Augmented Encrypted Key Exchange Using RSA Encryption and Confounder

概要

論文の詳細を見る
The Augmented Encrypted Key Exchange(A-EKE)proposed by Bellovin and Merritt(1993)used the hash of the sender's password as the shared secret key for encryption. However, this scheme can be broken by Simmon's Attack. To overcome this, we propose to improve the scheme by incorporating Indirect RSA Encryption and Confounder. In our scheme we use a public key which will be kept by the communicating parties and will be exchanged indirectly, i.e., instead of sending the whole public key, the two parties will send the number which determines their public key, along with the shared key. Meanwhile, the confounder is used to overcome partition attack which can be used to overcome the subtle problem of A-EKE using RSA encryption. Theoretical analysis shows that our proposed scheme is more secure than A-EKE.
一般社団法人情報処理学会の論文
1998-12-15