Vulnerability of an Improved Elliptic Curve Diffie-Hellman Key Agreement And Its Enhancement

Zeyad Mohammad; Chi-Chun Lo

doi:10.1109/EBISS.2009.5138145

Vulnerability of an Improved Elliptic Curve Diffie-Hellman Key Agreement And Its Enhancement

Zeyad Mohammad, Chi-Chun Lo

Institute of Information Management

Research output: Contribution to conference › Paper › peer-review

5 Scopus citations

Abstract

Authenticated key agreement protocols are a foundation for delivering an authenticated session key between the intended two-party participants from a set of parties over an insecure network. Wang et al proposed protocol ECKE-1N to overcome KCI-R attacks in ECKE-1 as an implicit authenticated key agreement protocol based on Diffie-Hellman elliptic curve. In this paper, we show that ECKE-1N is vulnerable to both leakage of ephemeral private keys and KCI-R attacks. We present an enhanced protocol EECKE-1N, which can withstand KCI-R attacks and revelations both of ephemeral keys. Furthermore, EECKE-1N can provide desirable security proprieties.

Original language	English
Pages	128-132
Number of pages	5
DOIs	https://doi.org/10.1109/EBISS.2009.5138145
State	Published - May 2009
Event	1st International Conference on E-Business and Information System Security - Wuhan, China Duration: 23 May 2009 → 24 May 2009

Conference

Conference	1st International Conference on E-Business and Information System Security
Country	China
City	Wuhan
Period	23/05/09 → 24/05/09

Access to Document

10.1109/EBISS.2009.5138145

Fingerprint Dive into the research topics of 'Vulnerability of an Improved Elliptic Curve Diffie-Hellman Key Agreement And Its Enhancement'. Together they form a unique fingerprint.

Cite this

@conference{ac4ec1e4f07d4fccb39526e2cc7eedfe,

title = "Vulnerability of an Improved Elliptic Curve Diffie-Hellman Key Agreement And Its Enhancement",

abstract = "Authenticated key agreement protocols are a foundation for delivering an authenticated session key between the intended two-party participants from a set of parties over an insecure network. Wang et al proposed protocol ECKE-1N to overcome KCI-R attacks in ECKE-1 as an implicit authenticated key agreement protocol based on Diffie-Hellman elliptic curve. In this paper, we show that ECKE-1N is vulnerable to both leakage of ephemeral private keys and KCI-R attacks. We present an enhanced protocol EECKE-1N, which can withstand KCI-R attacks and revelations both of ephemeral keys. Furthermore, EECKE-1N can provide desirable security proprieties.",

author = "Zeyad Mohammad and Chi-Chun Lo",

year = "2009",

month = may,

doi = "10.1109/EBISS.2009.5138145",

language = "English",

pages = " 128--132",

note = "null ; Conference date: 23-05-2009 Through 24-05-2009",

}

TY - CONF

T1 - Vulnerability of an Improved Elliptic Curve Diffie-Hellman Key Agreement And Its Enhancement

AU - Mohammad, Zeyad

AU - Lo, Chi-Chun

PY - 2009/5

Y1 - 2009/5

N2 - Authenticated key agreement protocols are a foundation for delivering an authenticated session key between the intended two-party participants from a set of parties over an insecure network. Wang et al proposed protocol ECKE-1N to overcome KCI-R attacks in ECKE-1 as an implicit authenticated key agreement protocol based on Diffie-Hellman elliptic curve. In this paper, we show that ECKE-1N is vulnerable to both leakage of ephemeral private keys and KCI-R attacks. We present an enhanced protocol EECKE-1N, which can withstand KCI-R attacks and revelations both of ephemeral keys. Furthermore, EECKE-1N can provide desirable security proprieties.

AB - Authenticated key agreement protocols are a foundation for delivering an authenticated session key between the intended two-party participants from a set of parties over an insecure network. Wang et al proposed protocol ECKE-1N to overcome KCI-R attacks in ECKE-1 as an implicit authenticated key agreement protocol based on Diffie-Hellman elliptic curve. In this paper, we show that ECKE-1N is vulnerable to both leakage of ephemeral private keys and KCI-R attacks. We present an enhanced protocol EECKE-1N, which can withstand KCI-R attacks and revelations both of ephemeral keys. Furthermore, EECKE-1N can provide desirable security proprieties.

U2 - 10.1109/EBISS.2009.5138145

DO - 10.1109/EBISS.2009.5138145

M3 - Paper

SP - 128

EP - 132

Y2 - 23 May 2009 through 24 May 2009

ER -