Abstract:With the gradual penetration of computers and communication networks into people's lives, more and more people begin to pay attention to the information security. Key agreement protocol provides identity authentication for participants in communication system and generates a temporary session key for participants to encrypt messages. Recently, Wang et al designed an authentication and key agreement (AKA) protocol based elliptic curve cryptosystem and proved that their scheme can resist various known attacks. In this article, we analyze the security of their scheme and demonstrate that it is vulnerable to the temporary factor leakage attacks and insider attacks. Then, based on the elliptic curve public key cryptographic algorithm, we design a secure anonymous two-factor user AKA protocol. And we use the well-known random oracle model (ROM) and traditional heuristic discussion to prove the security of the proposed protocol. By comparing with several existing protocols based on public key cryptography algorithm, it is found that this protocol is more secure and efficient. The security analysis shows that the protocol designed in this article can meet all kinds of security requirements and consumes the less computing resources on users and servers, and is especially suitable for the scenarios with high security and efficiency requirements.

A verifier-based password-authenticated key exchange protocol via elliptic curves

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

Secure verifier-based three-party password-authenticated key exchange

Weaknesses of a Password-Authenticated Key Exchange Protocol between Clients with Different Passwords

Efficient Three-Party Password-Based Authenticated Key Exchange Protocol

Cryptanalysis of Two Password Authenticated Key Exchange Protocols Based on RSA

Security Analysis of Yang et al.'s Practical Password-Based Two-Server Authentication and Key Exchange System

An Efficient Password-Only Two-Server Authenticated Key Exchange System

An efficient two-factor authentication protocol based on elliptic curve cryptosystem with provable security

Security Analysis on an Improvement of RSA-Based Password Authenticated Key Exchange.

Cryptanalysis of a Three-Party Password-Based Authenticated Key Exchange Protocol Using Weil Pairing.

An enhanced ID-based remote mutual authentication with key agreement protocol for mobile devices on elliptic curve cryptosystem.

Provably Secure Password-Authenticated Key Exchange Using Diffie-Hellman

Novel verifier-based three-party protocol for key exchange and authentication

Privacy-Enhancing Authenticated Key Agreement Protocols Based on Elliptic Curve Cryptosystem

Efficient Password-Based Authenticated Key Exchange Protocol under Standard Model

An Efficient Password Authentication Scheme Using Smart Card Based on Elliptic Curve Cryptography.

A Provably-Secure and Efficient Verifier-Based Anonymous Password-Authenticated Key Exchange Protocol

Simple three-party password-based key exchange protocol with provable security

Cryptanalysis of a Simple Three-party Key Exchange Protocol

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation