Cryptanalysis of a simple three-party password-based key exchange protocol

International Journal of Communication Systems

Volumn 24, Issue 4, 2011, Pages 532-542

  Yoon, Eun Jun ^a   Yoo, Kee Young ^a  

^a Kyungpook National University   (South Korea)

Author keywords

authentication; cryptography; key exchange; password; protocol; three party

Indexed keywords

AUTHENTICATED KEY EXCHANGE; KEY EXCHANGE; OFFLINE PASSWORD GUESSING ATTACK; PASSWORD; PASSWORD GUESSING ATTACK; PASSWORD-BASED KEY EXCHANGE; PROTOCOL; PUBLIC KEYS; PUBLIC NETWORKS; SECURE COMMUNICATIONS; THREE-PARTY; TRANSACTION CONFIDENTIALITY; VARIOUS ATTACKS;

AUTHENTICATION; CRYPTOGRAPHY; NETWORK SECURITY;

NETWORK PROTOCOLS;

EID: 79953304485     PISSN: 10745351     EISSN: 10991131     Source Type: Journal    
DOI: 10.1002/dac.1168     Document Type: Article

References (17)

1. Bellovin SM, Merritt M,. Encrypted key exchange: password-based protocols secure against dictionary attacks. Proceedings of 1992 EEE Symposium on Research in Security and Privacy. Lecture Notes in Computer Science. Springer: Berlin, 1992; 72-84. (Pubitemid 23569189)
2. Lin CL, Sun HM, Hwang T,. Three-party encrypted key exchange: attacks and a solution. ACM Operating Systems Review 2000; 34: 12-20.
3. Chang CC, Chang YF,. A novel three-party encrypted key exchange protocol. Computer Standards and Interfaces 2004; 26 (5): 472-476.
4. Lee TF, Hwang T, Lin CL,. Enhanced three-party encrypted key exchange without server public keys. Computer and Security 2004; 23 (7): 571-577.
5. Lee SW, Kim HS, Yoo KY,. Efficient verifier-based key agreement protocol for three parties without server's public key. Applied Mathematics and Computation 2005; 167 (2): 996-1003.
6. Sun HM, Chen BC, Hwang T,. Secure key agreement protocols for three-party against guessing attacks. Journal of Systems and Software 2005; 75: 63-68.
7. Lu RX, Cao ZF,. Simple three-party key exchange protocol. Computers and Security 2007; 26: 94-97.
8. Yoon EJ, Yoo KY,. Improving the novel three-party encrypted key exchange protocol. Computer Standards and Interfaces 2008; 30 (5): 309-314.
9. Phan RCW, Yau WC, Goi BM,. Cryptanalysis of simple three-party key exchange protocol (S-3PAKE). Information Sciences 2008; 178: 2849-2856.
10. Guo H, Li Z, Mu Y, Zhang X,. Cryptanalysis of simple three-party key exchange protocol. Computers and Security 2008; 27: 16-21.
11. Kim HS, Choi JY,. Enhanced password-based simple three-party key exchange protocol. Computers and Electrical Engineering 2009; 35: 107-114.
12. Huang HF,. A simple three-party password-based key exchange protocol. International Journal of Communication Systems 2009; 22: 857-862.
13. Yang JH, Chang CC,. An efficient three-party authenticated key exchange protocol using elliptic curve cryptography for mobile-commerce environments. Journal of Systems and Software 2009; 82 (9): 1497-1502.
14. Ding Y, Horster P,. Undetectable on-line password guessing attacks. ACM Operating Systems Review 1995; 29 (4): 77-86.
15. Diffie W, van Oorschot PC, Wiener MJ,. Authentication and authenticated key exchanges. Design, Codes and Cryptography 1992; 2 (2): 107-125.
16. Choo KKR, Boyd C, Hitchcock Y,. Examining indistinguishability-based proof models for key establishment protocols. Advances in Cryptology- Asiacrypt'05. Lecture Notes in Computer Science, vol. 3788. Springer: Berlin, 2005; 585-604. (Pubitemid 43763497)
17. BruteForceCalc. Brute force attack estimator. Mandylion Research Labs. Available from:. 2006.