Generic Insecurity of Cliques-Type Authenticated Group Key Agreement Protocols

Authors:
Olivier Pereira;Jean-Jacques Quisquater
Affiliations:
UCL Crypto Group, Belgium;UCL Crypto Group, Belgium
Venue:
CSFW '04 Proceedings of the 17th IEEE workshop on Computer Security Foundations
Year:
2004

Citing 0
Cited 7

Multichannel Security Protocols

IEEE Pervasive Computing
A Clustering-based Group Key Agreement Protocol for Ad-Hoc Networks

Electronic Notes in Theoretical Computer Science (ENTCS)
Complexity results for security protocols with Diffie-Hellman exponentiation and commuting public key encryption

ACM Transactions on Computational Logic (TOCL)
Verifying Multi-party Authentication Using Rank Functions and PVS

Formal Aspects in Security and Trust
Analysis of a multi-party fair exchange protocol and formal proof of correctness in the strand space model

FC'05 Proceedings of the 9th international conference on Financial Cryptography and Data Security
Verification of security protocols with lists: from length one to unbounded length

POST'12 Proceedings of the First international conference on Principles of Security and Trust
Verification of security protocols with lists: From length one to unbounded length

Journal of Computer Security - Security and Trust Principles

Quantified Score

Hi-index	0.00

Visualization

Abstract

The A-GDH.2 and SA-GDH.2 authenticated group keyagreement protocols showed to be flawed at CSFW 2001.Even though the corresponding attacks (or some variantsof them) have been rediscovered in several different frameworks,no fixed version of these protocols has been proposeduntil now.In this paper, we describe a proof that it is in fact impossibleto design a scalable authenticated group key agreementprotocol based on the same building blocks as the A-GDHones. We proceed by providing a systematic way toderive an attack against any A-GDH-type protocol with atleast four participants (and exhibit protocols with two andthree participants which we cannot break). As far as weknow, this is the first generic insecurity result reported inthe literature concerning authentication protocols.