Cryptanalysis and improved mutual authentication key agreement protocol using pseudo-identity.

Area of Science:

• Computer Science
• Cybersecurity
• Network Security

Background:

• Authentication key agreement protocols are crucial for secure communication.
• Existing protocols, like Zhou et al.'s, may have vulnerabilities.
• Mutual authentication and robust session key agreement are key security requirements.

Purpose of the Study:

• To identify and address security weaknesses in Zhou et al.'s key agreement protocol.
• To propose an improved authentication key agreement protocol.
• To ensure robust mutual authentication and secure session key agreement.

Main Methods:

• Analysis of Zhou et al.'s protocol for vulnerabilities such as replay attacks and lack of mutual authentication.
• Development of an enhanced authentication key agreement protocol.
• Security analysis using BAN logic and AVISPA tools.
• Comparison of the proposed protocol with existing schemes based on security properties, computational cost, and communication overhead.

Main Results:

• Zhou et al.'s protocol was found vulnerable to replay attacks and lacks mutual authentication.
• The improved protocol successfully provides robust mutual authentication and secure session key agreement.
• The enhanced scheme demonstrates superior security performance and efficiency compared to related protocols.

Conclusions:

• The proposed improved authentication key agreement protocol effectively resolves the identified vulnerabilities.
• The enhanced protocol offers a more secure and efficient solution for establishing session keys in encrypted communication.
• This work contributes to advancing the security of key agreement schemes.