A Secure and E cient Three-Pass Authenticated Key Agreement Protocol Based on Elliptic Curves

Key agreement protocol is of fundamental importance in providing data con dentiality and integrity between two or more parties over an insecure network. In 2004, Popescu [14] proposed an authenticated key agreement protocol in which its security is claimed. However, Yoon and Yoo [19] discovered its vulnerabilities two years later and proposed an improved variant of it. In this paper, we highlight the vulnerability of this improved variant under the LaMacchia et al.'s extended CanettiKrawczyk security model [12]. With this, we propose another enhanced version of Popescu's protocol which o ers stronger security features and appears to be signi cantly more e cient than Yoon-Yoo's scheme. In order to justify our claims, we present a thorough heuristic security analysis on our scheme and compare the computational cost and security attributes with the surveyed schemes.