Abstract:When designing password-authenticated key exchange protocols (as opposed to key exchange protocols authenticated using crypto-graphically secure keys), one must not allow any information to be leaked that would allow verification of the password (a weak shared key), since an attacker who obtains this information may be able to run an off-line dictionary attack to determine the correct password. We present a new protocol called PAK which is the first Diffie-Hellman-based password-authenticated key exchange protocol to provide a formal proof of security (in the random oracle model) against both passive and active adversaries. In addition to the PAK protocol that provides mutual explicit authentication, we also show a more efficient protocol called PPK that is provably secure in the implicit-authentication model. We then extend PAK to a protocol called PAK-X, in which one side (the client) stores a plaintext version of the password, while the other side (the server) only stores a verifier for the password. We formally prove security of PAK-X, even when the server is compromised. Our formal model for password-authenticated key exchange is new, and may be of independent interest.

Password-based Dynamic Group Key Agreement

Group Key Agreement Protocol Based on M-Tree and DMDH Assumption

A Group Key Agreement Protocol Based on ECDH and Short Signature

Efficient and provably secure password-based group key agreement protocol

A Dynamic Scheme For Authenticated Group Key Agreement Protocol

Pairings-Based Protocol for Group Key Agreement

Provable Password-Based Tripartite Key Agreement Protocol.

ECC based dynamic multiparty key agreement

Authenticated group key agreement with admission control

Efficient Authenticated Key Agreement Protocol for Dynamic Groups

Npake+: A Tree-Based Group Password-Authenticated Key Exchange Protocol Using Different Passwords

Threshold password-based authenticated group key exchange in gateway-oriented setting

ID-based One Round Authenticated Group Key Agreement Protocol with Bilinear Pairings

On the Security of a Group Key Agreement Protocol and Its Improvement with Pairings

Id-Based Tripartite Key Agreement Protocol With Pairings

Provably Secure Password-Authenticated Key Exchange Using Diffie-Hellman

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

Simple three-party password-based key exchange protocol with provable security

Identity-based Dynamic Group Key Agreement Protocol for Mobile Networks

Efficient Password-Based Authenticated Group Key Exchange Protocol

Efficient Three-Party Password-Based Authenticated Key Exchange Protocol