Secure protected password change scheme

Authors:
Eun-Jun Yoon;Eun-Kyung Ryu;Kee-Young Yoo
Affiliations:
Department of Computer Engineering, Kyungpook National University, Daegu, Republic of Korea;Department of Computer Engineering, Kyungpook National University, Daegu, Republic of Korea;Department of Computer Engineering, Kyungpook National University, Daegu, Republic of Korea
Venue:
MMM-ACNS'05 Proceedings of the Third international conference on Mathematical Methods, Models, and Architectures for Computer Network Security
Year:
2005

Citing 7
Cited 0

Augmented encrypted key exchange: a password-based protocol secure against dictionary attacks and password file compromise

CCS '93 Proceedings of the 1st ACM conference on Computer and communications security
Public-key cryptography and password protocols

ACM Transactions on Information and System Security (TISSEC)
Handbook of Applied Cryptography

Handbook of Applied Cryptography
Encrypted Key Exchange: Password-Based Protocols SecureAgainst Dictionary Attacks

SP '92 Proceedings of the 1992 IEEE Symposium on Security and Privacy
Authenticated key exchange secure against dictionary attacks

EUROCRYPT'00 Proceedings of the 19th international conference on Theory and application of cryptographic techniques
Provably secure password-authenticated key exchange using Diffie-Hellman

EUROCRYPT'00 Proceedings of the 19th international conference on Theory and application of cryptographic techniques
A framework for password-based authenticated key exchange

EUROCRYPT'03 Proceedings of the 22nd international conference on Theory and applications of cryptographic techniques

Quantified Score

Hi-index	0.00

Visualization

Abstract

Recently, Lin-Hwang proposed a password authentication scheme with secure password updating. The current paper demonstrates the vulnerability of Lin-Hwang's scheme to server data eavesdropping and presents improvements to resolve this problem. In contrast to Lin-Hwang's scheme, the proposed scheme can simply update user passwords without a complicated process and provide explicit key authentication in the case of a session key agreement.