title: Password-only authenticated three-party key exchange with provable security in the standard model.
abstract: Protocols for password-only authenticated key exchange (PAKE) in the three-party setting allow two clients registered with the same authentication server to derive a common secret key from their individual password shared with the server. Existing three-party PAKE protocols were proven secure under the assumption of the existence of random oracles or in a model that does not consider insider attacks. Therefore, these protocols may turn out to be insecure when the random oracle is instantiated with a particular hash function or an insider attack is mounted against the partner client. The contribution of this paper is to present the first three-party PAKE protocol whose security is proven without any idealized assumptions in a model that captures insider attacks. The proof model we use is a variant of the indistinguishability-based model of Bellare, Pointcheval, and Rogaway (2000), which is one of the most widely accepted models for security analysis of password-based key exchange protocols. We demonstrated that our protocol achieves not only the typical indistinguishability-based security of session keys but also the password security against undetectable online dictionary attacks.
authors: Department of Computer Engineering, Konkuk University, 268 Chungwondaero, Chungju, Chungcheongbukdo 380-701, Republic of Korea.
authors: Junghyun
authors: J
authors: Nam
authors: Information Assurance Research Group, Advanced Computing Research Centre, University of South Australia, Mawson Lakes, SA 5095, Australia.
authors: Kim-Kwang Raymond
authors: 0000-0001-9208-5336
authors: KK
authors: Choo
authors: Department of Computer Engineering, Konkuk University, 268 Chungwondaero, Chungju, Chungcheongbukdo 380-701, Republic of Korea.
authors: Junghwan
authors: J
authors: Kim
authors: Department of Computer Engineering, Konkuk University, 268 Chungwondaero, Chungju, Chungcheongbukdo 380-701, Republic of Korea.
authors: Hyun-Kyu
authors: HK
authors: Kang
authors: Department of Computer Engineering, Konkuk University, 268 Chungwondaero, Chungju, Chungcheongbukdo 380-701, Republic of Korea.
authors: Jinsoo
authors: J
authors: Kim
authors: Department of Computer Engineering, Sungkyunkwan University, 2066 Seoburo, Suwon, Gyeonggido 440-746, Republic of Korea.
authors: Juryon
authors: J
authors: Paik
authors: Department of Computer Engineering, Sungkyunkwan University, 2066 Seoburo, Suwon, Gyeonggido 440-746, Republic of Korea.
authors: Dongho
authors: 0000-0002-5208-1338
authors: D
authors: Won
mesh_terms: D000465:Algorithms; D016494:Computer Security; D005716:Game Theory; D016247:Information Storage and Retrieval / Q000379:methods*