Two-server password-only authenticated key exchange

Journal of Computer and System Sciences

Volumn 78, Issue 2, 2012, Pages 651-669

  Katz, Jonathan ^a   MacKenzie, Philip ^b   Taban, Gelareh ^a   Gligor, Virgil ^c  

^a Institute of Advanced Computer Science   (United States)

^b GOOGLE INC   (United States)

^c CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

Key exchange protocols; Passwords

Indexed keywords

COMPUTER NETWORKS; SYSTEMS SCIENCE;

AUTHENTICATED KEY EXCHANGE; INHERENT LIMITATIONS; KEY EXCHANGE PROTOCOLS; MULTIPLE SERVERS; PASSWORD-BASED AUTHENTICATION; PASSWORDS; THE STANDARD MODEL; TWO-SERVER PROTOCOL;

AUTHENTICATION;

EID: 84855988718     PISSN: 00220000     EISSN: 10902724     Source Type: Journal    
DOI: 10.1016/j.jcss.2011.09.005     Document Type: Article

References (33)

1. M. Bellare, D. Pointcheval, and P. Rogaway Authenticated key exchange secure against dictionary attacks Adv. in Cryptology - Eurocrypt 2000 Lecture Notes in Comput. Sci. vol. 1807 2000 Springer-Verlag 139 155
2. M. Bellare, and P. Rogaway Random oracles are practical: A paradigm for designing efficient protocols Proc. 1st ACM Conference on Computer and Communications Security 1993 ACM 62 73
3. M. Bellare, and P. Rogaway Entity authentication and key distribution Adv. in Cryptology - Crypto 1993 Lecture Notes in Comput. Sci. vol. 773 1994 Springer-Verlag 232 249
4. M. Bellare, and P. Rogaway Provably secure session key distribution: The three party case 27th ACM Symposium on Theory of Computing (STOC) 1995 ACM 57 66
5. S.M. Bellovin, and M. Merritt Encrypted key exchange: Password-based protocols secure against dictionary attacks IEEE Symposium on Research in Security and Privacy 1992 IEEE 72 84 (Pubitemid 23569189)
6. S.M. Bellovin, and M. Merritt Augmented encrypted key exchange: A password-based protocol secure against dictionary attacks and password file compromise 1st ACM Conf. on Computer and Comm. Security 1993 ACM 244 250
7. M. Boyarsky Public-key cryptography and password protocols: The multi-user case 7th Ann. Conf. on Computer and Comm. Security 1999 ACM 63 72 (Pubitemid 32213901)
8. V. Boyko, P. MacKenzie, and S. Patel Provably secure password- authenticated key exchange using Diffie-Hellman Adv. in Cryptology - Eurocrypt 2000 Lecture Notes in Comput. Sci. vol. 1807 2000 Springer-Verlag 156 171
9. J. Brainard, A. Juels, B. Kaliski, M. Szydlo, Nightingale: A new two-server approach for authentication with short secrets, in: 12th USENIX Security Symp., 2003, pp. 201-213.
10. R. Canetti, O. Goldreich, and S. Halevi The random oracle methodology, revisited J. ACM 51 4 2004 557 594
11. R. Canetti, S. Halevi, J. Katz, Y. Lindell, and P. MacKenzie Universally-composable password authenticated key exchange Adv. in Cryptology - Eurocrypt 2005 Lecture Notes in Comput. Sci. vol. 3494 2005 Springer-Verlag 404 421 (Pubitemid 41313966)
12. R. Cramer, Modular design of secure yet practical cryptographic protocols, PhD thesis, CWI and University of Amsterdam, 1996.
13. R. Cramer, I. Damgård, and B. Schoenmakers Proofs of partial knowledge and simplified design of witness hiding protocols Adv. in Cryptology - Crypto 1994 Lecture Notes in Comput. Sci. vol. 839 1994 Springer-Verlag 174 187
14. R. Cramer, and V. Shoup Design and analysis of practical public-key encryption schemes secure against adaptive chosen ciphertext attack SIAM J. Comput. 33 1 2003 167 226
15. W. Diffie, and M. Hellman New directions in cryptography IEEE Trans. Inform. Theory 22 6 1976 644 654
16. M. Di Raimondo, and R. Gennaro Provably secure threshold password-authenticated key exchange J. Comput. System Sci. 72 6 2006 978 1001 (Pubitemid 44163573)
17. T. El Gamal A public key cryptosystem and a signature scheme based on discrete logarithms IEEE Trans. Inform. Theory 31 1985 469 472
18. W. Ford, B.S. Kaliski, Server-assisted generation of a strong secret from a password, in: Proc. 5th IEEE Intl. Workshop on Enterprise Security, 2000.
19. R. Gennaro, and Y. Lindell A framework for password-based authenticated key exchange ACM Trans. Inf. Syst. Secur. 9 2 2006 181 234 (Pubitemid 44329974)
20. O. Goldreich, and Y. Lindell Session-key generation using human passwords only J. Cryptology 19 3 2006 241 340 preliminary version in Crypto 2001
21. L. Gong, T.M.A. Lomas, R.M. Needham, and J.H. Saltzer Protecting poorly-chosen secrets from guessing attacks IEEE J. Sel. Areas Commun. 11 5 1993 648 656
22. S. Halevi, and H. Krawczyk Public-key cryptography and password protocols ACM Trans. Inf. Syst. Secur. 2 3 1999 230 268
23. D. Jablon Strong password-only authenticated key exchange ACM Comput. Commun. Rev. 26 5 1996 5 20
24. D. Jablon Password authentication using multiple servers RSA Cryptographers Track 2001 Lecture Notes in Comput. Sci. vol. 2020 2001 Springer-Verlag 344 360 (Pubitemid 33255175)
25. S. Jiang, G. Gong, Password based key exchange with mutual authentication, Workshop on Selected Areas of Cryptography (SAC), 2004.
26. J. Katz, R. Ostrovsky, and M. Yung Efficient password-authenticated key exchange using human-memorable passwords J. ACM 57 1 2009 78 116
27. T.M.A. Lomas, L. Gong, J.H. Saltzer, and R.M. Needham Reducing risks from poorly-chosen keys ACM Oper. Syst. Rev. 23 5 1989 14 18
28. S. Lucks Open key exchange: How to defeat dictionary attacks without encrypting public keys Proc. Security Protocols Workshop Lecture Notes in Comput. Sci. vol. 1361 1997 Springer-Verlag 79 90 (Pubitemid 128023881)
29. P. MacKenzie An efficient two-party public-key cryptosystem secure against adaptive chosen-ciphertext attack Public Key Cryptography (PKC) 2003 Lecture Notes in Comput. Sci. vol. 2567 2003 Springer-Verlag 47 61 (Pubitemid 137638341)
30. P. MacKenzie, S. Patel, and R. Swaminathan Password-authenticated key exchange based on RSA Intl. J. Information Security 9 6 2010 387 410
31. P. MacKenzie, T. Shrimpton, and M. Jakobsson Threshold password-authenticated key exchange J. Cryptology 19 1 2006 27 66 (Pubitemid 43023010)
32. M. Szydlo, and B. Kaliski Proofs for two-server password authentication RSA Cryptographers Track 2005 Lecture Notes in Comput. Sci. vol. 3376 2005 Springer-Verlag 227 244 (Pubitemid 41231214)
33. T. Wu, The secure remote password protocol, in: Proc. Internet Society Symp. on Network and Distributed System Security, 1998, pp. 97-111.