Paper 2005/156 Original: eprint.iacr.org/2005/156 ↗
On the security of some password-based key agreement schemes
Abstract
In this paper we show that two potential security vulnerabilities exist in the strong password-only authenticated key exchange scheme due to Jablon. Two standardised schemes based on Jablon's scheme, namely the first password-based key agreement mechanism in ISO/IEC FCD 11770-4 and the scheme BPKAS-SPEKE in IEEE P1363.2 also suffer from one or both of these security vulnerabilities. We further show that other password-based key agreement mechanisms, including those in ISO/IEC FCD 11770-4 and IEEE P1363.2, also suffer from these two security vulnerabilities. Finally, we propose means to remove these security vulnerabilities.
Metadata
- Available format(s)
PDF- Category
- Cryptographic protocols
- Publication info
- Preprint.
- History
- 2005-05-29: last updated
- 2005-05-29: published
- Short URL
- https://ia.cr/2005/156
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2005/156,
author = {Qiang Tang and Chris J. Mitchell},
title = {On the security of some password-based key agreement schemes},
howpublished = {Cryptology {ePrint} Archive, Paper 2005/156},
year = {2005},
url = {https://eprint.iacr.org/2005/156}
}