Two closely related insecure noninteractive group key establishment schemes

TL;DR

This paper identifies critical security flaws in two similar noninteractive group key establishment schemes, demonstrating simple attacks that compromise their security and recommending against their use.

Contribution

It provides a security analysis revealing vulnerabilities in two closely related schemes, highlighting the importance of rigorous security evaluation.

Findings

Both schemes are vulnerable to simple attacks.

The schemes should not be used due to security weaknesses.

The analysis emphasizes the need for stronger security in group key protocols.

Abstract

Serious weaknesses in two very closely related group authentication and group key establishment schemes are described. Simple attacks against the group key establishment part of the schemes are described, which strongly suggest that the schemes should not be used.