Efficient augmented PAK protocols (情報通信システムセキュリティ)

概要

論文の詳細を見る
Password-authenticated key exchange (PAKE) is the problem about how to share a strong secret securely in the presence of an adversary between the parties, who share a weak secret only. In the literature, there has been a significant amount of works on augmented PAKE protocols that provide extra protection for server compromise. An augmented PAKE protocol is said to be resistant to server compromise if an adversary who obtained password verification data from a server cannot impersonate a client without performing off-line dictionary attacks on the password verification data. In this paper, we propose efficient augmented PAK (called, AugmentedPAK1 and AugmentedPAK2) protocols that are secure against server-compromise impersonation attacks, and are more efficient than the previous ones. Interestingly, the computational efficiency of the AugmentedPAK1 and AugmentedPAK2 protocols are almost same as the balanced PAK protocol that does not provide resistance to server compromise at all.
社団法人電子情報通信学会の論文
2010-06-24