Practical authenticated key agreement using passwords

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3225, Issue , 2004, Pages 1-12

  Kwon, Taekyoung ^a  

^a Sejong University   (South Korea)

Author keywords

[No Author keywords available]

Indexed keywords

PUBLIC KEY CRYPTOGRAPHY; SECURITY OF DATA;

AUTHENTICATED KEY AGREEMENT; DESIGN AND IMPLEMENTATIONS; PASSWORD GUESSING ATTACK; PASSWORD-AUTHENTICATED KEY AGREEMENT; PREVENTION METHODS; PROVABLY SECURE; RANDOM ORACLE MODEL; SERVER COMPROMISE;

AUTHENTICATION;

EID: 33750072402     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-30144-8_1     Document Type: Article

References (32)

1. M. Bellare and P. Rogaway, "Entity authentication and key distribution," In Crypto 1993, LNCS 773, pp.232-249, 1993.
2. M. Bellare and P. Rogaway, "Provably secure session key distribution-the three party case," In ACM Symposium on the Theory of Computing, pp.232-249, 1993.
3. M. Bellare, D. Pointcheval and P. Rogaway, "Authenticated key exchange secure against dictionary attack," In Eurocrypt 2000, LNCS 1807, pp.139-155, 2000.
4. M. Bellare and P. Rogaway, "The AuthA protocol for password-based authenticated key exchange," Submission to the IEEE P1363.2 study group, available from http : //www. cs. ucdavis. edu/~rogaway /papers/autha. ps
5. S. Bellovin and M. Merritt, "Encrypted key exchange : password-based protocols secure against dictionary attacks," In IEEE Symposium on Research in Security and Privacy, pp. 72-84, 1992.
6. S. Bellovin and M. Merritt, "Augmented encrypted key exchange: a password-based protocol secure against dictionary attacks and password-file compromise," In ACM Conference on Computer and Communications Security, pp. 244-250, 1993.
7. V. Boyko, P. MacKenzie and S. Patel, "Provably secure password authenticated key exchange using Diffie-Hellman," In Eurocrypt 2000, LNCS 1807, pp.156-171, 2000.
8. E. Bresson, O. Chevassut, and D. Pointcheval, "Security proofs for an efficient password-based key exchange," In ACM Conference on Computer Communications Security, 2003.
9. E. Bresson, O. Chevassut, and D. Pointcheval, "New security results on Encrypted Key Exchange," In International Workshop on Theory and Practice in Public Key Cryptography, LNCS 2947, pp. 145-158, 2004.
10. W. Diffie and M. Hellman, "New directions in cryptography," IEEE Transactions on Information Theory, vol.22, no.6, pp.644-654, November 1976.
11. W. Diffie, P. van Oorschot, and M. Wiener, "Authentication and authenticated key exchanges," Designs, Codes and Cryptography, 2, pp. 107-125, 1992.
12. O. Goldreich and Y. Lindell, "Session-Key Generation Using Human Passwords Only," In Cypto 2001, LNCS 2139, pp.408-432, 2001.
13. IEEE P1363.2, Standard specifications for password-based public key cryptographic techniques, available from http://grouper.ieee.org/groups/1363/, December2002.
14. ISO/IEC WD 11770-4, Information technology - Security techniques - Key management - Part 4: Mechanisms based on weak secrets, ISO/IEC JTC 1/SC 27, November 2003.
15. Phoenix Technologies, Inc., "Research Papers on Strong Password Authentication," available from http://www.integritysciences.com/links. html, 2002.
16. D. Jablon, "Strong password-only authenticated key exchange," ACM Computer Communications Review, vol.26, no.5, pp.5-26, 1996.
17. D. Jablon, "Extended password key exchange protocols," In WETICE Workshop on Enterprise Security, pp.248-255, 1997.
18. J. Katz, R. Ostrovsky, and M. Yung, "Efficient Password- Authenticated Key Exchange Using Human-Memorable Passwords ," In Eurocrypt 2001, LNCS 2045, pp.475-494, 2001.
19. K. Kobara and H. Imai, "Pretty-simple password-authenticated key-exchange protocol proven to be secure in the standard model," IEICE Trans., E85-A(10), pp.2229-2237, 2002.
20. H. Krawczyk, "SIGMA: The 'SINGn-and-MAc' approach to authenticated Diffie-Hellman and its use in the IKE protocols," Advances in Cryptology - CRYPTO 2003. Lecture Notes in Computer Science, Vol. 2729, Springer-Verlag, pp. 400-425, 2003.
21. T. Kwon, "Authentication and key agreement via memorable password," In ISOC Network and Distributed System Security Symposium, February 2001.
22. T. Kwon, "Practical authenticated key agreement using passwords," Full version of this paper, available from http://dasan.sejong. ac.kr/~tkwon/amp.html.
23. C. Lim and P. Lee, "A key recovery attack on discrete log-based schemes using a prime order subgroup," In CRYPTO 97, pp.249-263, 1997.
24. M. Lomas, L. Gong, J. Saltzer, and R. Needham, "Reducing risks from poorly chosen keys," In ACM Symposium on Operating System Principles, pp.14-18, 1989.
25. P. MacKenzie, "More efficient password-authenticated key exchange," In RSA Conference, Cryptographers Track, LNCS 2020, pp.361-377, 2001.
26. P. MacKenzie, "The PAK suite: Protocols for Password-Authenticated Key Exchange," Submission to IEEE P1363.2, April 2002.
27. A. Menezes, P. van Oorschot and S. Vanstone, Handbook of applied cryptography, CRC Press, Inc., pp.517-518, 1997.
28. P. van Oorschot and M. Wiener, "On Diffie-Hellman key agreement with short exponents," In Eurocrypt 96, pp. 332-343, 1996.
29. R. Perlman and C. Kaufman, "PDM: A new strong password-based protocol," In USENIX Security Symposium, pp.313-321, 2001.
30. C. Schnorr, "Efficient identification and signatures for smart cards," In Crypto 89, pp.239-251, 1989.
31. M. Scott, Personal communication, July 2001.
32. T. Wu, "Secure remote password protocol," In ISOC Network and Distributed System Security Symposium, 1998.