Cryptanatysis of two password-authenticated key exchange protocols

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3108, Issue , 2004, Pages 164-175

  Wan, Zhiguo ^a,c   Wang, Shuhong ^b,c  

^a NATIONAL UNIVERSITY OF SINGAPORE   (Singapore)

^b PEKING UNIVERSITY   (China)

^c INSTITUTE FOR INFOCOMM RESEARCH   (Singapore)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; SECURITY OF DATA;

AUTHENTICATION AND KEY EXCHANGE; DICTIONARY ATTACK; LARGE GROUPS; OFF-LINE DICTIONARY ATTACKS; PASSWORD AUTHENTICATED KEY EXCHANGE PROTOCOLS;

AUTHENTICATION;

EID: 35048901616     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-27800-9_15     Document Type: Article

References (26)

1. R. Anderson and S. Vaudenay, Minding Your p's and q's, Advaces in Cryptology - ASIACRYPT'96, LNCS 963, pages 236-247, Springer-Verlag, 1995.
2. F. Bao, Security Analysis of a Password Authenticated Key Exchange Protocol, Proceedings of ISC 2003, 2003.
3. D. Bleichenbacher, Generating ElGamal Signatures without Knowing the Secret, Advances in Cryptology - EUROCRYPT'96, LNCS 1070, pages 10-18, Springer-Verlag, 1996.
4. S. Bellovin and M. Merritt, Encrypted Key Exchange: Password-based Protocols Secure Against Dictionary Attacks, Proceedings of IEEE Symposium on Security and Privacy, pages 72-84, 1992.
5. S. Bellovin and M. Merritt, Augumented Encrypted Key Exchange: A Password-based Protocol Secure Against Dictionary Attacks and Password File Compromise. Proceedings of CCS'93, pages 244-250, 1993.
6. V. Boyko, P. MacKenzie, and S. Patel, Provably-secure Password Anthentiation and Key Exchange Using Diffie-Hellman. EUROCRYPT 2000, pages 156-171.
7. L. Gong, Optimal Authentication Protocols Resistant to Password Guessing Attacks. 8th IEEE Computer Security Foundations Workshop, pages 24-29, 1995.
8. Y. H. Hwang, D. H. Yum, and P. J. Lee, EPA: An Efficient Password-Based Protocol for Authenticated Key Exchange, ACISP 2003, LNCS 2727, Springer-Verlag Berlin Heidelberg 2003, pages 452-463, 2003.
9. D. Jablon, Strong Password-Only Authenticated Key Exchange, ACM Computer Communications Review, vol.26, no.5, 1996.
10. T. Kwon, Authentication and Key Agreement via Memorable Password, Proceedings of the ISOC NDSS Symposium, 2001.
11. T. Kwon, Summary of AMP, Contribution for the P1363 standard, available at http://grouper.ieee.org/groups/1363/passwdPK/contributions/ampsummary.pdf, August 2003.
12. T. Kwon, Addendum to Summary of AMP, Contribution for the P1363 standard, available at http://grouper.ieee.org/groups/1363/passwdPK/contributions/ ampsummary2.pdf, November 2003.
13. C. H. Lim and P. J. Lee, A Key Recovery Attack on Discrete Log-based Schemes Using a Prime Order Subgroup, Burton S. Kaliski Jr(Ed.), Advances in Cryptology - CRYPTO '97, LNCS 1294, Springer-Verlag, pages 249-263, 1997.
14. S. Lucks, Open Key Exchange: How to Defeat Dictionary Attacks Without Encrypting Public Keys, Proceedings of Security Protocols Workshop, LNCS 1361, pages 79-90, Springer-Verlag, 1997.
15. P. MacKenzie, S. Patel, and R. Swaminathan, Password-Authenticated Key Exchange Based on RSA, Proceedings of AsiaCrypt 2000, pages 599-613, LNCS, Springer-Verlag, 2000.
16. P. MacKenzie, The PAK Suite: Protocols for Password-Authenticated Key Exchange, Submission to IEEE P1363.2, April 2002.
17. P. MacKenzie, More Efficient Password-Authenticated Key Exchange, Progress in Cryptology - CT-RSA 2001, pages 361-377, 2001.
18. n, Advances in Cryptology-ASIACRYPT'98, LNCS 1514, Spinger-Verlag, 1998, pp.214-226.
19. S. Patel, Number Theoretic Attacks on Secure Password Schemes, Proceedings of IEEE Symposium on Research in Security and Privacy, pages 236-247, 1997.
20. C. Pavlovski and C. Boyd, Attacks Based on Small Factors in Various Group Structures, ACISP 2001, LNCS 2119, pages 36-50, 2001.
21. S. Pohlig and M. Hellman, An Improved Algorithm for Computing Logarithms over GF(p) and Its Cryptographic Significance, IEEE Transactions on Information Theory, vol 24, no 1, pages 106-110, 1978.
22. J. M.Pollard, Monte Carlo Methods for Index Computation (mod p), Math. Comp., 32(143), pages. 918-924, 1978.
23. P. C. van Oorschot and M. Wiener, On Diffie-Hellman Key Agreement with Short Exponents, EUROCRYPT'96 LNCS 1070, pages 332-343, 1996.
24. S. Vaudenay, Hidden Collisions on DSS, Advances in Cryptology - CRYPTO'96, LNCS 1109, pages 83-88, Springer-Verlag, 1996.
25. T. Wu, Secure Remote Password Protocol, ISOC Network and Distributed System Security Symposium, 1998.
26. F. Zhu, D. S. Wong, A. H. Chan, and R. Ye, Password authenticated key exchange based on RSA for unbalanced wireless networks, Proceedings of ISC 2002, LNCS 2433, pp. 150-161, Springer-Verlag, 2002.