1 Hit in 2.8 sec

A Generic Variant of NIST's KAS2 Key Agreement Protocol [chapter]

Sanjit Chatterjee, Alfred Menezes, Berkant Ustaoglu
2011 Lecture Notes in Computer Science  
We propose a generic three-pass key agreement protocol that is based on a certain kind of trapdoor one-way function family.  ...  The generic protocol also has a hybrid implementation, where one party has an RSA key pair and the other party has a discrete log key pair.  ...  We present in §3 a variant of the extended Canetti-Krawczyk security model for key agreement [5, 11] that we believe captures all the essential security properties of the generic protocol.  ... 
doi:10.1007/978-3-642-22497-3_23 fatcat:lhue4ocbuvcwnkzwbznwcgk7ni