Simple password-based three-party authenticated key exchange without server public keys

Information Sciences

Volumn 180, Issue 9, 2010, Pages 1702-1714

  Lee, Tian Fu ^a,b   Hwang, Tzonelih ^a  

^a NATIONAL CHENG KUNG UNIVERSITY   (Taiwan)

^b TZU CHI UNIVERSITY   (Taiwan)

Author keywords

3PAKE; Authentication; Communicating protocol; Network security; Password based; Three party key exchange

Indexed keywords

AUTHENTICATED KEY EXCHANGE; AUTHENTICATED KEY EXCHANGE PROTOCOLS; COMMUNICATING PROTOCOLS; IN-NETWORK; KEY EXCHANGE; MUTUAL AUTHENTICATION; PASSWORD-BASED; PUBLIC KEYS; PUBLIC NETWORKS; RANDOM ORACLE MODEL; SECURE COMMUNICATIONS; SERVER AUTHENTICATION; THREE-PARTY;

NETWORK PROTOCOLS; NETWORK SECURITY;

AUTHENTICATION;

EID: 76349117227     PISSN: 00200255     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ins.2010.01.005     Document Type: Article

References (25)

1. M. Abdalla, M. Bellare, P. Rogaway, The oracle Diffie-Hellman assumptions and an analysis of DHIES, in: D. Naccache (Ed.), Topics in Cryptology - CT-RSA 2001, Lecture Notes in Computer Science, vol. 2020, 2001, pp. 143-158.
2. M. Abdalla, O. Chevassut, P.-A. Fouque, D. Pointcheval, A simple threshold authenticated key exchange from short secrets, in: Advances in Cryptology - Proceedings of ASIACRYPT '05, Lecture Notes in Computer Science, vol. 3788, 2005, pp. 566-588.
3. Abdalla M., Fouque P.-A., and Pointcheval D. Password-based authenticated key exchange in the three-party setting. IEE Proceedings - Information Security 153 1 (2006) 27-39
4. M. Abdalla, D. Pointcheval, Simple password-based authenticated key protocols, in: Topics in Cryptology - CT-RSA 2005, Lecture Notes in Computer Science, vol. 3376, 2005, pp. 191-208.
5. Bellare M., Kilian J., and Rogaway P. The security of the cipher block chaining message authentication code. Journal of Computer and System Sciences 61 3 (2000) 362-399
6. Bellare M., Pointcheval D., and Rogaway P. Authenticated key exchange secure against dictionary attacks. Advances in Cryptology - Eurocrypt 2000 (2000) 139-155
7. M. Bellare, P. Rogaway, Random oracles are practical: a paradigm for designing efficient protocols, in: First ACM Conference on Computer and Communications Security, 1993, pp. 62-73.
8. M. Bellare, P. Rogaway, Provably secure session key distribution - the three party case, in: Proc. 28th ACM Symposium on the Theory of Computing, 1995, pp. 57-66.
9. S.M. Bellovin, M. Merrit, Encrypted key exchanged: password-based protocols secure against dictionary attacks, in: Proc., IEEE Symp. on Research in Security and Privacy, 1992, pp. 72-84.
10. H.-R. Chung, W.-C. Ku, Impersonation attacks on a simple three-party key exchange protocol, in: 17th Information Security Conference, 2007.
11. Chung H.-R., and Ku W.-C. Three weaknesses in a simple three-party key exchange protocol. Information Sciences 178 (2008) 220-229
12. Diffie W., and Hellman M. New directions in cryptography. IEEE Transactions on Information Theory 22 6 (1976) 644-654
13. Ding Y., and Horster P. Undetectable on-line password guessing attacks. ACM Operating Systems Review 29 4 (1995) 77-86
14. Gong L. Efficient network authentication protocols: lower bounds and implementations. Distributed Computing 9 3 (1995) 131-145
15. L. Gong, Optimal authentication protocols resistant to password guessing attacks, in: Proceedings of the 8th IEEE Computer Security Foundation Workshop, 1995, pp. 24-29.
16. Guo H., Li Z., Mu Y., and Zhang X. Cryptanalysis of simple three-party key exchange protocol. Computers and Security 27 (2008) 16-21
17. Kim H.-S., and Choi J.-Y. Enhanced password-based simple three-party key exchange protocol. Computers and Electrical Engineering 35 1 (2009) 107-114
18. Kwon T., Kang M., Jung S., and Song J. An improvement of the password-based authentication protocol (K1P) on security against replay attacks. IEICE Transactions on Communications E82-B 7 (1999) 991-997
19. Kwon T., and Song J. Efficient key exchange and authentication protocols protecting weak secrets. IEICE Trans. Fundamentals E81-A 1 (1998) 156-163
20. Lee T.-F., Hwang T., and Lin C.-L. Enhanced three-party encrypted key exchange without server public keys. Computers and Security 23 7 (2004) 571-577
21. Lin C.-L., Sun H.-M., and Hwang T. Three-party encrypted key exchange: attacks and a solution. ACM Operating Systems Review 34 4 (2000) 12-20
22. Lin C.-L., Sun H.-M., Steiner M., and Hwang T. Three-party encrypted key exchange without server public-keys. IEEE Communications Letters 5 12 (2001) 497-499
23. Lu R., and u Cao Z. Simple three-party key exchange protocol. Computers and Security 26 1 (2007) 94-97
24. Phan R.C.-W., Yau W.-C., and Goi B.-M. Cryptanalysis of simple three-party key exchange protocol (S-3PAKE). Information Sciences 178 13 (2008) 2849-2856
25. V. Shoup, Sequences of games: A tool for taming complexity in security proofs. , 2005.