From key encapsulation to authenticated group key establishment-A compiler for post-quantum primitives

Abstract

Assuming the availability of an existentially unforgeable signature scheme and an (IND-CCA secure) key encapsulation mechanism, we present a generic construction for group key establishment. The construction is designed with existing proposals for post-quantum cryptography in mind. Applied with such existing proposals and assuming their security, we obtain a quantum-safe three-round protocol for authenticated group key establishment that requires only one signature per protocol participant.