Cryptanalysis and improvement of a chaotic maps-based anonymous authenticated key agreement protocol for multiserver architecture

详细信息    查看全文

• 作者：Yanrong Lu ; Lixiang Li ; Haipeng Peng and Yixian Yang
• 刊名：Security and Communication Networks
• 出版年：2016
• 出版时间：25 July 2016
• 年：2016
• 卷：9
• 期：11
• 页码：1321-1330
• 全文大小：427K
• ISSN：1939-0122

文摘

With the purpose of ensuring secure communication through wireless environments, authenticated key agreement protocols with user anonymity are widely investigated. Inspired by the semi-group property of Chebyshev maps and multiple servers in the network environment, Tsai et al. proposed a novel chaotic maps-based anonymous authenticated key agreement protocol based on multiserver architecture. Unfortunately, we observe that the Tsai et al. protocol falls to key-compromise impersonation attack, which opens the door for an attacker to launch an offline password-guessing attack. Moreover, the Tsai et al. protocol also unfortunately violates the session key security. Elaborating on the security of chaotic maps-based authenticated key agreement, we present an enhanced protocol employing biometrics that attempts to repair the security pitfalls found in Tsai et al. Security analysis shows that the enhanced protocol satisfies more security attributes while retaining the merits of the original protocol. We also present a formal proof of the enhanced protocol with the Burrows–Abadi–Needham logic. The performance of our protocol is evaluated with its predecessor protocols, and the comparative results show that it outperforms the predecessor protocols in terms of better trade-off between desirable security attributes and computational overhead. Copyright