Article citationsMore>>

Bellovin, S.M. and Merritt, M. (1992) Encrypted Key Exchange: Password-Based Protocols Secure against Dictionary Attacks. IEEE Computer Society Symposium on Research in Security and Privacy, Oakland, 4-6 May 1992, 72-84.

has been cited by the following article:

• TITLE: A Two-Party Password-Authenticated Key Exchange Protocol with Verifier

  AUTHORS: Shunbo Xiang, Bing Xu, Ke Chen

  KEYWORDS: Verifier, Password-Authenticated, Key Exchange, Fake Attack, Dictionary Attack, Session Key

  JOURNAL NAME: Journal of Computer and Communications, Vol.9 No.4, April 29, 2021

  ABSTRACT: To tackle with the security lack in the password-authenticated key exchange protocol, this paper proposes a two-party password-authenticated key exchange protocol based on a verifier. In the proposed protocol, a user stores his password in plaintext, and the server stores a verifier for the user’s password, using DL difficult problem and DH difficult problem, through the session between user and server to establish a session key. The security discussion result shows that the proposed protocol provides forward secrecy, and can effectively defend against server compromising fake attacks, dictionary attacks and middleman attacks. Protocol efficiency comparisons reveal our protocol is more reasonable.