CRYPTANALYSIS AND IMPROVEMENT OF A PASSWORD-BASED KEY EXCHANGE PROTOCOL

摘要：

In 2002, Yeh and Sun proposed a simple authenticated key agreement protocol resistant to password guessing attacks. And they provided a formal proof of security to show its strength against both passive and active adversaries. However, the scheme presented by Yeh and Sun has secure flaws. In this paper, we provide the secure analysis of the scheme and show that it can not resist the stolen-verificr attack and manin-the-middle attack. Then we presents an improved scheme of the Yen-Suns scheme which is resistant to the stolen-verifier attack combining with man-in-themiddle attack.

关键词： Cryptanalysis Attack Password-based Key Ezchange

作者: FENG-MEI LIU SHI-XIN LUO CHUAN-LUN REN

作者单位: Department of Information Research, College of Information Engineering, Information Engineering Univ Aisino Corporation, No.18A, Xingshikou Road, Haidian District, Beijing, 100195, China Information Security Center, Beijing University of Posts and Telecommunications, Beijing, 100876, Ch

会议类型: 国际会议

会议名称: 2008 International Conference on Machine Learning and Cybernetics(2008机器学习与控制论国际会议)

会议地点: 昆明

会议语种:英文

页码: 3668-3672

在线出版日期: 2008-07-12（万方平台首次上网日期，不代表论文的发表时间）