Computer Science – Cryptography and Security
Scientific paper
2011-12-03
Computer Science
Cryptography and Security
Scientific paper
Recently, Yang and Tan proposed a certificateless key exchange protocol without pairing, and claimed their scheme satisfies forward secrecy, which means no adversary could derive an already-established session key unless the full user secret keys (including a private key and an ephemeral secret key) of both communication parties are compromised. However, in this paper, we point out their protocol is actually not secure as claimed by presenting an attack launched by an adversary who has learned the private key of one party and the ephemeral secret key of the other, but not the full user secret keys of both parties. Furthermore, to make up this flaw, we also provide an improved protocol in which the private key and the ephemeral secret key are closely intertwined with each other for generating the session key, thus above attack can be efficiently resisted.
Jin Zheng-Ping
Wen Qiao-Yan
Zhang Hua
Zhang Jie
Zhang Min
No associations
LandOfFree
Analysis and improvement of a strongly secure certificateless key exchange protocol without pairing does not yet have a rating. At this time, there are no reviews or comments for this scientific paper.
If you have personal experience with Analysis and improvement of a strongly secure certificateless key exchange protocol without pairing, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Analysis and improvement of a strongly secure certificateless key exchange protocol without pairing will most certainly appreciate the feedback.
Profile ID: LFWR-SCP-O-697899