Simple Three-Party Password Authenticated Key Exchange Protocol

• 作 者: 罗乃维 叶国晖
• 机 构: Department of Information Management, National Taiwan University of Science and Technology,Departmen
• 出 处: Journal of Shanghai Jiaotong University(Science)
• 发表日期: 2011年05期
• 关键词: robustness password dictionary preserving weakness party authentic secure correc

Three-party password authenticated key exchange (3PAKE) protocol plays a significant role in the history of secure communication area in which two clients agree a robust session key in an authentic manner based on passwords. In recent years, researchers focused on developing simple 3PAKE (S-3PAKE) protocol to gain system e?ciency while preserving security robustness for the system. In this study, we first demonstrate how an undetectable on-line dictionary attack can be successfully applied over three existing S-3PAKE schemes. An error correction code (ECC) based S-3PAKE protocol is then introduced to eliminate the identified authentication weakness.

Three-party password authenticated key exchange (3PAKE) protocol plays a significant role in the history of secure communication area in which two clients agree a robust session key in an authentic manner based on passwords. S-3PAKE) protocol to gain system e? Ciency while preserving security robustness for the system. In this study, we first demonstrated how an undetectable on-line dictionary attack can be successfully applied over three existing S-3 PAKE schemes. (ECC) based S-3PAKE protocol is then introduced to eliminate the identified authentication weakness.