Enhanced of Simple Three Party Key Exchange Protocol: Attacks and a Solution

Authors

  • H. K. Pathak
  • Manju Sanghi

Keywords:

key exchange protocols, password based key exchange protocols undetectable online password guessing attacks, off-line password guessing attacks, AVISPA

Abstract

In secure communication password based three party encrypted key exchange (3PEKE) protocols have become significant due to the simplicity of maintaining human memorable passwords. In 2007, Lu and Cao proposed a simple and efficient three party password based authenticated key exchange (S-3PAKE) protocol. In 2008, Guo et al. found that S-3PAKE protocol has some loop holes and attacked by man in the middle attack and on-line dictionary attack. They proposed an improved protocol by which two side users individually implement 2-PAKE protocol to obtain message authentication codes (MAC) prior to creating a shared session key. Recently, Yang et al. proposed an effective 3PAKE protocol without requiring the execution of 2 PAKE protocol. In this paper, we demonstrate that Yang et al.'s protocol is vulnerable to undetectable on-line password guessing attacks and off-line password guessing attacks. Besides, we also propose a new three party EKE protocol  which not only is secure against the guessing attacks but also satisfies the formal security   proof by AVISPA.

 

 

Published

2013-06-20

Issue

Vol. 1 No. 1 (2013)

Section

Articles

License

Declaration and Copyright Transfer Form

(to be completed by authors)

I/ We, the undersigned author(s) of the submitted manuscript, hereby declare, that the above manuscript which is submitted for publication in the STM Journals(s), is not published already in part or whole (except in the form of abstract) in any journal or magazine for private or public circulation, and, is not under consideration of publication elsewhere.

  • I/We will not withdraw the manuscript after 1 week of submission as I have read the Author Guidelines and will adhere to the guidelines.
  • I/We Author(s ) have niether given nor will give this manuscript elsewhere for publishing after submitting in STM Journal(s).
  • I/ We have read the original version of the manuscript and am/ are responsible for the thought contents embodied in it. The work dealt in the manuscript is my/ our own, and my/ our individual contribution to this work is significant enough to qualify for authorship.
  •  I/We also agree to the authorship of the article in the following order:

Author’s name                                    

 

1. ________________

2. ________________

3. ________________

4. ________________

 

We  Author(s) tick this box and would request you to consider it as our signature as we agree to the terms of this Copyright Notice, which will apply to this submission if and when it is published by this journal.