Efficient and provably secure client-to-client password-based key exchange protocol

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3841 LNCS, Issue , 2006, Pages 830-836

  Byun, Jin Wook ^a   Lee, Dong Hoon ^a   Lim, Jong In ^a  

^a Korea University   (South Korea)

Author keywords

Authenticated key exchange; Dictionary attacks; Different password authentication; Human memorable password; Mobile computing

Indexed keywords

CLIENT SERVER COMPUTER SYSTEMS; COMPUTATION THEORY; DATA TRANSFER; DECISION THEORY; MATHEMATICAL MODELS;

AUTHENTICATED KEY EXCHANGE; DICTIONARY ATTACKS; DIFFERENT PASSWORD AUTHENTICATION; HUMAN MEMORABLE PASSWORD;

NETWORK PROTOCOLS;

EID: 33745677007     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11610113_81     Document Type: Conference Paper

References (19)

1. M. Abdalla, P. Fouque, and D. Pointcheval, "Password-Based Authenticated Key Exchange in the Three-Party Setting", In Proceedings of PKC 2005, LNCS Vol. 3386, pp. 65-84, Springer-Verlag, 2005.
2. M. Bellare, D. Pointcheval, and P. Rogaway, "Authenticated key exchange secure against dictionary attacks", In Proceedings of Eurocrypt'00, LNCS Vol.1807, pp. 139-155, Springer-Verlag, 2000.
3. S. Bellovin and M. Merrit, "Encrypted key exchange: password based protocols secure against dictionary attacks", In Proceedings of the Symposium on Security and Privacy, pp.72-84, IEEE, 1992.
4. E. Bresson, O. Chevassut, and D. Pointcheval, "Group diffie-hellman key exchange secure against dictionary attacks", In Proceedings of Asiacrypt'02, LNCS Vol. 2501, pp. 497-514, Springer-Verlag, 2002.
5. V. Boyko, P. MacKenzie, and S. Patel, "Provably secure password-authenticated key exchange using diffie-hellman", In Proceedings of Eurocrypt'00, LNCS Vol. 1807, pp. 156-171, Springer-Verlag, 2000
6. J. W. Byun, I. R. Jeong, D. H. Lee, and C. Park, "Password- authenticated key exchange between clients with different passwords", In Proceedings of ICICS'02, LNCS Vol. 2513, pp. 134-146, Springer-Verlag, 2002.
7. J. W. Byun and D. H. Lee, "N-party Encrypted Diffie-Hellman Key Exchange Using Different Passwords", In Proc. of ACNS05', LNCS Vol. 3531, page 75-90, Springer-Verlag, 2005.
8. J. W. Byun, D. H. Lee, and J. Lim "Password-Based Group Key Exchange Secure Against Insider Guessing Attacks", In Proc. of CIS 05', LNAI Vol. 3802, page 143-148, Springer-Verlag, 2005.
9. J. W. Byun, D. H. Lee, and J. Lim, "Efficient and Provably Secure Client-to-Client Password-based Key Exchange Protocol", A full paper is availabe at http://cist.korea.ac.kr or http://cist.korea.ac.kr/~byunstar.
10. L. Chen, "A weakness of the password-authenticated key agreement between clients with different passwords scheme", ISO/IEC JTC 1/SC27 N3716.
11. J. Katz, R. Ostrovsky, and M. Yung, "Efficient password- authenticated key exchange using uuman-memorable passwords", In Proceedings of Eurocrypt'01, LNCS Vol. 2045, pp. 475-494, Springer-Verlag, 2001.
12. J. Kim, S. Kim, J. Kwak, and D. Won, "Cryptoanalysis and improvements of password authenticated key exchange scheme between clients with different passwords", In Proceedings of ICCSA 2004, LNCS Vol. 3044, pp. 895-902, Springer-Verlag, 2004.
13. J. H. Koo and D. H. Lee, "Secure Password Pocket for Distributed Web Services", In Proc. of NPC 2005, LNCS Vol. 3779, pp. 327-334, Springer-Verlag, 2005.
14. C. Lin, H. Sun, and T. Hwang, "Three-party encrypted key exchange: attacks and a solution", ACM Operating Systems Review, Vol. 34, No. 4, pp. 12-20, 2000.
15. C. Lin, H. Sun, M. Steiner, and T. Hwang, "Three-party encrypted key exchange without server public-keys", IEEE Communications Letters, Vol. 5, No. 12, pp. 497-499, IEEE Press, 2001.
16. R. C.-W. Phan and B. Goi, "Cryptanalysis of an Improved Client-to-Client Password-Authenticated Key Exchange (C2C-PAKE) Scheme", In Proceedings of ACNS 2005, LNCS Vol. 3531, pp. 33-39, Springer-Verlag, 2005.
17. M. Steiner, G. Tsudik, and M. Waider, "Refinement and extension of encrypted key exchange", In ACM Operation Sys. Review, Vol. 29, No. 3, pp. 22-30, 1995.
18. S. Wang, J. Wang, and M. Xu, "Weakness of a password-authenticated key exchange protocol between clients with different passwords", In Proceedings of ACNS 2004, LNCS Vol. 3089, pp. 414-425, Springer-Verlag, 2004.
19. T. Wu, "Secure remote password protocol", In Proceedings of the Internet Society Network and Distributed System Security Symposium, pp. 97-111, 1998.