Additional Diffie-Hellman Groups for Use with IETF Standards

Key words for use in RFCs to Indicate Requirement Levels

Bradner, S. O. (1997) · doi:10.17487/rfc2119 · Cited by 3,309

The Transport Layer Security (TLS) Protocol Version 1.1

Dierks, T., & Rescorla, E. K. (2006) · doi:10.17487/rfc4346 · Cited by 2,309

The Internet Key Exchange (IKE)

Harkins, D., & Carrel, D. (1998) · doi:10.17487/rfc2409 · Cited by 1,030

Internet Key Exchange (IKEv2) Protocol

Kaufman, C. (2005) · doi:10.17487/rfc4306 · Cited by 693

Recommendation for key management, part 1 :

Barker, E. B., Barker, W. C., Burr, W. E., Polk, W. T., & Smid, M. E. (2007) · doi:10.6028/nist.sp.800-57p1r2007 · Cited by 461

The Secure Shell (SSH) Transport Layer Protocol

Ylönen, T. (2006) · doi:10.17487/rfc4253 · Cited by 318

Diffie-Hellman Key Agreement Method

Rescorla, E. K. (1999) · doi:10.17487/rfc2631 · Cited by 298

Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS)

Blake-Wilson⋆⋆, S., Bolyard, N., Gupta, V., Hawk, C., & Moeller, B. (2006) · doi:10.17487/rfc4492 · Cited by 169

More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key Exchange (IKE)

Kivinen, T., & Kojo, M. (2003) · doi:10.17487/rfc3526 · Cited by 111

Recommendation for pair-wise key establishment schemes using discrete logarithm cryptography

Barker, E. B., Chen, L., Regenscheid, A., & Smid, M. E. (2009) · doi:10.6028/nist.sp.800-56b · Cited by 92

IP Security (IPsec) and Internet Key Exchange (IKE) Document Roadmap

Frankel, S. E., & Krishnan, S. (2011) · doi:10.17487/rfc6071 · Cited by 187

Dragonblood: Analyzing the Dragonfly Handshake of WPA3 and EAP-pwd

Vanhoef, M., & Ronen, E. (2020) · 2020 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp40000.2020.00031 · Cited by 179

ZRTP: Media Path Key Agreement for Unicast Secure RTP

Zimmermann, P. R., & Callas, J. (2011) · doi:10.17487/rfc6189 · Cited by 113

Recommendation for Key Management Part 3: Application-Specific Key Management Guidance

Barker, E. B., & Dang, Q. H. (2015) · doi:10.6028/nist.sp.800-57pt3r1 · Cited by 96

Fundamental Elliptic Curve Cryptography Algorithms

McGrew, D., Igoe, K., & Salter, M. (2011) · doi:10.17487/rfc6090 · Cited by 81

Enhanced Security and Privacy via Fragmented Federated Learning

Jebreel, N., Domingo‐Ferrer, J., Blanco-Justicia, A., & Sánchez, D. (2022) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2022.3212627 · Cited by 50

Efficient Augmented Password-Only Authentication and Key Exchange for IKEv2

Shin, S., & Kobara, K. (2012) · doi:10.17487/rfc6628 · Cited by 43

Verifiable Random Functions (VRFs)

Goldberg, S., Reyzin, L., Papadopoulos, D., & Včelák, J. (2023) · doi:10.17487/rfc9381 · Cited by 43

A Kilobit Hidden SNFS Discrete Logarithm Computation

Fried, J., Gaudry, P., Heninger, N., & Thomé, E. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-56620-7_8 · Cited by 39

Elliptic Curve Digital Signature Algorithm (DSA) for DNSSEC

Hoffman, P., & Wijngaards, W. C. A. (2012) · doi:10.17487/rfc6605 · Cited by 34

An efficient approach for secure multi-party computation without authenticated channel

Vu, D.-H., Luong, T. D., & Ho, T.-B. (2019) · Information Sciences · doi:10.1016/j.ins.2019.07.031 · Cited by 33

Guide to IPsec VPNs

Barker, E. B., Dang, Q. H., Frankel, S. E., Scarfone, K. A., & Wouters, P. (2020) · doi:10.6028/nist.sp.800-77r1 · Cited by 33

Authenticall: efficient identity and content authentication for phone calls

Reaves, B., Blue, L., Abdullah, H., Vargas, L., Traynor, P., & Shrimpton, T. (2017) · USENIX Security Symposium · Cited by 23

In Search of CurveSwap: Measuring Elliptic Curve Implementations in the Wild

Valenta, L., Sullivan, N., Sanso, A., & Heninger, N. (2018) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp.2018.00034 · Cited by 22

Extensible Authentication Protocol (EAP) Authentication Using Only a Password

Harkins, D., & Zorn, G. (2010) · doi:10.17487/rfc5931 · Cited by 21

Prime and Prejudice

Albrecht, M. R., Massimo, J., Paterson, K. G., & Somorovsky, J. (2018) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3243734.3243787 · Cited by 18

A Privacy Preserving Application Acquisition Protocol

Akram, R. N., Markantonakis, K., & Mayes, K. E. (2012) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom.2012.47 · Cited by 13

A Secure and Trusted Channel Protocol for the User Centric Smart Card Ownership Model

Akram, R. N., Markantonakis, K., & Mayes, K. E. (2013) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom.2013.245 · Cited by 12

ACE of Spades in the IoT Security Game: A Flexible IPsec Security Profile for Access Control

Aragon, S., Tiloca, M., Maaß, M., Hollick, M., & Raza, S. (2018) · IEEE Conference on Communications and Network Security · doi:10.1109/cns.2018.8433209 · Cited by 11

Recovering from a lost digital wallet: A smart cards perspective extended abstract

Akram, R. N., Markantonakis, K., & Sauveron, D. (2015) · Pervasive and Mobile Computing · doi:10.1016/j.pmcj.2015.06.018 · Cited by 11

PIONEER—a Prototype for the Internet of Things Based on an Extendable EPC Gen2 RFID Tag

Groß, H., Wenger, E., Martín, H., & Hutter, M. (2014) · Lecture notes in computer science · doi:10.1007/978-3-319-13066-8_4 · Cited by 10

Coopetitive Architecture to Support a Dynamic and Scalable NFC Based Mobile Services Architecture

Akram, R. N., Markantonakis, K., & Mayes, K. E. (2012) · Lecture notes in computer science · doi:10.1007/978-3-642-34129-8_19 · Cited by 8

Remote Attestation Mechanism for User Centric Smart Cards Using Pseudorandom Number Generators

Akram, R. N., Markantonakis, K., & Mayes, K. E. (2013) · Lecture notes in computer science · doi:10.1007/978-3-319-02726-5_12 · Cited by 8

High-Level Cryptographic Abstractions

Kane, C., Lin, B., Chand, S., Stoller, S. D., & Liu, Y. A. (2019) · doi:10.1145/3338504.3357343 · Cited by 8

A Comparison of Internet Protocol (IPv6) Security Guidelines

Hermann, S., & Fabian, B. (2014) · Future Internet · doi:10.3390/fi6010001 · Cited by 8

Recovering from a Lost Digital Wallet

Akram, R. N., Markantonakis, K., & Mayes, K. E. (2013) · doi:10.1109/hpcc.and.euc.2013.227 · Cited by 8

Applied Crypto Hardening

Breyha, W., Durvaux, D., Dussa, T., Kaplan, L. A., Mendel, F., Mock, C., Koschuch, M., Kriegisch, A., Sabet, R., Schlatterbeck, R., et al. (2014) · Cited by 6

Making Password Authenticated Key Exchange Suitable for Resource-Constrained Industrial Control Devices

Haase, B., & Labrique, B. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-66787-4_17 · Cited by 6

UnLinked

Faber, S., Petrlic, R., & Tsudik, G. (2015) · ACM Workshop on Privacy in the Electronic Society (WPES) · doi:10.1145/2808138.2808149 · Cited by 5

Reconfigurable Architecture to Speed-up Modular Exponentiation

Venkatesh, K., Pratibha, K., Annadurai, S., & Kuppusamy, L. (2019) · IEEE International Carnahan Conference on Security Technology (ICCST) · doi:10.1109/ccst.2019.8888401 · Cited by 5

Cross-Platform Application Sharing Mechanism

Akram, R. N., Markantonakis, K., & Mayes, K. E. (2011) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom.2011.77 · Cited by 4

D(HE)at: A Practical Denial-of-Service Attack on the Finite Field Diffie–Hellman Key Exchange

Pfeiffer, S., & Tihanyi, N. (2023) · IEEE Access · doi:10.1109/access.2023.3347422 · Cited by 4

pwdArmor: Protecting Conventional Password-Based Authentications

Seamons, K. E., & van der Horst, T. W. (2008) · Annual Computer Security Applications Conference · doi:10.1109/acsac.2008.46 · Cited by 4

HyperDegrade: From GHz to MHz Effective CPU FrequenciesPreprint

Aldaya, A. C., & Brumley, B. B. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2101.01077 · Cited by 4

An efficient privacy-preserving recommender system based on elliptic curve

Luong, T. D., & Vu, T. V. A. (2025) · Annals of Operations Research · doi:10.1007/s10479-025-06515-w · Cited by 3

AuthentiSafe: Lightweight and Future-Proof Device-to-Device Authentication for IoT

Petzi, L., Krauß, T., Dmitrienko, A., & Tsudik, G. (2025) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3708821.3710831 · Cited by 2

CPU-side comparison for Key Agreement between Tree Parity Machines and standard Cryptographic Primitives

Lofù, D., Gennaro, P. D., Sorino, P., Noia, T. D., & Sciascio, E. D. (2022) · International Conference on Dependable Systems, Services and Technologies (DESSERT) · doi:10.1109/dessert58054.2022.10018797 · Cited by 2

The ECTLC-Horcrux Protocol for Decentralized Biometric-Based Self-Sovereign Identity with Time-Lapse Encryption

Kaziyeva, N., Ospanov, R. M., Issayev, N., Maulenov, K. S., & Seilov, S. (2025) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2025.0160825 · Cited by 1

Efficient and secure multiparty summation without semi-honest third-party

Liu, Z., Li, F., Han, M., & Zhu, S. (2025) · Computer Networks · doi:10.1016/j.comnet.2025.111690 · Cited by 1

Mistakes of a Popular Protocol Calculating Private Set Intersection and Union Cardinality and its Corrections

Tan, Y., & Lv, B. (2022) · International Conference on Artificial Intelligence and Machine Learning (CAIML) · doi:10.5121/csit.2022.121209 · Cited by 1

An Elliptic Curve-Based Privacy-Preserving Recommender System

Vu, T. V. A., & Dung, L. T. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-46781-3_28 · Cited by 1

Guide to IPsec VPNsPreprint

(2019) · doi:10.6028/nist.sp.800-77r1-draft · Cited by 1

On the security of authentication protocols on the web

Delignat-Lavaud, A. (2016) · theses.fr (ABES) · doi:10.70675/02e964afz3bb1z45dbz99a4z982ee83ecc25 · Cited by 1

Efficient implementation of Diffie-Hellman (DH) key distribution algorithm in pool-based cryptographic systems (PBCSs)

Toyran, M., & Berber, S. (2009) · doi:10.1109/eleco.2009.5355353

IPsec and IKEv2 for the Contiki Operating System

Jutvik, V. (2014) · KTH Publication Database DiVA (KTH Royal Institute of Technology)

ON END-TO-END ENCRYPTION FOR CLOUD-BASED SERVICES

Majumdar, S. (2014) · Spectrum Research Repository (Concordia University)

Bibliography

Perez, A. (2014) · Network Security · doi:10.1002/9781119043942.biblio

Artificial Intelligence and Machine Learning

(2022) · doi:10.5121/csit.2022.1212

DDFL: dual defense against poisoning attacks in privacy-preserving federated learning

Guo, C., Tian, M., Li, X., Sun, H., & Jie, Y. (2026) · Neural Networks · doi:10.1016/j.neunet.2026.109095

Convenient decentralized authentication using passwords

Seamons, K. E., & van der Horst, T. W. (2010)

Additional Diffie-Hellman Groups for Use with IETF Standards", RFC 5114

Lepinski, M., & Kent, S. (2008)

More Modular Exponential (MODP) Diffie-Hellman groups for Internet Key Exchange (IKE)

Kivinen, T., & Kojo, M. (2003) · doi:10.17487/rfc3526 · Cited by 111

Separating Decision Diffie-Hellman from Diffie-Hellman in cryptographic groups.

Joux, A., & Nguyen, K. T. (2001) · Cited by 143

A practical analysis for dynamic group diffie - hellman key exchange

Majeed, A. A. M. (2009)

Diffie-Hellman Group Exchange for the Secure Shell (SSH) Transport Layer Protocol

Friedl, M., Provos, N., & Simpson, W. (2006) · doi:10.17487/rfc4419 · Cited by 17