Abstract:Authenticated Key Exchange (AKE) is a cryptographic scheme with the aim to establish a high-entropy and secret session key over a insecure communications network. Password-Authenticated Key Exchange (PAKE) assumes that the parties in play share a simple password, which is cheap and human-memorable and is used to achieve the authentication. PAKEs are practically relevant as these features are extremely appealing in an age where most people access sensitive personal data remotely from more-and-more pervasive hand-held devices. Theoretically, PAKEs allow the secure computation and authentication of a high-entropy piece of data using a low-entropy string as a starting point. In this paper, we apply the recently proposed technique introduced in [19] to construct two lattice-based PAKE protocols enjoying a very simple and elegant design that is an parallel extension of the class of Random Oracle Model (ROM)-based protocols PAK and PPK [13,41], but in the lattice-based setting. The new protocol resembling PAK is three-pass, and provides mutual explicit authentication, while the protocol following the structure of PPK is two-pass, and provides implicit authentication. Our protocols rely on the Ring-Learning-with-Errors (RLWE) assumption, and exploit the additive structure of the underlying ring. They have a comparable level of efficiency to PAK and PPK, which makes them highly attractive. We present a preliminary implementation of our protocols to demonstrate that they are both efficient and practical. We believe they are suitable quantum safe replacements for PAK and PPK.

Strong password-only authenticated key exchange

An Efficient Password-Only Two-Server Authenticated Key Exchange System

Provably Secure Password-Authenticated Key Exchange Using Diffie-Hellman

Public-key cryptography and password protocols

Simple authenticated key agreement protocol resistant to password guessing attacks.

Efficient Password-Based Authenticated Key Exchange Protocol under Standard Model

Three-party Encrypted Key Exchange

A new framework for efficient password-based authenticated key exchange

Efficient Three-Party Password-Based Authenticated Key Exchange Protocol

Simple three-party password-based key exchange protocol with provable security

ID Authentication-based Key Exchange for Wireless Security

Weakness Analysis and Improvement of a Gateway-Oriented Password-Based Authenticated Key Exchange Protocol

Multi Server Password Authenticated Key Exchange Using Attribute-Based Encryption

KeyAuth: Bringing Public-key Authentication to the Masses

Provably Secure Password Authenticated Key Exchange Based On Rlwe For The Post-Quantum World

Cryptanalysis of a Simple Three-party Key Exchange Protocol

Weaknesses of a Password-Authenticated Key Exchange Protocol between Clients with Different Passwords

A verifier-based password-authenticated key exchange protocol via elliptic curves

Security Analysis on an Improvement of RSA-Based Password Authenticated Key Exchange.

Password-authenticated key exchange protocol based on certificateless key encapsulation in the standard model

Enhanced Three-Party Encrypted Key Exchange Without Server Public Keys