Dual-workfactor encrypted key exchange: Efficiently preventing password chaining and dictionary attacks

6th USENIX Security Symposium 1996

Volumn , Issue , 1996, Pages

  Jaspan, Barry ^a  

^a NONE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHENTICATION; PUBLIC KEY CRYPTOGRAPHY;

DICTIONARY ATTACK; ENCRYPTED KEY EXCHANGE;

COMPUTER CRIME;

EID: 85084161708     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (26)

1. Steven M. Bellovin and Michael Merrit. Encrypted key exchange: Password-based protocols secure against dictionary attacks. In Proceedings of the IEEE Symposium on Research in Security and Privacy, May 1992.
2. Steven M. Bellovin and Michael Merritt. Limitations of the Kerberos authentication system. In USENIX Conference Proceedings, pages 253-267, Dallas, TX, Winter 1991. USENIX. A version of this paper was published in the October, 1990 issue of Computer Communications Review.
3. Steven M. Bellovin and Michael Merritt. Cryptographic protocol for secure communications. U.S. Patent 5,241,599, August 1993.
4. Matt Bishop. Anatomy of a proactive password checker. In Proceedings of the 3rd USENIX UNIX Security Symposium, Baltimore, MD, September 1992.
5. CCITT. Recommendation X.509: The Directory Authentication Framkework, December 1988.
6. Don Davis. Personal communication.
7. Don Davis, Daniel Geer, and Theodore Ts'o. Kerberos with clocks adrift: History, protocols, and implementation. In Proceedings of the 5th USENIX UNIX Security Symposium, Salt Lake City, June 1995.
8. W. Dime and M. E. Hellman. New directions in cryptography. IEEE Trans. Inform. Theory, IT-22:644-654, November 1976.
9. Whitfield Diffie, Paul C. Van Oorschot, and Michael J. Wiener. Authentication and authenticated key exchanges. Designs, Codes, and Cryptography, 2(2):107-125, June 1992.
10. Yun Ding and Patrick Horster. Undetectable online password guessing attacks. Operating Systems Review, 29(4):77-86, October 1995.
11. D. Eastlake, S. Crocker, and J. Schiller. RFC 1750: Randomness Recommendations for Security, December 1994.
12. David C. Feldmeirer and Philip R. Karn. UNIX password security - ten years later. In G. Brassard, editor, Proc. CRYPTO 89, pages 44-63. Springer-Verlag, 1990. Lecture Notes in Computer Science No. 435.
13. M. Hellman and R. C. Merkle. Public key cryptographic apparatus and method. U.S. Patent 4,218,582, August 1980.
14. IEEE P1363 working group. Standard for RSA, DifRe-Hellman, and Related Public Key Cryptography: Appendix E, November 1995. This is a draft document currently available at http://stdsbbs.ieee.org/groups/1363.
15. P. Karn and W. A. Simpson. The Photuris session key management protocol, November 1995. This is a working draft document of the IETF.
16. John Kohl and Clifford Neuman. RFC 1510: The Kerberos Network Authentication Service (V5), September 1993.
17. B.A. LaMacchia and A.M. Odlyzko. Computation of discrete logarithms in prime fields. In A.J. Menezes and S. A. Vanstone, editors, Proc. CRYPTO 90, pages 616-618. Springer-Verlag, 1991. Lecture Notes in Computer Science No. 537.
18. T. Mark A. Lomas, Li Gong, Jerome H. Saltzer, and Roger M. Needham. Reducing risks from poorly chosen keys. In Proceedings of the 12th ACM Symposium on Operating System Principles, pages 14-18, December 1989.
19. R. M. Needham and M. D. Schroeder. Using encryption for authentication in large networks of computers. Communications of the ACM, 21(12):993-999, December 1978.
20. B. Clifford Neuman and Theodore Ts'o. Kerberos: An authentication service for computer networks. IEEE Communications Magazine, 32(9):33-38, September 1994.
21. Clifford Neuman and Glen Zorn. Integrating single-use authentication mechanisms with Kerberos, November 1995. This is a working draft document of the IETF.
22. S. C. Pohlig and M. E. Hellman. An improved algorithm for computing logarithms over GF(p) and its cryptographic significance. IEEE Trans. Inform. Theory, IT-24:106-110, January 1978.
23. B. Schneier. Applied Cryptography: Protocols, Algorithms, and Source Code in C John Wiley & Sons, New York, 1993.
24. Eugene Spafford. Observing reusable password choices. In Proceedings of the 3rd USENIX UNIX Security Symposium, Baltimore, MD, September 1992.
25. J.G. Steiner, B.C. Neuman, and J.I. Schiller. Kerberos: an authentication service for open network systems. In Usenix Conference Proceedings, pages 191-202, Dallas, Texas, February 1988.
26. P. C. van Oorschotand M. J. Wiener. On Diffie-Hellman key agreement with short exponents. In Proceedings of Eurocrypt '96 (to appear). Springer-Verlag, 1996.