Three-party Encrypted Key Exchange: Attacks and a Solution

Operating Systems Review (ACM)

Volumn 34, Issue 4, 2000, Pages 12-20

  Lin, Chun Li ^a   Sun, Hung Min ^a   Hwang, Tzonelih ^a  

^a NONE

Author keywords

[No Author keywords available]

Indexed keywords

EID: 0008145442     PISSN: 01635980     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/506106.506108     Document Type: Article

References (14)

1. W. Diffie and M.E. Hellman, New directions in cryptography, IEEE Trans., IT-22, pp. 644-654, 1976.
2. R. Morris and K. Thompson, Password Security: A Case History, Communications of the ACM, 22(11), pp. 594-597, 1979.
3. S.M. Bellovin and M. Merritt, Encrypted Key Exchange: Password-Based Protocols Secure Against Dictionary Attacks, IEEE Symposium on Research in Security and Privacy, pp. 72-84, 1992.
4. S.M. Bellovin and M. Merritt, Augmented Encrypted Key Exchange: a Password-Based Protocol Secure Against Dictionary Attacks and Password File Compromise, ACM Conf. Comp. and Comm. Security, pp. 244-250, 1993.
5. L. Gong, M. Lomas, R. Needham and J. Saltzer, Protecting Poorly Chosen Secrets from Guessing Attacks, IEEE Journal on Selected Areas in Communications, 11(5), pp. 648-656, 1993.
6. Y. Ding and P. Horster, Undetectable On-line Password Guessing Attacks, ACM Operating Systems Review, 29(4), pp. 77-86, 1995.
7. L. Gong, Optimal Authentication Protocols Resistant to Password Guessing Attacks, Proceedings of the 8th IEEE Computer Security Foundation Workshop, pp. 24-29, 1995.
8. M. Steiner, G. Tsudik and M. Waidner, Refinement and Extension of Encrypted Key Exchange, ACM Operating Systems Review, 29(3), pp. 22-30, 1995.
9. D. Jablon, Strong Password-Only Authenticated Key Exchange, ACM Computer Communications Review, 20(5), pp. 5-26, 1996.
10. B. Jaspan, Dual-workfactor Encrypted Key Exchange: Efficiently Preventing Password Chaining and Dictionary Attacks, Proceedings of the Sixth Annual USENIX Security Conference, pp. 43-50, 1996.
11. T. Kwon, M. Kang and J. Song, An Adaptable and Reliable Authentication Protocol for Communication Networks, Proceedings of IEEE INFOCOM'97, pp. 737-744, 1997.
12. T. Wu, The Secure Remote Password Protocol, Internet Society Symposium on Network and Distributed System Security, 1998.
13. T. Kwon, M. Kang, S. Jung and J. Song, An Improvement of the Password-Based Authentication protocol (K1P) on Security against Replay Attacks, IEICE Trans. Commun., E82-B(7), pp. 991-997, 1999.
14. xy via Password Authentication, Electronics Letters, 35(11), pp. 892-893, 1999.