Abstract:Authenticated Key Exchange (AKE) is a cryptographic scheme with the aim to establish a high-entropy and secret session key over a insecure communications network. Password-Authenticated Key Exchange (PAKE) assumes that the parties in play share a simple password, which is cheap and human-memorable and is used to achieve the authentication. PAKEs are practically relevant as these features are extremely appealing in an age where most people access sensitive personal data remotely from more-and-more pervasive hand-held devices. Theoretically, PAKEs allow the secure computation and authentication of a high-entropy piece of data using a low-entropy string as a starting point. In this paper, we apply the recently proposed technique introduced in [19] to construct two lattice-based PAKE protocols enjoying a very simple and elegant design that is an parallel extension of the class of Random Oracle Model (ROM)-based protocols PAK and PPK [13,41], but in the lattice-based setting. The new protocol resembling PAK is three-pass, and provides mutual explicit authentication, while the protocol following the structure of PPK is two-pass, and provides implicit authentication. Our protocols rely on the Ring-Learning-with-Errors (RLWE) assumption, and exploit the additive structure of the underlying ring. They have a comparable level of efficiency to PAK and PPK, which makes them highly attractive. We present a preliminary implementation of our protocols to demonstrate that they are both efficient and practical. We believe they are suitable quantum safe replacements for PAK and PPK.

On Security Analysis of an After-the-fact Leakage Resilient Key Exchange Protocol

Improvement of Provably Secure Self-Certified Proxy Convertible Authenticated Encryption Scheme

Defending Against Key Exposure in Attribute-Based Encryption

Taxonomical Security Consideration Of Authenticated Key Exchange Resilient To Intermediate Computation Leakage

CCA Secure Threshold KEM Scheme Against Adaptive Corruption Attacks in Standard Model

Security Weakness of Flexible Group Key Exchange with On-Demand Computation of Subgroup Keys

ABAEKS: Attribute-Based Authenticated Encryption With Keyword Search Over Outsourced Encrypted Data

Adaptive Side-Channel Analysis Model and Its Applications to White-Box Block Cipher Implementations.

A Note on the Security of KHL Scheme

Revisiting OAKE in the Eck Security Model

Provably Secure Password Authenticated Key Exchange Based On Rlwe For The Post-Quantum World

Large Universe CCA2 CP-ABE With Equality and Validity Test in the Standard Model

Security Analysis on an Improvement of RSA-Based Password Authenticated Key Exchange.

On the "Security analysis and improvements of arbitrated quantum signature schemes"

Cryptanalysis of Aydos Et Al.'s ECC-based Wireless Authentication Protocol

Provably secure identity-based two-party authenticated key agreement protocol

Further Analysis and Improvements of a Lattice-Based Anonymous PAKE Scheme

Comments on "Dynamic Consensus Committee-Based for Secure Data Sharing With Authorized Multi-Receiver Searchable Encryption"

Collusion Attacks on Decentralized Attributed-Based Encryption: Analyses and a Solution

Authenticated Key Exchange from Ideal Lattices

Cryptanalysis and Improvement of Gateway-Oriented Password Authenticated Key Exchange Protocol Based on RSA