Provably secure password-based three-party key exchange with optimal message steps

Computer Journal

Volumn 52, Issue 6, 2009, Pages 646-655

  Chien, Hung Yu ^a   Wu, Tzong Chen ^b  

^a NATIONAL CHI NAN UNIVERSITY   (Taiwan)

^b NATIONAL TAIWAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Taiwan)

Author keywords

Authentication; Guessing attack; Impersonation attack; Key agreement; Random oracle; Security

Indexed keywords

GUESSING ATTACK; IMPERSONATION ATTACK; KEY AGREEMENT; RANDOM ORACLE; SECURITY;

AUTHENTICATION; SECURITY OF DATA;

PUBLIC KEY CRYPTOGRAPHY;

EID: 69649092978     PISSN: 00104620     EISSN: 14602067     Source Type: Journal    
DOI: 10.1093/comjnl/bxn070     Document Type: Article

References (20)

1. Kohl, J. and Neuman, C. (1993) The Kerberos Network Authentication Service (V5). Internet Request for Comments 1510.
2. Molva, R., Tsudik, G., Herreweghen, E.V. and Zatti, S. (1992) KryptoKnight Authentication and Key Distribution System. Proc. 1992 European Symp. Research in Computer Security - ESORICS,Toulouse, France, November 23-25, pp. 1-16, Lecture Notes in Computer Science, Vol. 648. Springer, Berlin.
3. Bellare, M., Pointcheval, D. and Rogaway, P. (2000) Authenticated Key Exchange Secure Against Dictionary Attacks. Eurocrypt 2000, Belgium, May 14-18, pp. 139-155, Lecture Notes in Computer Science, Vol. 1807. Springer, Berlin.
4. Ding, Y. and Horster, P. (1995) Undetectable on-line password guessing attacks. ACM Oper. Syst. Rev., 29, 77-86.
5. IEEE P1363.2: Password-based public-key cryptography. http:// grouper.ieee.org/groups/1363/passwdPK/index.html.
6. Steiner, M., Tsudik, G. and Wainder, M. (1995) Refinement and extension of encrypted key exchange. ACM Oper. Syst. Rev., 29, 22-30.
7. Lin, C.L., Sun, H.M. and Hwang, T. (2000) Three party-encrypted key exchange: Attacks and a solution. ACM Oper. Syst. Rev., 34, 12-20.
8. Sun, H.M., Chen, B.C. and Hwang, T. (2005) Secure key agreement protocols for three-party against guessing attacks. J. Syst. Softw. 75, 63-68.
9. Chang, C.C. and Chang, Y.F. (2004)Anovel three-party encrypted key exchange protocol. Compu. Stand. Interfaces, 26, 471-476.
10. Chung, H.R. and Ku, W.C. (2008) Three weaknesses in a simple three-party key exchange protocol. Inf. Sci., 178, 220-229.
11. Lee, T.F., Hwang, T. and Lin, C.L. (2004) Enhanced three-party encrypted key exchange without server public keys. Comput. Secur., 23, 571-577.
12. Lin, C.L., Sun, H.M., Steiner, M. and Hwang, T. (2001) Three-party encrypted key exchange without server public-keys. IEEE Commun. Lett. 5, 497-499.
13. Lu, R. and Cao, Z. (2007) Simple three-party key exchange protocol. Comput. Secur., 26, 94-97.
14. Nam, J., Kim, S. and Won, D. (2006) Attack on the Sun-Chen-Hwang's three-party key agreement protocols using passwords. IEICE Trans. Fundam. Electron. Commun. Comput. Sci., E89-A, 209-212.
15. Chien, H.-Y. and Wu, T.-C. (2008) Highly Efficient Password-Based Three-Party Key Exchange in Random Oracle Model. Proc. IEEE ISI 2008 Taiwan, June 17-20, pp. 69-76, Lecture Notes in Computer Science, Vol. 5075. Springer, Berlin.
16. Gong, L. (1995) Optimal Authentication Protocols Resistant to Password Guessing Attacks. Proc. 8th IEEE Workshop on Computer Security Foundations, Ireland, June 13-15, pp. 24-29. IEEE.
17. Gong, L. (1993) Lower Bounds on Messages and Rounds for Network Authentication Protocols. Proc. 1st ACM Conf. Computer and Communications Security 1993, Fair-fax,Virginia, November 3-5, pp. 26-37. ACM press.
18. Chien, H.-Y. (2008) Selectively convertible authenticated encryption in the random oracle model. Comput. J., 51, 419-434.
19. Bellare, M., Desai, A., Pointcheval, D. and Rogaway, P. (1998) Relations Among Notations of Security for Public Key Encryption Schemes. Proc. CRYPTO'98, Santa Barbara, CA, USA, August 23-27, pp. 26-45, Lecture Notes in Computer Science, Vol. 1462. Springer, Berlin.
20. Bellare, M. and Rogaway, P. (1995) Provably secure session key distribution: The three party case. Proc. 27th ACM Symp. Theory of Computing, Nevada, USA, May 29-June 1, pp. 57-66. ACM press.