A provably secure and efficient two-party password-based explicit authenticated key exchange protocol resistance to password guessing attacks

Concurrency and Computation: Practice and Experience

Volumn 27, Issue 17, 2015, Pages 4897-4913

  Farash, Mohammad Sabzinejad ^a   Islam, SK Hafizul ^b   Obaidat, Mohammad S ^c  

^a KHARAZMI UNIVERSITY   (Iran)

^b BIRLA INSTITUTE OF TECHNOLOGY AND SCIENCE   (India)

^c MONMOUTH UNIVERSITY   (United States)

Author keywords

authenticated key exchange; bilinear pairing; elliptic curve; off line password guessing attack; password based protocol; random oracle model

Indexed keywords

AUTHENTICATION; ENTROPY;

AUTHENTICATED KEY EXCHANGE; AUTHENTICATED KEY EXCHANGE PROTOCOLS; BILINEAR PAIRING; ELLIPTIC CURVE; OFFLINE PASSWORD GUESSING ATTACK; PASSWORD-BASED PROTOCOL; PASSWORD-GUESSING ATTACKS; PROVABLY SECURE; RANDOM ORACLE MODEL; SESSION KEY;

PUBLIC KEY CRYPTOGRAPHY;

EID: 85010364277     PISSN: 15320626     EISSN: 15320634     Source Type: Journal    
DOI: 10.1002/CPE.3477     Document Type: Article

References (45)

1. Obaidat MS, Boudriga N. Security of e-Systems and Computer Networks. Cambridge University Press: New York, 2007.
2. Farash MS, Bayat M, Attari MA. Vulnerability of two multiple-key agreement protocols. Computers & Electrical Engineering 2011; 37(2):199–204.
3. Farash MS, Attari MA. An id-based key agreement protocol based on ECC among users of separate networks. 9th International ISC Conference on Information Security and Cryptology (ISCISC’12), IEEE Explore, Tabriz, Iran, 2012; 32–37.
4. Farash MS, Attari MA. A pairing-free ID-based key agreement protocol with different PKGs. International Journal of Network Security 2014; 16(2):143–148.
5. Farash MS, Attari MA, Atani RE, Jami M. A new efficient authenticated multiple-key exchange protocol from bilinear pairings. Computers & Electrical Engineering 2013; 39(2):530–541.
6. Farash MS, Attari MA. Provably secure and efficient identity-based key agreement protocol for independent PKGs using ECC. The ISC International Journal of Information Security 2013; 5(1):18–43.
7. Farash MS, Attari MA, Bayat M. A certificateless multiple-key agreement protocol without hash functions based on bilinear pairings. International Journal of Engineering and Technology 2012; 4(3):321–325.
8. Farash MS. Cryptanalysis and improvement of an efficient mutual authentication RFID scheme based on elliptic curve cryptography. The Journal of Supercomputing 2014; 70(2):987–1001.
9. Farash MS, Attari MA. An efficient and provably secure three-party password-based authenticated key exchange protocol based on Chebyshev chaotic maps. Nonlinear Dynamics 2014; 77(1-2):399–411.
10. Farash MS, Attari MA. An enhanced authenticated key agreement for session initiation protocol. Information Technology And Control 2013; 42(4):333–342.
11. Farash MS, Attari MA. An enhanced and secure three-party password-based authenticated key exchange protocol without using server’s public-keys and symmetric cryptosystems. Information Technology And Control 2014; 43(2):143–150.
12. Farash MS, Attari MA. Cryptanalysis and improvement of a chaotic maps-based key agreement protocol using Chebyshev sequence membership testing. Nonlinear Dynamics 2014; 76(2):1203–1213.
13. Bayat M, Farash MS, Movahed A. A novel secure bilinear pairing based remote user authentication scheme with smart card. IEEE/IFIP International Conference on Embedded and Ubiquitous Computing (EUC), IEEE Explore, Hong Kong, China, 2010; 578–582.
14. Farash MS, Attari MA. An efficient client-client password-based authentication scheme with provable security. The Journal of Supercomputing 2014; 70(2):1002–1022.
15. Farash MS, Attari MA. An anonymous and untraceable password-based authentication scheme for session initiation protocol using smart cards. International Journal of Communication Systems 2014. DOI: 10.1002/dac.2848.
16. Farash MS. Security analysis and enhancements of an improved authentication for session initiation protocol with provable security. Peer-to-Peer Networking and Applications 2014. DOI: 10.1007/s12083-014-0315-x.
17. Farash MS, Attari MA. An improved password-based authentication scheme for session initiation protocol using smart cards without verification table. International Journal of Communication Systems 2014. DOI: 10.1002/dac.2879.
18. Farash MS, Attari MA. A provably secure and efficient authentication scheme for access control in mobile pay-TV systems. Multimedia Tools and Applications 2014. DOI: 10.1007/s11042-014-2296-4.
19. Farash MS, Attari MA, Kumari S. Cryptanalysis and improvement of a three-party password based authenticated key exchange protocol with user anonymity using extended chaotic maps. International Journal of Communication Systems 2014. DOI: 10.1002/dac.2912.
20. Farash MS. Cryptanalysis and improvement of ‘an improved authentication with key agreement scheme on elliptic curve cryptosystem for global mobility networks’. International Journal of Network Management 2014; 25(1): 31–51.
21. Farash MS, Kumari S, Bakhtiari M. Cryptanalysis and improvement of a robust smart card secured authentication scheme on SIP using elliptic curve cryptography. Multimedia Tools and Applications 2015. DOI: 10.1007/s11042-015-2487-7.
22. Tsai JL. Efficient nonce-based authentication scheme for session initiation protocol. International Journal of Network Security 2009; 8(3):312–316.
23. Yoon EJ, Yoo KY. A new authentication scheme for session initiation protocol. Proceedings of the International Conference on Complex, Intelligent and Software Intensive Systems, IEEE Explore, Beijing, China, 2009; 549–554.
24. Chen TH, Yeh HL, Liu PC, Hsiang HC, Shih WK. A secured authentication protocol for SIP using elliptic curves cryptography. CN, CCIS, Jeju Island, Korea 2010; 119:46–55.
25. Arshad R, Ikram N. Elliptic curve cryptography based mutual authentication scheme for session initiation protocol. Multimedia Tools and Applications 2013; 66(2):165–178.
26. Tang H, Liu X. Cryptanalysis of Arshad et al.’s ECC-based mutual authentication scheme for session initiation protocol. Multimedia Tools and Applications 2013; 65(3):321–333.
27. Yoon E, Shin Y, Jeon I, Yoo K. Robust mutual authentication with a key agreement scheme for the session initiation protocol. IETE Technical Review 2010; 27(3):203–213.
28. Xie Q. A new authenticated key agreement for session initiation protocol. International Journal of Communication Systems 2012; 25(1):47–54.
29. Farash MS, Attari MA. An enhanced authenticated key agreement for session initiation protocol. Information Technology And Control 2013; 42(4):333–342.
30. Zhang L, Tang S, Cai Z. Efficient and flexible password authenticated key agreement for voice over internet protocol session initiation protocol using smart card. International Journal of Communication Systems 2013; 27(11): 2691–2702.
31. Tu H, Kumar N, Chilamkurti N, Rho S. An improved authentication protocol for session initiation protocol using smart card. Peer-to-Peer Networking and Applications 2014. DOI: 10.1007/s12083-014-0248-4.
32. Seo D, Sweeney P. Simple authenticated key agreement algorithm. IEE Electronics Letters 1999; 35(13):1073–1074.
33. Tseng YM. Weakness in simple authenticated key agreement protocol. IEE Electronics Letters 2000; 36(1):48–49.
34. Ku WC, Wang SD. Cryptanalysis of modified authenticated key agreement protocol. IEE Electronics Letters 2000; 36(21):1770–1771.
35. Hsu CL, Wu TS, Wu TC, Mitchell C. Cryptanalysis of enhancement for simple authenticated key agreement algorithm. Applied Mathematics and Computation 2003; 142(2-3):305–308.
36. Chang CC, Hwang KH, Lin IC. Security enhancement for a modified authenticated key agreement protocol. International Journal of Computational and Numerical Analysis and Applications 2003; 3(1):1–7.
37. Zheng M, Zhou H, Chen J. An efficient protocol for two-party explicit authenticated key agreement. Concurrency and Computation: Practice and Experience 2013. DOI: 10.1002/cpe.3198.
38. Zhou HH, Wang T, Zheng MH. Provably secure two-party password-based key agreement protocol. In Proceedings of the International Conference on Human-centric Computing and Embedded and Multimedia Computing, LNEE, Vol. 102. Springer-Verlin: Enshi, China, 2011; 213–221.
39. Boneh D, Franklin M. Identity-based encryption from the Weil pairing. SIAM Journal of Computing 2003; 32: 586–615.
40. Florencio D, Herley C. A large-scale study of web password habits. Proceedings of the 16th International Conference on World Wide Web, Banff, Alberta, Canada, 2007; 657–666.
41. Bonneau J. The science of guessing: analyzing an anonymized corpus of 70 million passwords. In Proceedings of the 33th IEEE Symposiumon Security and Privacy, San Francisco, California, USA, 2012; 538–552.
42. Cao X, Kou W, Yu Y, Sun R. A pairing-free identity-based authenticated key agreement protocol with minimal message exchanges. Information Sciences 2010; 180(1):2895–2903.
43. Farash MS, Attari MA, Atani RE, Jami M. A new efficient authenticated multiple-key exchange protocol from bilinear pairings. Computers & Electrical Engineering 2013; 39(2):530–541.
44. Farash MS, Attari MA. Provably secure and efficient identity-based key agreement protocol for independent PKGs using ECC. The ISC International Journal of Information Security 2013; 5(1):18–43.
45. Abdalla M, Pointcheval D. Interactive Diffie-Hellman assumptions with applications to password-based authentica-tion. In Proceedings of Financial Cryptography and Data Security, vol. 3570, LNCS. IEEE Explorer: Roseau, The Commonwealth Of Dominica, 2005; 341–356.