: Journal Article
• Authors: Dabra, Vivek; Bala, Anju; Kumari, Saru
• Is Part Of: Journal of information security and applications. Volume 61(2021)
• Publication Date: 2021-09
• Subjects: Authenticated key agreement -- Lattice based cryptography -- Post-quantum cryptography -- Ring Learning With Error -- Signal Leakage Attack; Computer security -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.jisa.2021.102889
• Languages: English
• ISSNs: 2214-2126

Abstract

Abstract: Recent advances in quantum computers challenge the security of key agreement protocol that are designed with the intractability assumptions of discrete logarithmic problem and integer factorization problem. Hence, motivated to develop the key agreement protocol that is secure in post-quantum era, recently Islam proposed a provably secure two-party authenticated key agreement (2PAKA) protocol. The protocol is based on the intractability assumption of the famous Ring Learning With Error (RLWE) problem. In this work, we show that Islam's two-party key agreement is vulnerable to the modified version of the signal leakage attack (SLA) which is termed as improved-signal leakage attack (i-SLA) in this article. Using i-SLA, the attacker can successfully recover the long term private key of the honest user by instantiating utmost q number of key exchange sessions with the honest user using q number of malformed public keys. To overcome the attack, we provide a countermeasure without changing the original design of the protocol.