Abstract:Three-party password authenticated key exchange protocol is a very practical mechanism to establish secure session key through authenticating each other with the help of a trusted server. Most three-party password authenticated key exchange protocols only guarantee security in the random oracle model. However, a random oracle based cryptographic construction may be insecure when the oracle is replaced by real function. Moreover, some previous unknown attacks appear with the advance of the adversary capability. Therefore, a suitable standard model which can imitate a wider variety of attack scenarios for 3PAKE protocol is needed. Aim at resisting dictionary attack, unknown key-share attack and password-compromise impersonation attack, an expanded standard model for 3PAKE protocol is given. Meanwhile, through applying ElGamal encryption scheme and pseudorandom function, a specific three-party password authenticated key exchange protocol is proposed. The security of the proposed protocol is proven in the new standard model. The result shows that the present protocol has stronger security by comparing with other existing protocols, which covers the following security properties: (1) semantic security, (2) key privacy, (3) client-to-server authentication, (4) mutual authentication, (5) resistance to various known attacks, and (6) forward security.

Efficient Password-Based Authenticated Key Exchange Protocol under Standard Model

Efficient Three-Party Password-Based Authenticated Key Exchange Protocol

Password-authenticated key exchange protocol based on certificateless key encapsulation in the standard model

Provably Secure Three-Party Password Authenticated Key Exchange Protocol in the Standard Model.

Efficient Password-Based Authenticated Group Key Exchange Protocol

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

An Efficient Delegation-Based Anonymous Authentication Protocol

Provably Secure Password-Authenticated Key Exchange Using Diffie-Hellman

Weaknesses of a Password-Authenticated Key Exchange Protocol between Clients with Different Passwords

A new framework for efficient password-based authenticated key exchange

An Efficient Password-Only Two-Server Authenticated Key Exchange System

Provably Secure Three-Party Password-Authenticated Key Exchange

A verifier-based password-authenticated key exchange protocol via elliptic curves

Analysis and Improvement of a Password-Based Authenticated Key Exchange Protocol

A Provably-Secure and Efficient Verifier-Based Anonymous Password-Authenticated Key Exchange Protocol

Simple three-party password-based key exchange protocol with provable security

Security Analysis on an Improvement of RSA-Based Password Authenticated Key Exchange.

Simple authenticated key agreement protocol resistant to password guessing attacks.

Weakness Analysis and Improvement of a Gateway-Oriented Password-Based Authenticated Key Exchange Protocol

A Secure and Efficient Password-Authenticated Group Key Exchange Protocol for Mobile Ad Hoc Networks.

Provable Password-Based Tripartite Key Agreement Protocol.