Security design for three-party encrypted key exchange protocol using smart cards

Authors:
Chin-Chen Chang;Jung-San Lee;Ting-Fang Cheng
Affiliations:
Feng Chia University, Taichung, Taiwan, R.O.C.;National Chung Cheng University, Chiayi, Taiwan, R.O.C.;National Tsing-Hua University, Hsinchu, Taiwan, R.O.C.
Venue:
Proceedings of the 2nd international conference on Ubiquitous information management and communication
Year:
2008

Citing 7
Cited 1

Refinement and extension of encrypted key exchange

ACM SIGOPS Operating Systems Review
Applied cryptography (2nd ed.): protocols, algorithms, and source code in C

Applied cryptography (2nd ed.): protocols, algorithms, and source code in C
Three-party encrypted key exchange: attacks and a solution

ACM SIGOPS Operating Systems Review
Smart Card Handbook

Smart Card Handbook
Encrypted Key Exchange: Password-Based Protocols SecureAgainst Dictionary Attacks

SP '92 Proceedings of the 1992 IEEE Symposium on Security and Privacy
Secure key agreement protocols for three-party against guessing attacks

Journal of Systems and Software - Special issue: Software engineering education and training
Efficient three-party key exchange using smart cards

IEEE Transactions on Consumer Electronics

Provably secure three-party authenticated key agreement protocol using smart cards

Computer Networks: The International Journal of Computer and Telecommunications Networking

Quantified Score

Hi-index	0.00

Visualization

Abstract

Three-Party encrypted key exchange (3PEKE) protocol is an important cryptographic mechanism, enabling two clients to communicate with each other through a trusted server. Specifically, it is often applied to provide confidential communications between two participants over an insecure network. In 2007, Lu and Cao proposed a simple and efficient version. Unfortunately, we find that there exists a design weakness in their mechanism. We therefore design a novel mechanism using smart cards. The smart-card based scheme (SC-3PEKE) not only confirms the security essentials of general 3PEKE methods, but also outperforms related works in terms of authentication overheads with the adoption of smart cards.