Abstract:Three-party password authenticated key exchange protocol is a very practical mechanism to establish secure session key through authenticating each other with the help of a trusted server. Most three-party password authenticated key exchange protocols only guarantee security in the random oracle model. However, a random oracle based cryptographic construction may be insecure when the oracle is replaced by real function. Moreover, some previous unknown attacks appear with the advance of the adversary capability. Therefore, a suitable standard model which can imitate a wider variety of attack scenarios for 3PAKE protocol is needed. Aim at resisting dictionary attack, unknown key-share attack and password-compromise impersonation attack, an expanded standard model for 3PAKE protocol is given. Meanwhile, through applying ElGamal encryption scheme and pseudorandom function, a specific three-party password authenticated key exchange protocol is proposed. The security of the proposed protocol is proven in the new standard model. The result shows that the present protocol has stronger security by comparing with other existing protocols, which covers the following security properties: (1) semantic security, (2) key privacy, (3) client-to-server authentication, (4) mutual authentication, (5) resistance to various known attacks, and (6) forward security.

Password-authenticated key exchange protocol based on certificateless key encapsulation in the standard model

Efficient Password-Based Authenticated Key Exchange Protocol under Standard Model

An Efficient Delegation-Based Anonymous Authentication Protocol

Provably Secure Three-Party Password Authenticated Key Exchange Protocol in the Standard Model.

Secure one-pass and two-party authenticated key agreement protocol

A verifier-based password-authenticated key exchange protocol via elliptic curves

Provably Secure Password-Authenticated Key Exchange Using Diffie-Hellman

Analysis and Improvement of a Password-Based Authenticated Key Exchange Protocol

Efficient Three-Party Password-Based Authenticated Key Exchange Protocol

Efficient Password-Based Authenticated Group Key Exchange Protocol

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

Provably Secure Three-Party Authenticated Key Exchange Based on Certificateless Key Encapsulation Sensor Mechanism

Provably secure password authentication and key exchange protocol using smart card

Toward Pairing-Free Certificateless Authenticated Key Exchanges.

Weaknesses of a Password-Authenticated Key Exchange Protocol between Clients with Different Passwords

Yet Another Certificateless Three-Party Authenticated Key Agreement Protocol

Simple three-party password-based key exchange protocol with provable security

Tripartite Authenticated Key Exchange Protocol based on Identity

Provably secure and efficient certificateless authenticated tripartite key agreement protocol.

An Efficient Password-Only Two-Server Authenticated Key Exchange System

Two Secure Key Exchange Protocols