Two-Round Password-Only Authenticated Key Exchange in the Three-Party Setting

Symmetry

Junghyun Nam³  Kim-Kwang Raymond Choo¹  Sangchul Han³  Juryon Paik²  Dongho Won² 

[1] Information Assurance Research Group, Advanced Computing Research Centre, University of South Australia, Mawson Lakes, SA-5095, Australia; E-Mail:;Department of Computer Engineering, Sungkyunkwan University, 2066 Seoburo, Suwon, Gyeonggido 440-746, Korea; E-Mails:;Department of Computer Engineering, Konkuk University, 268 Chungwondaero, Chungju, Chungcheongbukdo 380-701, Korea; E-Mail:

关键词: password-only authenticated key exchange (PAKE);    three-party key exchange;    symmetric encryption;    communication round;    dictionary attack;    implicit key authentication;   

DOI  :  10.3390/sym7010105

来源: mdpi

【 摘 要 】

We present the first provably-secure three-party password-only authenticated key exchange (PAKE) protocol that can run in only two communication rounds. Our protocol is generic in the sense that it can be constructed from any two-party PAKE protocol. The protocol is proven secure in a variant of the widely-accepted model of Bellare, Pointcheval and Rogaway (2000) without any idealized assumptions on the cryptographic primitives used. We also investigate the security of the two-round, three-party PAKE protocol of Wang, Hu and Li (2010) and demonstrate that this protocol cannot achieve implicit key authentication in the presence of an active adversary.

【 授权许可】

CC BY   
© 2015 by the authors; licensee MDPI, Basel, Switzerland