0
$\begingroup$

I'm looking for the ability to create a SINGLE CONSTANT shared secret amongst two or more users (a group) AND if a new user is added to such a secured group the new user should also be able to learn the already known and shared secret without the existing users needing to resend any new data or changing the common secret. The new user should only require ONE received piece of data such as with standard Diffie Hellman.

This can be a key exchange method or anything else that would not be compromised with a MiTM attack. The shared secret can result in an encryption key or can just be, a shared secret- if that's even possible.

What I'm trying to do is have a common group secret for a final layer of password-enabled AES that all group members can access. I already know of, and am implementing hybrid encryption/key exchanging. I want ANOTHER layer of security. Hybrid is great, however, eventually quantum will break asymmetric, that is why I want a final AES layer.

If you post an algorithm please make it as simple as your level of profession will allow, or even simpler.

Acknowledge, these resources come very close to what I need but as far as I know they don't satisfy what I'm trying to do & the reason they don't satisfy is my requirement above for new users added to the secured group.

Multi-party key agreement
Can one generalize the Diffie-Hellman key exchange to three or more parties?

$\endgroup$
3
  • 2
    $\begingroup$ You say "Hybrid is great, however, eventually quantum will break asymmetric, that is why I want a final AES layer." There are quantum resilient asymmetric schemes. Moreover, if you're interested in security against quantum attacks, grover will halve AES bitlength $\endgroup$
    – kodlu
    Jun 1 at 7:44
  • 2
    $\begingroup$ And a fixed constant secret is hard to protect against passive eavesdropping type of attacks $\endgroup$
    – kodlu
    Jun 1 at 7:44
  • 1
    $\begingroup$ Thanks for the input Kodlu, I’ve concluded something like this is probably not possible at this time. Also there are no quantum resistant libraries in the languages im using. I do think something like this should be valuable (if it’s mathematically possible). $\endgroup$
    – RobbB
    Jun 1 at 13:02

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy