TITLE:
A Two-Party Password-Authenticated Key Exchange Protocol with Verifier
AUTHORS:
Shunbo Xiang, Bing Xu, Ke Chen
KEYWORDS:
Verifier, Password-Authenticated, Key Exchange, Fake Attack, Dictionary Attack, Session Key
JOURNAL NAME:
Journal of Computer and Communications,
Vol.9 No.4,
April
29,
2021
ABSTRACT: To tackle with the security lack in the password-authenticated key exchange protocol, this paper proposes a two-party password-authenticated key exchange protocol based on a verifier. In the proposed protocol, a user stores his password in plaintext, and the server stores a verifier for the user’s password, using DL difficult problem and DH difficult problem, through the session between user and server to establish a session key. The security discussion result shows that the proposed protocol provides forward secrecy, and can effectively defend against server compromising fake attacks, dictionary attacks and middleman attacks. Protocol efficiency comparisons reveal our protocol is more reasonable.