Cryptanalysis of an efficient three-party password-based key exchange scheme

International Journal of Communication Systems

Volumn 25, Issue 11, 2012, Pages 1443-1449

  Simplicio, Marcos A ^a   Sakuragui, Rony R M ^a  

^a UNIVERSITY OF SÃO PAULO   (Brazil)

Author keywords

cryptanalysis; key compromise impersonation; offline password guessing; password authenticated key exchange; three party

Indexed keywords

CRYPTANALYSIS; KEY-COMPROMISE IMPERSONATION; OFFLINE PASSWORDS; PASSWORD-AUTHENTICATED KEY EXCHANGE; THREE-PARTY;

CRYPTOGRAPHY;

AUTHENTICATION;

EID: 84868193789     PISSN: 10745351     EISSN: 10991131     Source Type: Journal    
DOI: 10.1002/dac.1373     Document Type: Article

References (21)

1. Diffie W, Hellman ME,. New directions in cryptography. IEEE Transactions on Information Theory-TIT 1976; 22 (6): 644-654. DOI: 10.1109/TIT.1976.1055638.
2. Abdalla M, Pointcheval D, Supérieure ÃN,. Simple password-based encrypted key exchange protocols. In Topics in Cryptology: CT-RSA'05, Vol. 3376, Lecture Notes in Computer Science, Springer-Verlag: Berlin, Heidelberg, 2005; 191-208, DOI: 10.1007/978-3-540-30574-3-14. (Pubitemid 41231212)
3. Bellovin SM, Merritt M,. Encrypted key exchange: password-based protocols secure against dictionary attacks. IEEE Symposium on Security and Privacy 1992: 72. DOI: 10.1109/RISP.1992.213269.
4. Blake-Wilson S, Johnson D, Menezes A,. Key agreement protocols and their security analysis. Proceedings of the 6th IMA International Conference on Cryptography and Coding, Springer-Verlag: London, UK, 1997; 30-45. (Pubitemid 128005797)
5. Abdalla M, Fouque PA, Pointcheval D,. Password-based authenticated key exchange in the three-party setting. IEE Proceedings of the Information Security 2006; 153 (1): 27-39.
6. Chang TY, Hwang MS, Yang WP,. A communication-efficient three-party password authenticated key exchange protocol. Information Sciences 2011; 181: 217-226. DOI: 10.1016/j.ins.2010.08.032.
7. Chung HR, Ku WC,. Three weaknesses in a simple three-party key exchange protocol. Information Sciences 2008; 178 (1): 220-229. DOI: 10.1016/j.ins.2007. 08.004.
8. Lee TF, Hwang T, Lin CL,. Enhanced three-party encrypted key exchange without server public keys. Computers & Security 2004; 23 (7): 571-577. DOI: 10.1016/j.cose.2004.06.007.
9. Lu R, Cao Z,. Simple three-party key exchange protocol. Computers & Security 2007; 26 (1): 94-97. DOI: 10.1016/j.cose.2006.08.005. (Pubitemid 46216493)
10. Yang JH, Chang CC,. An efficient three-party authenticated key exchange protocol using elliptic curve cryptography for mobile-commerce environments. Journal of Systems and Software 2009; 82: 1497-1502. DOI: 10.1016/j.jss.2009.03. 075.
11. Lou DC, Huang HF,. Efficient three-party password-based key exchange scheme. International Journal of Communication Systems 2011; 24 (4): 504-512. DOI: 10.1002/dac.1172.
12. Hankerson D, Menezes AJ, Vanstone S,. Guide to Elliptic Curve Cryptography. Springer Professional Computing, Springer-Verlag: New York, Inc, 2003.
13. Koblitz N,. Elliptic curve cryptosystem. Mathematics of Computation 1987; 48: 203-209.
14. Yoneyama K,. Efficient and strongly secure password-based server aided key exchange (extended abstract). Proceedings of the 9th International Conference on Cryptology in India: Progress in Cryptology, INDOCRYPT'08, Springer-Verlag: Berlin, Heidelberg, 2008; 172-184, DOI: 10.1007/978-3-540- 89754-5-14.
15. Bellare M, Pointcheval D, Rogaway P,. Authenticated key exchange secure against dictionary attacks. Proceedings of the 19th international conference on Theory and application of cryptographic techniques, Eurocrypt'00, Springer-Verlag: Berlin, Heidelberg, 2000; 139-155.
16. Gennaro R, Lindell Y,. A framework for password-based authenticated key exchange. In Eurocrypt'03, Lecture Notes in Computer Science, Vol. 2656, Springer: Berlin / Heidelberg, 2003; 648-648, DOI: 10.1007/3-540-39200-9-33.
17. Guo H, Li Z, Mu Y, Zhang X,. Cryptanalysis of simple three-party key exchange protocol. Computers & Security 2008; 27 (1-2): 16-21, DOI: 10.1016/j.cose.2008.03.001.
18. Nam J, Paik J, Kang HK, Kim UM, Won D,. An off-line dictionary attack on a simple three-party key exchange protocol. IEEE Communications Letters 2009; 13: 205-207. DOI: 10.1109/LCOMM.2009.081609.
19. Phan RCW, Yau WC, Goi B M,. Cryptanalysis of simple three-party key exchange protocol (S-3PAKE). Information Sciences 2008; 178 (13): 2849-2856. DOI: 10.1016/j.ins.2008.02.008.
20. Pu Q, Zhao X, Ding J,. Cryptanalysis of a three-party authenticated key exchange protocol using elliptic curve cryptography. Proceedings of the 2009 International Conference on Research Challenges in Computer Science, ICRCCS '09, IEEE Computer Society: Washington, DC, USA, 2009; 7-10, DOI: 10.1109/ICRCCS.2009.11.
21. Yoon EJ, Yoo KY,. Cryptanalysis of a simple three-party password-based key exchange protocol. International Journal of Communication Systems 2011; 24: 532-542. DOI: 10.1002/dac.1168.