JISE


  [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18]


Journal of Information Science and Engineering, Vol. 27 No. 4, pp. 1487-1501


Secure Verifier-Based Three-Party Key Exchange in the Random Oracle Model


HUNG-YU CHIEN
Department of Information Management 
National Chi Nan University 
Puli, 545 Taiwan


    A Three Party password Authenticated Key Exchange protocol (3PAKE) facilitates two clients to establish authenticated session keys via the help of a trusted server. This approach enhances the scalability of key agreement issue and facilitates users’ convenience in distributed environments. In this paper, we show the security weaknesses of previous works, and then propose our new scheme, using password verifiers. The scheme is efficient, and the key indistinguishability is proved relative to the computational Diffie-Hellman problem. It is the first provably secure verifier-based 3PAKE protocol.


Keywords: authentication, key agreement, three-party password authenticated key exchange protocol, password, guessing attacks

  Retrieve PDF document (JISE_201104_18.pdf)