Abstract:One of the prominent advantages of password-only two-server authenticated key exchange is that the user password will remain secure against offline dictionary attacks even after one of the servers has been compromised. The first system of this type was proposed by Yang, Deng and Bao in 2006. The system is efficient with a total of eight communication rounds in one protocol run. However, the security assumptions are strong. It assumes that one particular server cannot be compromised by an active adversary. It also assumes that there exists a secure communication channel between the two servers. Recently, a new protocol has been proposed by the same group of researchers. The new one removes these assumptions, but in return pays a very high price on the communication overhead. It takes altogether ten rounds to complete one protocol run and requires more computation. Therefore, the question remains is whether it is possible to build a protocol which can significantly reduce the number of communication rounds without introducing additional security assumptions or computational complexity. In this paper, we give an affirmative answer by proposing a very efficient protocol with no additional assumption introduced. The protocol requires only six communication rounds without increasing the computational complexity.

An Improved Kerberos Protocol Based on Diffie-Hellman-DSA Key Exchange.

An Enhanced Kerberos Protocol with Non-Interactive Zero-Knowledge Proof

An enhanced Kerberos protocol based on one-time password

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

Efficient Three-Party Password-Based Authenticated Key Exchange Protocol

An Efficient Delegation-Based Anonymous Authentication Protocol

An Improved Authenticated Key Agreement Protocol

Privacy-Preserving Authenticated Key-Exchange over Internet

Efficient and Practical DHEKE Protocols.

Security Analysis on an Improvement of RSA-Based Password Authenticated Key Exchange.

Provably Secure Password-Authenticated Key Exchange Using Diffie-Hellman

Password-based Authentication and Key Distribution Protocols with Perfect Forward Secrecy

Efficient Password-Based Authenticated Group Key Exchange Protocol

User Authentication Scheme Based on D-H Key Exchange Protocol

Study and Amend Dynamic Password Authentication Scheme

Improvement of Password Authenticated Key Exchange Based on Rsa for Imbalanced Wireless Networks

An Improved Anonymous Remote User Authentication Scheme with Key Agreement Based on Dynamic Identity

Weakness Analysis and Improvement of a Gateway-Oriented Password-Based Authenticated Key Exchange Protocol

A Dynamic Scheme For Authenticated Group Key Agreement Protocol

Analysis and Improvement of a Password-Based Authenticated Key Exchange Protocol

An Efficient Password-Only Two-Server Authenticated Key Exchange System