Certificate-based authenticated key agreement protocols

In this paper, the problem of establishing a shared session key in an authenticated way is addressed. New key agreement protocols that support explicit authentication are proposed. The protocols are designed in such a way that permits a trusted third party, such as a firewall, to verify the identities of the parties involved in a key agreement session. This is of course to reduce the computational burden at the end-user side, which can be a device with limited capabilities. The security properties of the proposed protocols are analyzed revealing the strength of these protocols promoting their use in practical scenarios such as in mobile communications.