An Improved Conference-Key Agreement Protocol with Forward Secrecy

摘要

Tseng''as pasiule konferencijos rakto generavimo protokola. Straipsnyje parodyta, kad šis protokolas neužtikrina išankstinio saugumo (fonvard secrecy). Sakoma, kad konferencijos rakto generavimo protokolas tenkina išankstinio saugumo reikalavima, kai bet kurio konferencijos da-lyvio privataus rakto sukompromitavimas neturi itakos konferencijos rakto saugumaui. Straipsnyje pasiulytas modifikuotas Tseng''o protokolas, tenkinantis išankstinio saugumo salyga. Atlikta modi-fikuoto protokolo atsparumo ivairiu ataku atžvilgiu analize.%Recently, Tzeng proposed a provably secure and fault-tolerant conference-key agreement protocol. It requires only a constant number of rounds to establish a conference key among all honest participants. This article will show that Tzeng's protocol does not offer forward secrecy. We say that a conference-key agreement protocol offers forward secrecy if the long-term secret key of any participant is compromised and will not result in the compromise of the previously established conference keys. This property is important and has been included in most key agreement protocols and standards. In this paper, an improvement based on Tzeng's protocol is proposed and it achieves forward secrecy. Under the Diffie-Hellman decision problem assumption and the random oracle model, we show that the proposed protocol can withstand passive attacks and is secure against impersonator's attacks. The improved protocol requires a constant number of rounds to compute a conference key. The improved protocol provides fault-tolerance.