Saeed-Liu-Tian-Gao-Li认证密钥协商协议是不安全的
The Saeed-Liu-Tian-Gao-Li authenticated key agreement protocol is insecure
摘要：
最近提出的认证密钥协商协议被证明是不安全的。特别是，双方中的一方没有经过身份验证，允许中间对手的活跃人员重放旧消息。该协议本质上是一个经过身份验证的Diffie-Hellman密钥协商方案，缺乏身份验证允许攻击者重放旧消息并接受它们。此外，如果用于计算协议消息的临时密钥曾经被泄露，则使用重放的消息建立的密钥也将被泄露。解决这个问题很简单-有许多可证明安全和标准化的协议与有缺陷的方案一样有效。
英文摘要：
A recently proposed authenticated key agreement protocol is shown to be insecure. In particular, one of the two parties is not authenticated, allowing an active man in the middle opponent to replay old messages. The protocol is essentially an authenticated Diffie-Hellman key agreement scheme, and the lack of authentication allows an attacker to replay old messages and have them accepted. Moreover, if the ephemeral key used to compute a protocol message is ever compromised, then the key established using the replayed message will also be compromised. Fixing the problem is simple - there are many provably secure and standardised protocols which are just as efficient as the flawed scheme.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
