A secure and efficient three-pass authenticated key agreement protocol based on elliptic curves

Abstract

Key agreement protocol is of fundamental importance in providing data confidentiality and integrity between two or more parties over an insecure network. In 2004, Popescu [14] proposed an authenticated key agreement protocol in which its security is claimed. However, Yoon and Yoo [19] discovered its vulnerabilities two years later and proposed an improved variant of it. In this paper, we highlight the vulnerability of this improved variant under the LaMacchia et al.'s extended Canetti-Krawczyk security model [12]. With this, we propose another enhanced version of Popescu's protocol which offers stronger security features and appears to be significantly more efficient than Yoon-Yoo's scheme. In order to justify our claims, we present a thorough heuristic security analysis on our scheme and compare the computational cost and security attributes with the surveyed schemes. © 2008 Springer-Verlag Berlin Heidelberg.