Two-round password-only authenticated key exchange in the three-party setting

DOI10.3390/SYM7010105MaRDI QIDQ2406196zbMATH OpenOpenAlexWikidataFDO

Authors Junghyun Nam, Kim-Kwang Raymond Choo, Sangchul Han, Juryon Paik, Dongho Won

Publication date 27 September 2017

Published in Symmetry (Search for Journal in Brave)

Copyright license Creative Commons Attribution 4.0 International

Full work available at URL https://doi.org/10.3390/sym7010105

zbMATH Keywords

communication rounddictionary attackimplicit key authenticationpassword-only authenticated key exchange (PAKE)symmetric encryptionthree-party key exchange

Mathematics Subject Classification ID

Cryptography (94A60) Authentication, digital signatures and secret sharing (94A62)

Review text

Summary: We present the first provably-secure three-party password-only authenticated key exchange (PAKE) protocol that can run in only two communication rounds. Our protocol is generic in the sense that it can be constructed from any two-party PAKE protocol. The protocol is proven secure in a variant of the widely-accepted model of Bellare, Pointcheval and Rogaway [\textit{M. Bellare} et al., Eurocrypt 2000, Lect. Notes Comput. Sci. 1807, 139--155 (2000; Zbl 1082.94533)] without any idealized assumptions on the cryptographic primitives used. We also investigate the security of the two-round, three-party PAKE protocol of Wang, Hu and Li [\textit{W. Wang} et al., Inscrypt 2010, Lect. Notes Comput. Sci. 6584, 218--235 (2011; Zbl 1295.94151)] and demonstrate that this protocol cannot achieve implicit key authentication in the presence of an active adversary.

Recommendations

• Public Key Cryptography - PKC 2005
• How to Construct Secure and Efficient Three-Party Password-Based Authenticated Key Exchange Protocols
• Efficient and Provably Secure Generic Construction of Three-Party Password-Based Authenticated Key Exchange Protocols
• Cryptanalysis of a communication-efficient three-party password authenticated key exchange protocol
• Provably secure three-party password-based authenticated key exchange protocol

Cited in

(10)

• Optimizing a password hashing function with hardware-accelerated symmetric encryption
• Provably Secure N-Party Authenticated Key Exchange in the Multicast DPWA Setting
• Password-based authenticated key exchange without centralized trusted setup
• An Efficient Password-Only Two-Server Authenticated Key Exchange System
• Efficient and Provably Secure Generic Construction of Three-Party Password-Based Authenticated Key Exchange Protocols
• Efficient and Strongly Secure Password-Based Server Aided Key Exchange (Extended Abstract)
• Public Key Cryptography - PKC 2005
• A modular security analysis of EAP and IEEE 802.11
• Simple password-based three-party authenticated key exchange without server public keys
• Communication-efficient three-party protocols for authentication and key agreement

This page was built for publication: Two-round password-only authenticated key exchange in the three-party setting

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2406196)