Improvement of McCullagh-Barreto key agreement with KCI-security  

作　　者：WANG Xiao-fen DONG Qing-kuan ZHOU Yu XIAO Guo-zhen 

机构地区：[1]School of Computer Science and Engineering, University of Electronic Science and Technology of China, Chengdu 610054, China [2]National Key Laboratory of Integrated Service Networks, Xidian University, Xi'an 710071, China

出　　处：《The Journal of China Universities of Posts and Telecommunications》2009年第2期68-71,79,共5页中国邮电高校学报（英文版）

基　　金：supported by the National Natural Science Foundation of China(60773003,60603010);the Natural Science Foundation of Shaanxi Province(2006F19)

摘　　要：McCullagh-Barreto key agreement protocol and its variant achieve perfect forward security and key generation center （KGC） forward security, but provide no resistance to key compromise impersonation attack （KCI attack）. In this paper, we give a formal treatment of key compromise impersonation （KCI） attack and define the security notion against it. Then an variant of McCullagh-Barreto protocol is presented with only one more Hash operation. The improved protocol preserves perfect forward security and KGC forward security, and furthermore is proved to be secure against KCI attack under k-Gap-BCAA1 assumption.McCullagh-Barreto key agreement protocol and its variant achieve perfect forward security and key generation center （KGC） forward security, but provide no resistance to key compromise impersonation attack （KCI attack）. In this paper, we give a formal treatment of key compromise impersonation （KCI） attack and define the security notion against it. Then an variant of McCullagh-Barreto protocol is presented with only one more Hash operation. The improved protocol preserves perfect forward security and KGC forward security, and furthermore is proved to be secure against KCI attack under k-Gap-BCAA1 assumption.

关 键 词：authenticated key agreement key compromise impersonation attack perfect forward security KGC forward security KCI-secure 

分 类 号：TN915.04[电子电信—通信与信息系统] TQ131.13[电子电信—信息与通信工程]