A compiler is presented which, in the random oracle model, allows to add perfect forward secrecy to any secure authenticated group key establishment protocol P which has at least one round. The com- piler does not modify the session identifier and does not impose changes on the underlying public key infrastructure. Building on a secure unau- thenticated 1-round 2-party key establishment Q with perfect forward secrecy as auxiliary input, P is transformed into an authenticated group key establishment protocol with perfect forward secrecy and with one more round than P.
['Kashi Neupane', 'Rainer Steinwandt', 'Adriana Suárez Corona']
Group Key Establishment: Adding Perfect Forward Secrecy at the Cost of One Round