Abstract:Three-party password authenticated key exchange protocol is a very practical mechanism to establish secure session key through authenticating each other with the help of a trusted server. Most three-party password authenticated key exchange protocols only guarantee security in the random oracle model. However, a random oracle based cryptographic construction may be insecure when the oracle is replaced by real function. Moreover, some previous unknown attacks appear with the advance of the adversary capability. Therefore, a suitable standard model which can imitate a wider variety of attack scenarios for 3PAKE protocol is needed. Aim at resisting dictionary attack, unknown key-share attack and password-compromise impersonation attack, an expanded standard model for 3PAKE protocol is given. Meanwhile, through applying ElGamal encryption scheme and pseudorandom function, a specific three-party password authenticated key exchange protocol is proposed. The security of the proposed protocol is proven in the new standard model. The result shows that the present protocol has stronger security by comparing with other existing protocols, which covers the following security properties: (1) semantic security, (2) key privacy, (3) client-to-server authentication, (4) mutual authentication, (5) resistance to various known attacks, and (6) forward security.

Provably Secure Two-party Password-Based Key Agreement Protocol

Provable Password-Based Tripartite Key Agreement Protocol.

Efficient and provably secure password-based group key agreement protocol

Provably Secure Three-Party Password-Authenticated Key Exchange

Provably Secure Three-Party Password Authenticated Key Exchange Protocol in the Standard Model.

Efficient Three-Party Password-Based Authenticated Key Exchange Protocol

New identity-based three-party authenticated key agreement protocol with provable security

Provably Secure Three-Party Password-Based Authenticated Key Exchange Protocol

Provably Secure Password-Authenticated Key Exchange Using Diffie-Hellman

Password-based Authenticated Key Agreement Scheme with Mutual Anonymity for Trusted Computation

Secure one-pass and two-party authenticated key agreement protocol

Secure verifier-based three-party password-authenticated key exchange

Simple three-party password-based key exchange protocol with provable security

Secure Key Agreement Protocols for Three-Party Against Guessing Attacks

Provably secure and efficient certificateless authenticated tripartite key agreement protocol.

A verifier-based password-authenticated key exchange protocol via elliptic curves

Efficient Password-Based Authenticated Key Exchange Protocol under Standard Model

An efficient two-factor authentication protocol based on elliptic curve cryptosystem with provable security

Cryptanalysis of a Three-Party Password-Based Authenticated Key Exchange Protocol Using Weil Pairing.

Public-key cryptography and password protocols

Provably secure identity-based two-party authenticated key agreement protocol