Revisiting OAKE in the eCK Security Model

摘要

KEA, OPACITY, MQV and HMQV protocols are impor- tant implicitly authenticated Diffe-Hellman key-exchange (IA- DHKE) protocols. By combining the advantages and saving the disadvantages of previous IA-DHKE protocols, OAKE shows promising future. It has been proved that OAKE is secure within Canetti-Krawczyk framework under Gap-CDH assumption. In this work, we present our modified protocol MOAKE and show that MOAKE preserves many advantages of OAKE. We also prove that our new protocol is secure in extended Canetti-Krawczyk framework under Gap-CDH assumption.