Verifier-based password-authenticated key exchange protocol in cross-realm setting

Authors:
Xiumei Liu;Fucai Zhou;Guiran Chang
Affiliations:
School of Information Science & Engineering, Northeastern University, Shenyang, China;School of Information Science & Engineering, Northeastern University, Shenyang, China;School of Information Science & Engineering, Northeastern University, Shenyang, China
Venue:
CCDC'09 Proceedings of the 21st annual international conference on Chinese control and decision conference
Year:
2009

Citing 12
Cited 0

Entity authentication and key distribution

CRYPTO '93 Proceedings of the 13th annual international cryptology conference on Advances in cryptology
Timestamps in key distribution protocols

Communications of the ACM
Password-Authenticated Key Exchange between Clients with Different Passwords

ICICS '02 Proceedings of the 4th International Conference on Information and Communications Security
Secure key agreement protocols for three-party against guessing attacks

Journal of Systems and Software - Special issue: Software engineering education and training
Efficient verifier-based password-authenticated key exchange in the three-party setting

Computer Standards & Interfaces
EC2C-PAKA: An efficient client-to-client password-authenticated key agreement

Information Sciences: an International Journal
Cryptanalysis and Improvement of EC2C-PAKA Protocol in Cross-Realm

NPC '08 Proceedings of the 2008 IFIP International Conference on Network and Parallel Computing
Authenticated key exchange secure against dictionary attacks

EUROCRYPT'00 Proceedings of the 19th international conference on Theory and application of cryptographic techniques
Provably secure password-authenticated key exchange using Diffie-Hellman

EUROCRYPT'00 Proceedings of the 19th international conference on Theory and application of cryptographic techniques
Password-Based authenticated key exchange in the three-party setting

PKC'05 Proceedings of the 8th international conference on Theory and Practice in Public Key Cryptography
Secure cross-realm C2C-PAKE protocol

ACISP'06 Proceedings of the 11th Australasian conference on Information Security and Privacy
One-Round protocol for two-party verifier-based password-authenticated key exchange

CMS'06 Proceedings of the 10th IFIP TC-6 TC-11 international conference on Communications and Multimedia Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Most existing password-based authenticated key exchange(PAKE) protocols in cross-realm setting are based on balance scheme, which is vulnerable to password guessing attacks and server compromise attack. In this paper, we propose a verifier-based PAKE protocol in cross-realm setting called VB-4PAKE, in which the client uses a plaintext version of the password, while the server stores a verifier of the password. We also show that the proposed protocol can resist various attacks including password guessing attacks and server compromise attack.