{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T05:29:07Z","timestamp":1781155747304,"version":"3.54.1"},"reference-count":46,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2014,1,1]],"date-time":"2014-01-01T00:00:00Z","timestamp":1388534400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2014,1]]},"DOI":"10.1109\/tifs.2013.2293457","type":"journal-article","created":{"date-parts":[[2014,1,6]],"date-time":"2014-01-06T17:21:03Z","timestamp":1389028863000},"page":"125-140","source":"Crossref","is-referenced-by-count":32,"title":["Privacy-Preserving Authenticated Key-Exchange Over Internet"],"prefix":"10.1109","volume":"9","author":[{"given":"Andrew Chi-Chih","family":"Yao","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yunlei","family":"Zhao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-37119-6_24"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/972639.972643"},{"key":"ref33","first-page":"549","article-title":"Modular security proofs for key agreement protocols","author":"kudla","year":"0","journal-title":"Proc Asiacrypt 2005"},{"key":"ref32","first-page":"546","article-title":"HMQV: A high-performance secure Diffie-Hellman protocol","author":"krawczyk","year":"0","journal-title":"Proc Crypto 2005"},{"key":"ref31","first-page":"400","article-title":"SIGMA: The ‘SIGn-and-MAc’ approach to authenticated Diffie-Hellman and its use in the IKE-protocols","author":"krawczyk","year":"0","journal-title":"Proc Crypto 2003"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.17487\/rfc2401"},{"key":"ref37","doi-asserted-by":"crossref","DOI":"10.1201\/9781439821916","author":"menezes","year":"1996","journal-title":"Handbook of Applied Cryptography"},{"key":"ref36","first-page":"268","article-title":"Diffie-Hellman oracles","author":"maurer","year":"0","journal-title":"Proc CRYPTO 1996"},{"key":"ref35","author":"mao","year":"2004","journal-title":"Modern Cryptography Theory and Practice"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1023\/A:1022595222606"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/1165555.1165570"},{"key":"ref40","first-page":"111","article-title":"Separating random oracle proofs from complexity theoretic proofs: The non-committing encryption case","author":"nielsen","year":"0","journal-title":"Proc CRYPTO 2002"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/237814.238015"},{"key":"ref12","first-page":"289","article-title":"Analysis of key-exchange protocols and their use for building secure channels","author":"canetti","year":"0","journal-title":"Proc Eurocrypt 2001"},{"key":"ref13","first-page":"143","article-title":"Security analysis of IKE's signature-based key-exchange protocol","author":"canetti","year":"0","journal-title":"Proc CRYPTO 2002"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30598-9_25"},{"key":"ref15","author":"gorantla","year":"2005","journal-title":"A survey on ID-based cryptographic primitives"},{"key":"ref16","author":"cremers","year":"2009","journal-title":"Formally and practically relating the CK CK-HMQV and eCK security models for authenticated key exchange"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-46766-1_36"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102137"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180454"},{"key":"ref28","first-page":"352","article-title":"Beyond secret handshakes: Affiliation-hiding authenticated key agreement","author":"jarecki","year":"0","journal-title":"CT-RSA 2008"},{"key":"ref4","first-page":"213","article-title":"Identity-based encryption from the weil pairing","author":"boneh","year":"0","journal-title":"Proc Crypto 2001"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.17487\/rfc2409"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/168588.168596"},{"key":"ref6","first-page":"248","article-title":"Key agreement using statically keyed authenticators","author":"boyd","year":"0","journal-title":"Proc of ACNS 2004"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.17487\/rfc4306"},{"key":"ref5","first-page":"255","article-title":"Deniable authenticated key establishment for Internet protocols","author":"boyd","year":"0","journal-title":"Proc SPW 2003"},{"key":"ref8","first-page":"373","article-title":"An analysis of the EMV channel establishment protocol","author":"brzuska","year":"0","journal-title":"Proc ACM CCS"},{"key":"ref7","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-662-09527-0","author":"boyd","year":"2003","journal-title":"Protocols for Authentication and Key Establishment"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48329-2_21"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-14623-7_14"},{"key":"ref1","first-page":"452","article-title":"Certificateless public-key cryptography","author":"al-riyami","year":"0","journal-title":"Proc ASIACRYPT 2003"},{"key":"ref46","author":"yao","year":"2011","journal-title":"Deniable Internet Key-Exchange"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1976.1055638"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/11681878_2"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1137\/S0097539795291562"},{"key":"ref21","first-page":"146","article-title":"Composability and on-line deniability of authentication","author":"dodis","year":"0","journal-title":"Proc 2009 TCC"},{"key":"ref42","first-page":"316","author":"pass","year":"0","journal-title":"Proc Crypto 2003"},{"key":"ref24","year":"2000","journal-title":"Digital Signature Standard (DSS)"},{"key":"ref41","first-page":"104","article-title":"The gap-problems: A new class of problems for the security of cryptographic schemes","author":"okamoto","year":"0","journal-title":"Proceedings of PKC 2001"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/276698.276853"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-31410-0_13"},{"key":"ref26","first-page":"321","article-title":"Short pairing-based non-interactive zero-knowledge arguments","author":"groth","year":"0","journal-title":"Proc Asiacrypt 2010"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/1060590.1060670"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/22145.22178"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/6684617\/06678243.pdf?arnumber=6678243","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T16:31:34Z","timestamp":1642005094000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6678243\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,1]]},"references-count":46,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tifs.2013.2293457","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,1]]}}}