Consider a scenario where a server S shares a symmetric key kU with each user U. Building on a 2-party solution of Bohli et al., we describe an authenticated 3-party key establishment which remains secure if a computational Bilinear Diffie Hellman problem is hard or the server is uncorrupted. If the BDH assumption holds during a protocol execution, but is invalidated later, entity authentication and integrity of the protocol are still guaranteed.
展开▼
机译：考虑服务器S与每个用户U共享对称密钥k U 的情况。在Bohli等人的2方解决方案的基础上，我们描述了经过身份验证的3方密钥建立，该密钥保持安全如果计算双线性Diffie Hellman问题很难解决或服务器未损坏。如果BDH假设在协议执行过程中成立，但之后又无效，则仍然可以保证协议的实体认证和完整性。
展开▼
