The rigorous security of Okamoto-Tanaka identity-based key exchange scheme
has been open for a decade. In this paper, we show that (1) breaking the sc
heme is equivalent to breaking the Diffie-Hellman key exchange scheme over
Z(n), and (2) impersonation is easier than breaking. The second result is o
btained by proving that breaking the RSA public-key cryptosystem reduces to
breaking the Diffie-Hellman scheme over Z(n) with respect to the polynomia
l-time many-one reducibility.