Re-attack on a three-party password-based authenticated key exchange protocol

Mathematical and Computer Modelling

Volumn 57, Issue 5-6, 2013, Pages 1175-1183

  Liang, Haiquan ^a   Hu, Jingtai ^a   Wu, Shuhua ^a  

^a TONGJI UNIVERSITY   (China)

Author keywords

Authenticated key exchange; Dictionary attack; Password based; Three party

Indexed keywords

AUTHENTICATED KEY EXCHANGE; AUTHENTICATED KEY EXCHANGE PROTOCOLS; DICTIONARY ATTACK; OFF-LINE DICTIONARY ATTACKS; PASSWORD-BASED; PROVABLE SECURITY; SECURITY WEAKNESS; SENSOR MONITORING; STOLEN VERIFIER ATTACK; THREE-PARTY;

AUTHENTICATION;

COMPUTER CRIME;

EID: 84873080000     PISSN: 08957177     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.mcm.2012.10.019     Document Type: Article

References (31)

1. S.M. Bellovin, M. Merritt, Encrypted key exchange: password-based protocols secure against dictionary attacks, in: Proc. of IEEE Symposium on Security and Privacy, 1992, pp. 72-84.
2. Kobara K., Imai H. Pretty-simple password-authenticated key-exchange under standard assumptions. IEICE Trans. Fundam. Electron. 2002, E85-A:2229-2237.
3. Bresson E., Chevassut O., Pointcheval D. New security results on encrypted key exchange, in:Proc. of PKC, in:LNCS 2004, vol. 2947:145-158.
4. MacKenzie P.D. The PAK suite: protocols for password-authenticated key exchange. Contrib. IEEE 2002, P1363.2.
5. Abdalla M., Pointcheval D. Simple password-based encrypted key exchange protocols. LNCS 2005, vol. 3376:191-208.
6. Abdalla M., Chevassut O., Pointcheval D. One-time verifier-based encrypted key exchange. LNCS 2005, vol. 3386:47-64.
7. Boyd C., Montague P., Nguyen K. Elliptic curve based password authenticated key exchange protocols. LNCS 2001, vol. 2119:487-501.
8. Lin C.-L., Sun H.-M., Steiner M., Hwang T. Three-party encrypted key exchange without server's public keys. IEEE Commun. Lett. 2001, 5:497-499.
9. Lee S.W., Kim H.S., Yoo K.Y. Efficient verifier-based key agreement for three parties without server's public key. Appl. Math. Comput. 2005, 167:996-1003.
10. Lee T.F., Hwang T., Lin C.L. Enhanced three-party encrypted key exchange without server's public keys. Comput. Secur. 2004, 23:571-577.
11. Lin C.L., Sun H.M., Hwang T. Three-party encrypted key exchange attacks and a solution. AACM Oper. Syst. Rev. 2000, 34:12-20.
12. Abdalla M., Fouque P.-A., Pointcheval D. Password-based authenticated key exchange in the three-party setting. LNCS 2005, vol. 3386:65-84.
13. Abdalla M., Pointcheval D. Interactive Diffie-Hellman assumptions with applications to password-based authentication. LNCS 2005, vol. 3570:341-356.
14. Lu R., Cao Z. Simple three-party key exchange protocol. Comput. Secur. 2007, 26:94-97.
15. Choo K.-K.R., Boyd C., Hitchcock Y. Examining indistinguishability-based proof models for key establishment protocols. LNCS 2005, vol. 3788:585-604.
16. Guo H., Li Z., Mu Y., Zhang X. Cryptanalysis of simple three-party key exchange protocol. Comput. Secur. 2008, 27:16-21.
17. Chung H.-R., Ku W.-C. Three weaknesses in a simple three-party key exchange protocol. Inform. Sci. 2008, 178:220-229.
18. Lo N.W., Yeh Kuo-Hui Cryptanalysis of two three-party encrypted key exchange protocols. Comput. Stand. Interfaces 2009, 31:1167-1174.
19. Raphael C.-W.P., Yau W.-C., Bok-Min G. Cryptanalysis of simple three-party key exchange protocol (S-3PAKE). Inform. Sci. 2008, 178:2849-2856.
20. Kim H.-S., Choi J.-Y. Enhanced password-based simple three-party key exchange protocol. Comput. Electr. Eng. 2009, 35:107-114.
21. J. Nam, Infringing and improving password security of a three-party key exchange protocol. Available at: http://eprint.iacr.org/2008/065/.
22. Nam J., Paik J., Kang H., Kim U., Won D. An off-line dictionary attack on a simple three-party key exchange protocol. IEEE Commun. Lett. 2009, 13:205-207.
23. Huang H.-F. A simple three-party password-based key exchange protocol. Int. J. Commun. Syst. 2009, 22:857-862.
24. Yoon E.J., Yoo K.Y. Cryptanalysis of a simple three-party password-based key exchange protocol. Int. J. Commun. Syst. 2011, 24:532-542.
25. Wu S., Chen K., Zhu Y. Enhancements of a threeparty password-based authenticated key exchange protocol. Int. Arab J. Inf. Technol. 2013, 10. IAJIT First Online Publication http://www.ccis2k.org/iajit/PDF/vol.10,no.3/2-2982.pdf.
26. Chien H.-Y. Secure verifier-based three-party key exchange in the random oracle model. J. Inf. Sci. Eng. 2011, 27:1487-1501.
27. Pu Q., Wang J., Wu S. Secure verifier-based three-party password-authenticated key exchange. Peer Peer Netw. Appl. 2012, 10.1007/s12083-012-0125-y.
28. Wang W., Hu L. Efficient and provably secure generic construction of three-party password-based authenticated key exchange protocols. LNCS 2006, vol. 4329:118-132.
29. Bellare M., Pointcheval D., Rogaway P. Authenticated key exchange secure against dictionary attacks. LNCS 2000, vol. 1807:139-155.
30. Bresson E., Chevassut O., Pointcheval D. New security results on encrypted key exchange. LNCS 2004, vol. 2947:145-158.
31. Abdalla M., Bellare M., Rogaway P. The oracle Diffie-Hellman assumptions and an analysis of DHIES. LNCS 2001, vol. 2020:143-158.