원문정보
초록
영어
The key exchange protocols using passwords achieved great attention due to their simplicity and e ciency. On the other hand these protocols should resist all types of password guessing attacks, as the password is of low entropy. Recently Lu and Cao proposed a three party simple key ex-change protocol (S-3PAKE). It is an extension of Abdella and Pointchval SPAKE protocol. Later Guo et al. proposed a man in the middle attack and undetectable on-line password guessing attack on the above protocol. They also presented an improved S-3PAKE. In the present paper we have shown that the improved S-3PAKE still su ers from undetectable pass-word guessing attack and discuss the countermeasures to preclude such an attack.
목차
1. Introduction
2. Review of S-3PAKE
2.1 Simple three party key exchange protocol
2.2 The undetectable password guessing attack on S-3PAKE and improved S-3PAKE.
2.3 Improved S-3PAKE
3. Online Undetectable Password Guessing Attack
3.1 Discussion and Countermeasures
4. Conclusion
References
