NDLI: Security of Indirect-Authenticated Key Exchange Protocol

Content Provider	IEEE Xplore Digital Library
Author	Hsu-Hung Chiang Ching-Chung Liu Ying-Ming Chen Ya-Fen Chang
Copyright Year	2009
Abstract	Security issues play an important role in modern communication worlds. Via distrusted networks, exchanged messages need to be encrypted by a session key for security requirements. Session keys are preferred to be generated by communication parties, and how to authenticate the other communication party is an important problem needed to be solved. In three-party encrypted key exchange (3PEKE) protocols, a special type of indirect-authenticated protocols, a trusted third party is involved to have two communication parties be able to authenticate each other and negotiate one session key. In 2008, Yoon and Yoo proposed a three-party encrypted key exchange protocol and claimed their protocol provides a more secure way for exchanging messages. Unfortunately, we find that their protocol suffers from undetectable one-line password guessing attacks. In this manuscript, we first review the important related works and show how to mount attacks on Yoon and Yoo’s 3PEKE protocol
Starting Page	336
Ending Page	339
File Size	304104
Page Count	4
File Format	PDF
ISBN	9781424447176
DOI	10.1109/IIH-MSP.2009.136
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2009-09-12
Publisher Place	Japan
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	key exchange protocol Protocols Dictionaries Identity-based encryption PEKE Electronic mail Computer science Information security Public key 3PEKE Signal processing Public key cryptography National security
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Password-authenticated 3PEKE with round efficiency without server's public key

A Secure Certificateless Authenticated Group Key Agreement Protocol

Key Replicating Attack on Certificateless Authenticated Key Agreement Protocol

An enhanced certificateless authenticated key agreement protocol

An Efficient Identity-Based Certified E-mail Protocol

Certificateless Authenticated Group Key Agreement Protocol for Dynamic Groups

Secure certificateless-based authenticated key agreement protocol in the client-server setting

A Secure ID-Based Explicit Authenticated Key Agreement Protocol without Key Escrow

A Novel E-Mail Protocol Using Three-Party Password-Authenticated Key Exchange

Security of Indirect-Authenticated Key Exchange Protocol

Similar Documents

Password-authenticated 3PEKE with round efficiency without server's public key

A Secure Certificateless Authenticated Group Key Agreement Protocol

Key Replicating Attack on Certificateless Authenticated Key Agreement Protocol

An enhanced certificateless authenticated key agreement protocol

An Efficient Identity-Based Certified E-mail Protocol

Certificateless Authenticated Group Key Agreement Protocol for Dynamic Groups

Secure certificateless-based authenticated key agreement protocol in the client-server setting

A Secure ID-Based Explicit Authenticated Key Agreement Protocol without Key Escrow

A Novel E-Mail Protocol Using Three-Party Password-Authenticated Key Exchange

Security of Indirect-Authenticated Key Exchange Protocol