Abstract:Password-based mechanism is the widely used method for authentication since it allows people to choose their own passwords without any assistant device to generate or store. However, people are used to choose easy-to-remember passwords such that guessing attacks could succeed. In 1992, Bellovin and Merritt proposed Encrypted Key Exchange (EKE) protocols for preventing guessing attacks, in which two communication parties A and B securely share a possibly weak password in advance. In large communication environments, it is inconvenient in key management that every two communication parties mutually share a secret. Three-party EKE protocols, in which all parties (clients) share their secrets with a trusted server only, are more suitable for large communication environments. In 1995, Steiner, Tsudik and Waidner proposed a realization of three-party EKE protocol which is later demonstrated that it is vulnerable to undetectable on-line guessing attacks. In this paper, We will show a new off-line guessing attack on Steiner, Tsudik and Waidners' protocol. Besides, we will also propose a new three-party EKE protocol which not only is secure against both the off-line guessing attack and undetectable on-line guessing attacks but also satisfies the security properties of perfect forward secrecy and known-key security.

Prevention of Man-In-The-Middle Attack in Diffie-Hellman Key Exchange under Specific Environment

Research on User Authentication Scheme against the Man-in-the-Middle Attack.

Man in The Middle Attacks Against SSL/TLS: Mitigation and Defeat

The Principle and Prevention of SSL Man-in-the-middle Attack

Key Exchange Technology in Internet Security Protocols

A Privacy-preserving RFID Authenticate Protocols Against Man-in-themiddle Attacks

User Authentication Scheme Based on D-H Key Exchange Protocol

A Mutual Authentication Improvement for Traditional Unidirectional ECDLP-Based RFID Authentication Protocols

Three-party Encrypted Key Exchange

Privacy-Preserving Authenticated Key-Exchange over Internet

Diffie-Hellman Key Distribution in Wireless Multi-Way Relay Networks.

Efficient and Practical DHEKE Protocols.

The New Enhanced Simple Authenticated Key Agreement Algorithm

Two Secure Key Exchange Protocols

Tripartite Authenticated Key Exchange Protocol based on Identity

Method Of Attacking A New Diffie-Hellman Like Public-Key Scheme

Deniable Internet Key Exchange

Impersontion Attack on Mutual Authentication and Key Establishment Protocol for Communication Networks

Efficient Three-Party Password-Based Authenticated Key Exchange Protocol

Deniable Authentication Protocol Based on Deffie-Hellman Algorithm

Provably Secure Password-Authenticated Key Exchange Using Diffie-Hellman