Abstract:One of the prominent advantages of password-only two-server authenticated key exchange is that the user password will remain secure against offline dictionary attacks even after one of the servers has been compromised. The first system of this type was proposed by Yang, Deng and Bao in 2006. The system is efficient with a total of eight communication rounds in one protocol run. However, the security assumptions are strong. It assumes that one particular server cannot be compromised by an active adversary. It also assumes that there exists a secure communication channel between the two servers. Recently, a new protocol has been proposed by the same group of researchers. The new one removes these assumptions, but in return pays a very high price on the communication overhead. It takes altogether ten rounds to complete one protocol run and requires more computation. Therefore, the question remains is whether it is possible to build a protocol which can significantly reduce the number of communication rounds without introducing additional security assumptions or computational complexity. In this paper, we give an affirmative answer by proposing a very efficient protocol with no additional assumption introduced. The protocol requires only six communication rounds without increasing the computational complexity.

Remote User Fast Authenticated Key Exchange Protocol Based on ECDLP

An Efficient EAP-Based Pre-Authentication for Inter-WRAN Handover in TV White Space

An Efficient Delegation-Based Anonymous Authentication Protocol

A Secure and Efficient Remote User Authentication Scheme for Multi-server Environments Using ECC.

An ECDLP-Based Randomized Key RFID Authentication Protocol

Robust and Efficient Remote Authentication with Key Agreement Protocol

An Efficient Two‐party Authentication Key Exchange Protocol for Mobile Environment

A User Authentication Scheme Based on Elliptic Curves Cryptography for Wireless Ad Hoc Networks

An Efficient Certificateless User Authentication and Key Exchange Protocol for Client-Server Environment.

An improved and provable remote user authentication scheme based on elliptic curve cryptosystem with user anonymity

An Efficient Password-Only Two-Server Authenticated Key Exchange System

A Secure Key Exchange and Mutual Authentication Protocol for Wireless Mobile Communications

Privacy-Enhancing Authenticated Key Agreement Protocols Based on Elliptic Curve Cryptosystem

ID Authentication-based Key Exchange for Wireless Security

An Id-Based Three-Party Authenticated Key Exchange Protocol Using Elliptic Curve Cryptography for Mobile-Commerce Environments

Simple three-party password-based key exchange protocol with provable security

An Improved Two-Party Authentication Key Exchange Protocol for Mobile Environment

Certificateless Two-party Identification Protocol Based on Bilinear-Pairing and DLP

A Mutual Authentication Improvement for Traditional Unidirectional ECDLP-Based RFID Authentication Protocols

A verifier-based password-authenticated key exchange protocol via elliptic curves

Distributed Authentication Protocol Based on Elliptic Curves in Wireless Sensor Networks