본문 바로가기
  • Home

Yi et al.’s Group Key Exchange Protocol : A Security Vulnerability and its Remediation

  • Journal of The Korea Society of Computer and Information
  • Abbr : JKSCI
  • 2012, 17(4), pp.91-98
  • Publisher : The Korean Society Of Computer And Information
  • Research Area : Engineering > Computer Science

Youngsook Lee 1 김지연 2 WON, DONGHO 2

1호원대학교
2성균관대학교

Accredited

ABSTRACT

A group key exchange (GKE) protocol is designed to allow a group of parties communicating over a public network to establish a common secret key. As group-oriented applications gain popularity over the Internet, a number of GKE protocols have been suggested to provide those applications with a secure multicast channel. Among the many protocols is Yi et al.’s password-based GKE protocol in which each participant is assumed to hold their individual password registered with a trusted server. A fundamental requirement for password-based key exchange is security against off-line dictionary attacks. However, Yi et al.’s protocol fails to meet the requirement. In this paper, we report this security problem with Yi et al.’s protocol and show how to solve it.

Citation status

* References for papers published after 2023 are currently being built.