Security Weakness of Flexible Group Key Exchange with On-Demand Computation of Subgroup Keys

Qingfeng Cheng, Chuangui Ma

In AFRICACRYPT 2010, Abdalla et al. first proposed a slight modification to the computations steps of the BD protocol, called mBD+P. Then they extended mBD+P protocol into mBD+S pr…