具有强安全性的三方口令认证密钥交换协议(英文)

The Three-Party Password-Authenticated Key Exchange Protocol with Stronger Security

大部分口令认证密钥交换(PAKE)协议的设计者忽略了长期密钥泄露可能造成的危害.文中发现仅仅依靠口令的安全性设计可以抵抗口令泄露攻击的三方PAKE协议是不可能的,所以文中采取服务器通过公钥实现认证的方法,设计一个可以抵抗口令泄露攻击的强安全性协议,其在随机预示和理想密码模型下基于ECGDH假设具有前向安全的特性.

Most password authenticated key exchange（PAKE）protocol designers ignored the attacks resulting from leakage of long-term secret keys（passwords）.The authors find that it is impossible to design a secure three-party PAKE protocol only based on password against password-compromise impersonation（PCI）attack.So the authors assume that the server realizes entity authentication using his public-key,and propose a novel three-party PAKE protocol based on elliptic curve cryptosystem（ECC）,which can resist PCI attack.Furthermore, the authors prove that the proposed protocol is forward secrecy under the ECGDH assumption in the random oracle and ideal cipher models.