Password-Authenticated Group Key Agreement with Adaptive Security and Contributiveness

Michel Abdalla (1, 2) , Dario Catalano (3) , Céline Chevalier (1, 2) , David Pointcheval (1, 2)

1 LIENS - Laboratoire d'informatique de l'école normale supérieure
2 CASCADE - Construction and Analysis of Systems for Confidentiality and Authenticity of Data and Entities
3 DMI - Dipartimento di Matematica e Informatica

Adaptively-secure key exchange allows the establishment of secure channels even in the presence of an adversary that can corrupt parties adaptively and obtain their internal states. In this paper, we give a formal definition of contributory protocols and define an ideal functionality for password-based group key exchange with explicit authentication and contributiveness in the UC framework. As with previous definitions in the same framework, our definitions do not assume any particular distribution on passwords or independence between passwords of different parties. We also provide the first steps toward realizing this functionality in the above strong adaptive setting by analyzing an efficient existing protocol and showing that it realizes the ideal functionality in the random-oracle and ideal-cipher models based on the CDH assumption.

Domaines: Cryptographie et sécurité [cs.CR]

Michel Abdalla, Dario Catalano, Céline Chevalier, David Pointcheval. Password-Authenticated Group Key Agreement with Adaptive Security and Contributiveness. Second African International Conference on Cryptology (AfricaCrypt '09), 2009, Gammarth - Tunisie, Tunisia. pp.254--271. ⟨inria-00419147⟩