[Resource Topic] 2005/141: Enhanced password-based key establishment protocol

Welcome to the resource topic for 2005/141

Title:
Enhanced password-based key establishment protocol

Authors: Qiang Tang, Chris J. Mitchell

Abstract:

In this paper we analyse a password-based authenticated key establishment protocol due to Laih, Ding and Huang, which enables a user to authenticate himself to a server and negotiate a shared session key. This protocol is also designed to guarantee that a human being is actually involved in an ongoing protocol execution. However we show that the protocol suffers from offline dictionary attacks. We propose an enhanced password-based authenticated key establishment protocol which is secure against offline dictionary attacks, and that possesses an additional feature guaranteeing that a user is involved in each protocol execution.

ePrint: https://eprint.iacr.org/2005/141

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .