Security analysis and enhancements of verifier-based password-authenticated key exchange protocols in the three-party setting

Journal of Information Science and Engineering

Volumn 27, Issue 3, 2011, Pages 1059-1072

  Wu, Shuhua ^a  

^a ZHENGZHOU INFORMATION SCIENCE AND TECHNOLOGY INSTITUTE   (China)

Author keywords

Cryptanalysis; Elliptic curve; Password authenticated key exchange; Three party; Verifier based

Indexed keywords

CRYPTANALYSIS; ELLIPTIC CURVE; PASSWORD AUTHENTICATED KEY EXCHANGE; THREE-PARTY; VERIFIER-BASED;

GEOMETRY;

COMPUTER CRIME;

EID: 79958169657     PISSN: 10162364     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (23)

1. M. Abdalla, P. A. Fouque, and D. Pointcheval, "Password-based authenticated key exchange in the three-party setting," in Proceedings of the 8th International Workshop on Theory and Practice in Public Key Cryptography, LNCS 3386, 2005, pp. 65-84.
2. M. Abdalla and D. Pointcheval, "Interactive Diffie-Hellman assumptions with applications to password-based authentication," in Proceedings of the 9th International Conference on Financial Cryptography and Data Security, LNCS 3570, 2005, pp. 341-356.
3. Y. Ding and P. Horster, "Undetectable on-line password guessing attacks," ACM Operating Systems Review, Vol. 29, 1995, pp. 77-86.
4. C. L. Lin, H. M. Sun, M. Steiner, and T. Hwang, "Three-party encrypted key exchange without server public-keys," IEEE Communication Letters, Vol. 5, 2001, pp. 497-499. (Pubitemid 34099691)
5. C. C. Chang and Y. F. Chang, "A novel three-party encrypted key exchange protocol," Computer Standards and Interfaces, Vol. 26, 2004, pp. 471-476.
6. H. M. Sun, B. C. Chen, and T. Hwang, "Secure key agreement protocols for three-party against guessing attacks," Journal of Systems and Software, Vol. 75, 2005, pp. 63-68.
7. S. W. Lee, H. S. Kim, and K. Y Yoo, "Efficient verifier-based key agreement protocol for three parties without server's public key," Applied Mathematics and Computation, Vol. 167,2005, pp. 996-1003.
8. J. O. Kwon, I. R. Jeong, K. Sakurai, and D. H. Lee, "Efficient verifier based password-authenticated key exchange in the three-party setting," Computer Standards and Interfaces, Vol. 29, 2007, pp. 513-520. (Pubitemid 46771127)
9. W. M. Li and Q. Y. Wen, "Efficient verifier-based password-authentication key exchange protocol via elliptic curves," in Proceedings of International Conference on Computer Science Software Engineering, 2008, pp. 1003-1006.
10. W. M. Li, Q. Y. Wen, and H. Zhang, "Verifier-based password-authenticated key exchange protocol for three-party (In Chinese)," TongxinXuebao/Journal on Communication, Vol. 29, 2008, pp. 149-152.
11. S. W. Lee, H. S. Kim, and K. Y. Yoo, "Improvement of Lee and Lee's authenticated key agreement scheme," Applied Mathematics and Computation, Vol. 162, 2005, pp. 1049-1053.
12. J. O. Kwon, J. Y. Hwang, C. W. Kim, and D. H. Lee, "Cryptanalysis of Lee-KimYoo password-based key agreement schemee," Applied Mathmatics and Computation, Vol. 168, 2005, pp. 858-865.
13. D. Hankerson, A. Menezes, and S. Vanstone, Guide to Elliptic Curve Cryptography, Springer-Verlag, New York, 2004.
14. N. Koblitz, "Elliptic curve cryptosystem," Mathematics of Computation, Vol. 48, 1987, pp. 203-209.
15. R. Lidl and H. Niederreiter, Finite Fields, Cambridge University Press, Cambridge, 1996.
16. I. F. Blake, G Seroussi, and N. P. Smart, Elliptic Curves in Cryptography, Cambridge University Press, Cambridge, 1999.
17. P. S. L. M. Barreto, H. Y. Kim, and B. Lynn, "Efficient algorithms for pairing-based cryptosystems," in Proceedings of the 22nd Annual International Cryptology Conference on Advances in Cryptology, LNCS 2442, 2002, pp. 354-369.
18. J. Katz and J. S. Shin, "Modeling insider attacks on group-key exchange protocols," in Proceedings of the 12th ACM Conference on Computer and Communications Security, 2005, pp. 180-189.
19. K. K. R. Choo, C. Boyd, and Y. Hitchcock, "Examining indistinguishability-based proof models for key establishment protocols," Advances in Cryptology - ASIACRYPT, LNCS 3788, 2005, pp. 585-604. (Pubitemid 43763497)
20. M. Bellare, D. Pointcheval, and P. Rogaway, "Authenticated key exchange secure against dictionary attacks," in Proceedings of the 19th International Conference on Theory and Application of Cryptographic Techniques, LNCS 1807, 2000, pp. 139-155.
21. E. Bresson, O. Chevassut, and D. Pointcheval, "New security results on encrypted key exchange," in Proceedings of the 7th International Workshop on Theory and Practice in Public Key Cryptography, LNCS 2947, 2004, pp. 145-158.
22. M. Abdalla, M. Bellare, and P. Rogaway, "The oracle Diffie-Hellman assumptions and an analysis of DHIES," in Proceedings of the Cryptographers'" Track at RSA Conference, LNCS 2020, 2001, pp. 143-158.
23. M. Abdalla and D. Pointcheval, "Simple password-based encrypted key exchange protocols," in Proceedings of the Cryptographers' Track at the RSA Conference, LNCS 3376, 2005 pp. 191-208.