Finding and fixing vulnerabilities in several three-party password authenticated key exchange protocols without server public keys

Information Sciences

Volumn 235, Issue , 2013, Pages 329-340

  Xiong, Hu ^a,c,d   Chen, Yanan ^b   Guan, Zhi ^c   Chen, Zhong ^c  

^a UNIVERSITY OF ELECTRONIC SCIENCE AND TECHNOLOGY OF CHINA   (China)

^b BEIJING JIAOTONG UNIVERSITY   (China)

^c PEKING UNIVERSITY   (China)

^d INSTITUTE OF SOFTWARE   (China)

Author keywords

Authentication; Key Compromise Impersonation (KCI) attack; Password based; Three party key exchange

Indexed keywords

AUTHENTICATED KEY EXCHANGE; FUTURE DESIGNS; KEY EXCHANGE; KEY-COMPROMISE IMPERSONATION; PASSWORD AUTHENTICATED KEY EXCHANGE PROTOCOLS; PASSWORD-BASED; SESSION KEY; THREE-PARTY;

ARTIFICIAL INTELLIGENCE; SOFTWARE ENGINEERING;

AUTHENTICATION;

EID: 84875929826     PISSN: 00200255     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ins.2013.02.004     Document Type: Article

References (27)

1. M. Abdalla, and D. Pointcheval Simple password-based encrypted key exchange protocols Topics in cryptology-CT-RSA 2005 LNCS vol. 3376 2005 Springer 191 208
2. M. Abdalla, O. Chevassut, and D. Pointcheval One-Time verifier-based encrypted key exchange S. Vaudenay, Public Key Cryptography-PKC 2005 LNCS vol. 3386 2005 Springer 47 64
3. S.M. Bellovin, M. Merrit, Encrypted key exchanged: password-based protocols secure against dictionary attacks, in: Proceedings of IEEE Symposium on Research in Security and Privacy, 1992, pp. 72-84.
4. S. Blake-Wilson, D. Johnson, and A. Menezes Key agreement protocols and their security analysis M. Darnell, Proceedings of Cryptography and Coding 6th IMA International Conference, LNCS vol. 1355 1997 Springer 30 45
5. T.Y. Chang, W.P. Yang, and M.S. Hwang Simple authenticated key agreement and protected password change protocol Computers & Mathematics with Applications 49 5-6 2005 703 714
6. T.Y. Chang, Y.J. Yang, and C.C. Peng A personalized rhythm click-based authentication system Information Management and Computer Security 18 2 2010 72 85
7. T.Y. Chang, M.S. Hwang, and W.P. Yang A communication-efficient three-party password authenticated key exchange protocol Information Sciences 181 1 2011 217 226
8. T.H. Chen, W.B. Lee, and H.B. Chen A round-and computation-efficient three party authenticated key exchange protocol Journal of Systems and Software 81 9 2008 1581 1590
9. W. Diffie, and M. Hellman New Directions in Cryptography IEEE Transactions on Information Theory 22 6 1976 644 654
10. H. Guo, Z. Li, Y. Mu, and Y. Zhang Cryptanalysis of simple three-party key exchange protocol Computers & Security 27 1-2 2008 16 21
11. H.F. Huang A simple three-party password-based key exchange protocol International Journal of Communication Systems 22 7 2009 857 862
12. M. Kumar A new secure remote user authentication scheme with smart cards International Journal of Network Security 11 3 2010 128 133
13. L. Law, A. Menezes, M. Qu, J. Solinas, and S. Vanstone An efficient for authenticated key agreement Designs, Codes and Cryptography 28 2 2003 119 134
14. T.F. Lee, T. Hwang, and C.L. Lin Enhanced three-party encrypted key exchange without server public keys Computers & Security 23 7 2004 571 577
15. T.F. Lee, and T. Hwang Simple password-based three-party authenticated key exchange without server public keys Information Sciences 180 9 2010 1702 1714
16. C.L. Lin, H.M. Sun, M. Steiner, and T. Hwang Three-party encrypted key exchange without server public-keys IEEE Communications Letters 5 12 2001 497 499
17. D.C. Lou, and H.F. Huang Efficient three-party password-based key exchange scheme International Journal of Communication Systems 24 4 2010 504 512
18. R. Lu, and Z. Cao Simple three-party key exchange protocol Computers & Security 26 1 2007 94 97
19. C. Lv, M. Ma, H. Li, J.F. Ma, An efficient three-party authenticated key exchange protocol with one-time key, in: INFOCOM IEEE Conference on Computer Communications Workshops, 2010, pp. 1-5.
20. Menezes, P.C. Van Oorschot, and S. Vanstone Handbook of Applied Cryptography 1997 CRC Press USA
21. J. Nam, Y. Lee, S. Kim, and D. Won Security weakness in a three-party pairing-based protocol for password authenticated key exchange Information Sciences 177 6 2007 1364 1375
22. R.C.-W. Phana, W.C. Yaub, and B.M. Goi Cryptanalysis of simple three-party key exchange protocol (S-3PAKE) Information Sciences 178 13 2008 2849 2856
23. Z.W. Tan An enhanced three-party authentication key exchange protocol for mobile commerce environments Journal of Communications 5 5 2010 436 443
24. Q. Tang, and L. Chen Extended KCI attack against two-party key establishment protocols Information Processing Letters 111 15 2011 744 747
25. S. Wu, Q. Pu, S. Wang, and D. He Cryptanalysis of a communication- efficient three-party password authenticated key exchange protocol Information Sciences 215 1 2012 83 96
26. J.H. Yang, and C.C. Chang An efficient three-party authenticated key exchange protocol using elliptic curve cryptography for mobile-commerce environments Journal of Systems and Software 82 9 2009 1497 1502
27. J. Zhao, and D. Gu Provably secure three-party password-based authenticated key exchange protocol Information Sciences 184 1 2012 310 323