{"id":"https://openalex.org/W7160333075","doi":"https://doi.org/10.1109/tnsm.2026.3690530","title":"An Improved and Provably Secure EDHOC Protocol Supporting the Extended Canetti\u2013Krawczyk (eCK) Security Model","display_name":"An Improved and Provably Secure EDHOC Protocol Supporting the Extended Canetti\u2013Krawczyk (eCK) Security Model","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7160333075","doi":"https://doi.org/10.1109/tnsm.2026.3690530"},"language":null,"primary_location":{"id":"doi:10.1109/tnsm.2026.3690530","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2026.3690530","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078852484","display_name":"Awaneesh Kumar Yadav","orcid":"https://orcid.org/0000-0002-2924-0361"},"institutions":[{"id":"https://openalex.org/I56404289","display_name":"Indian Institute of Technology BHU","ror":"https://ror.org/01kh5gc44","country_code":"IN","type":"education","lineage":["https://openalex.org/I56404289","https://openalex.org/I91357014"]},{"id":"https://openalex.org/I91357014","display_name":"Banaras Hindu University","ror":"https://ror.org/04cdn2797","country_code":"IN","type":"education","lineage":["https://openalex.org/I91357014"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Awaneesh Kumar Yadav","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology (BHU) Varanasi (IIT BHU), Varanasi, Uttar Pradesh, India"],"raw_orcid":"https://orcid.org/0000-0002-2924-0361","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology (BHU) Varanasi (IIT BHU), Varanasi, Uttar Pradesh, India","institution_ids":["https://openalex.org/I56404289","https://openalex.org/I91357014"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135412967","display_name":"Madhusanka Liyanage","orcid":"https://orcid.org/0000-0003-4786-030X"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Madhusanka Liyanage","raw_affiliation_strings":["Network Softwarization and Security Laboratory (NetsLab), School of Computer Science, University College Dublin, Dublin 4, Ireland"],"raw_orcid":"https://orcid.org/0000-0003-4786-030X","affiliations":[{"raw_affiliation_string":"Network Softwarization and Security Laboratory (NetsLab), School of Computer Science, University College Dublin, Dublin 4, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5135392376","display_name":"An Braeken","orcid":"https://orcid.org/0000-0002-9965-915X"},"institutions":[{"id":"https://openalex.org/I13469542","display_name":"Vrije Universiteit Brussel","ror":"https://ror.org/006e5kg04","country_code":"BE","type":"education","lineage":["https://openalex.org/I13469542"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"An Braeken","raw_affiliation_strings":["ETRO.RDI, Vrije Universiteit Brussel, Ixelles, Belgium"],"raw_orcid":"https://orcid.org/0000-0002-9965-915X","affiliations":[{"raw_affiliation_string":"ETRO.RDI, Vrije Universiteit Brussel, Ixelles, Belgium","institution_ids":["https://openalex.org/I13469542"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.53772373,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":null,"first_page":"4724","last_page":"4736"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.5376999974250793,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.5376999974250793,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11498","display_name":"Security in Wireless Sensor Networks","score":0.13210000097751617,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.09610000252723694,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.5591999888420105},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.5189999938011169},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.4936999976634979},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.34630000591278076},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.33899998664855957},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.31119999289512634},{"id":"https://openalex.org/keywords/data-security","display_name":"Data security","score":0.30149999260902405},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.2849999964237213}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8367999792098999},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5627999901771545},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.5591999888420105},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5189999938011169},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.4936999976634979},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38420000672340393},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.34630000591278076},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.33899998664855957},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3240000009536743},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.31119999289512634},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.30149999260902405},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2849999964237213},{"id":"https://openalex.org/C104954878","wikidata":"https://www.wikidata.org/wiki/Q1648707","display_name":"Routing protocol","level":3,"score":0.2827000021934509},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.28220000863075256},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2809999883174896},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2784000039100647},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.27799999713897705},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.275299996137619},{"id":"https://openalex.org/C165751822","wikidata":"https://www.wikidata.org/wiki/Q7894118","display_name":"Universal composability","level":4,"score":0.2696000039577484},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.2662999927997589},{"id":"https://openalex.org/C130881749","wikidata":"https://www.wikidata.org/wiki/Q586894","display_name":"Security association","level":5,"score":0.26429998874664307},{"id":"https://openalex.org/C107645828","wikidata":"https://www.wikidata.org/wiki/Q12070446","display_name":"System model","level":2,"score":0.26269999146461487},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.259799987077713},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.25459998846054077}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2026.3690530","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2026.3690530","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2893603412","display_name":null,"funder_award_id":"P4023","funder_id":"https://openalex.org/F4320330412","funder_display_name":"Scheme for Promotion of Academic and Research Collaboration"},{"id":"https://openalex.org/G8802863952","display_name":null,"funder_award_id":"ANRF/ECRG/2024/001438/ENS","funder_id":"https://openalex.org/F4320320671","funder_display_name":"National Research Foundation"}],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"},{"id":"https://openalex.org/F4320330412","display_name":"Scheme for Promotion of Academic and Research Collaboration","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Transport":[0],"Layer":[1],"Security":[2,43],"(TLS)":[3],"is":[4,30,66,79,109,128,145,215],"considered":[5],"to":[6,35,71,121,147,190,203,217],"be":[7],"the":[8,15,57,82,91,96,102,173,193,205,208,219,223],"most":[9],"used":[10,76,114],"standard":[11],"security":[12,106,112,175,206],"protocol":[13,40,70,98],"for":[14,26,44,52,157],"Internet":[16],"of":[17,84,95,124,139,207,222],"Things":[18],"(IoT).":[19],"However,":[20],"as":[21],"TLS":[22],"was":[23],"originally":[24],"designed":[25,209,224],"computer":[27],"networks,":[28],"it":[29],"not":[31],"optimal":[32],"with":[33],"respect":[34],"efficiency.":[36],"Therefore,":[37],"a":[38,67,73,110,153,212],"new":[39,137],"called":[41],"Object":[42],"Constrained":[45],"RESTful":[46],"Environments":[47],"(OSCORE)":[48],"has":[49,152],"been":[50],"standardized":[51],"securing":[53],"constrained":[54],"devices.":[55],"Currently,":[56],"Ephemeral":[58],"Diffie":[59],"Hellman":[60],"Over":[61],"COSE":[62],"(EDHOC)":[63],"protocol,":[64],"which":[65,108],"key":[68,75],"exchange":[69],"define":[72],"session":[74],"in":[77,81,101,115,172,185],"OSCORE,":[78],"also":[80,119],"process":[83],"being":[85],"standardized.":[86],"This":[87],"paper":[88],"shows":[89],"that":[90],"four":[92],"authentication":[93,187],"modes":[94],"EDHOC":[97],"are":[99,201],"vulnerable":[100],"extended":[103],"Canetti\u2013Krawczyk":[104],"(eCK)":[105],"model,":[107],"common":[111],"model":[113,176],"IoT.":[116],"In":[117],"addition,":[118],"resistance":[120],"Distributed":[122],"Denial":[123],"Service":[125],"(DDoS)":[126],"attacks":[127],"weak.":[129],"Taking":[130],"this":[131],"into":[132],"account,":[133],"we":[134],"propose":[135],"two":[136],"variants":[138],"EDHOC.":[140,191],"The":[141,164],"first":[142],"variant,":[143,166],"EDHOC2,":[144],"able":[146],"overcome":[148],"both":[149],"issues":[150],"but":[151],"slightly":[154],"higher":[155],"cost":[156],"communication,":[158],"computation,":[159],"storage,":[160],"and":[161,177,197],"energy":[162],"consumption.":[163],"second":[165],"EDHOC3,":[167],"offers":[168],"only":[169],"additional":[170],"protection":[171],"eCK":[174],"has,":[178],"on":[179],"average,":[180],"similar,":[181],"even":[182],"better":[183],"performance":[184],"one":[186],"mode,":[188],"compared":[189],"Additionally,":[192],"Real-Or-Random":[194],"(ROR)":[195],"logic":[196],"Scyther":[198],"validation":[199],"tool":[200],"employed":[202],"ensure":[204],"variants.":[210],"Furthermore,":[211],"prototype":[213],"implementation":[214],"conducted":[216],"demonstrate":[218],"real-time":[220],"deployment":[221],"versions.":[225]},"counts_by_year":[],"updated_date":"2026-05-30T06:14:24.967023","created_date":"2026-05-06T00:00:00"}