CRYPTANALYSIS OF SOME CLIENT-TO-CLIENT PASSWORD-AUTHENTICATED KEY EXCHANGE PROTOCOLS

摘要：

The cross-domain client-to-client passwordauthenticated key exchange (C2C-PAKE) protocols allow two client entities from different domains to establish a shared common session key based on their passwords. Most existing schemes make an improvement based on the prototype of the C2C-PAKE protocol proposed by Byun20071. Recently, Feng et al2 and Liu et al3 respectively proposed an efficient C2C-PAKE protocol which was based on the public key mechanism. In this paper, by cryptanalysis on these schemes, we find that the above protocols are easy to suffer from some unknown key share attacks, and furthermore, we search out the reasons that cause these situations happened and give some suggestions to improve these situations.

关键词： authentication cryptanalysis password-authenticated key agreement crossdomain

作者: Xiaobiao Li Qiaoyan Wen

作者单位: State Key Laboratory of Networking and Switching Technology,Beijing University of Posts and Telecommunications, Beijing, 100876, China

会议类型: 国际会议

会议名称: 2010 3rd IEEE International Conference on Broadband Network & Multimedia Technology(2010年第三届IEEE宽带网络与多媒体国际会议 IC-BNMT 2010)

会议地点: 北京

会议语种:英文

页码: 654-658

在线出版日期: 2010-10-26（万方平台首次上网日期，不代表论文的发表时间）