NDLI: Extended password key exchange protocols immune to dictionary attack

Content Provider	IEEE Xplore Digital Library
Author	Jablon, D.P.
Copyright Year	1997
Description	Author affiliation: Integrity Sci. Inc., USA (Jablon, D.P.)
Abstract	Strong password methods verify even small passwords over a network without additional stored keys or certificates with the user, and without fear of network dictionary attack. We describe a new extension to further limit exposure to theft of a stored password-verifier, and apply it to several protocols including the Simple Password Exponential Key Exchange (SPEKE). Alice proves knowledge of a password C to Bob, who has a stored verifier S, where S=g/sup C/ mod p. They perform a SPEKE exchange based on the shared secret S to derive ephemeral shared key K/sub 1/. Bob chooses a random X and sends g/sup X/ mod p. Alice computes K=g/sup XC/ mod p, and proves knowledge of {K/sub 1/,K/sub 2/}. Bob verifies this result to confirm that Alice knows C. Implementation issues are summarized, showing the potential for improved performance over Bellovin and Merritt's comparably strong Augmented-Encrypted Key Exchange. These methods make the password a strong independent factor in authentication, and are suitable for both Internet and intranet use.
Starting Page	248
Ending Page	255
File Size	815810
Page Count	8
File Format	PDF
ISBN	0818679670
DOI	10.1109/ENABL.1997.630822
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	1997-06-18
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Protocols Dictionaries Authentication Databases Data security Internet Public key cryptography Computer security Protection Entropy
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Some Notes on Password Authenticated Key Exchange Based on RSA

Encrypted key exchange: password-based protocols secure against dictionary attacks

Security analysis of smart card based password authentication schemes

Password-Based Authentication: Preventing Dictionary Attacks

Cryptanalysis of password authentication schemes: Current status and key issues

Stronger password-base authenticated key exchange protocols

Security and efficiency in authentication protocols resistant to password guessing attacks

Efficient Verifier-Based Password-Authentication Key Exchange Protocol via Elliptic Curves

Efficient and Secure Password-based Authenticated Key Exchange Protocol

Extended password key exchange protocols immune to dictionary attack

Similar Documents

Some Notes on Password Authenticated Key Exchange Based on RSA

Encrypted key exchange: password-based protocols secure against dictionary attacks

Security analysis of smart card based password authentication schemes

Password-Based Authentication: Preventing Dictionary Attacks

Cryptanalysis of password authentication schemes: Current status and key issues

Stronger password-base authenticated key exchange protocols

Security and efficiency in authentication protocols resistant to password guessing attacks

Efficient Verifier-Based Password-Authentication Key Exchange Protocol via Elliptic Curves

Efficient and Secure Password-based Authenticated Key Exchange Protocol

Extended password key exchange protocols immune to dictionary attack