On the impossibility of building secure cliques-type authenticated group key agreement protocols

  • Authors:
  • Olivier Pereira;Jean-Jacques Quisquater

  • Affiliations:
  • UCL Crypto Group, Université catholique de Louvain, Louvain-la-Neuve, Belgium and Belgain National Funds for Scientific Research (FNRS);UCL Crypto Group, Université catholique de Louvain, Louvain-la-Neuve, Belgium

  • Venue:
  • Journal of Computer Security - Special issue on CSFW17
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

The A-GDH.2 and SA-GDH.2 authenticated group key agreement protocols showed to be flawed in 2001. Even though the corresponding attacks (or some variants of them) have been rediscovered in several different frameworks, no fixed version of these protocols has been proposed until now.In this paper, we prove that it is in fact impossible to design a scalable authenticated group key agreement protocol based on the same design assumptions as the A-GDH ones. We proceed by providing a systematic way to derive an attack against any A-GDH-type protocol with at least four participants and exhibit protocols with two and three participants which we cannot break using our technique. As far as we know, this is the first generic insecurity result reported in the literature concerning authentication protocols.