Related Experiment Videos
Password-only authenticated three-party key exchange with provable security in the standard model
Junghyun Nam1, Kim-Kwang Raymond Choo2, Junghwan Kim1
1Department of Computer Engineering, Konkuk University, 268 Chungwondaero, Chungju, Chungcheongbukdo 380-701, Republic of Korea.
Thescientificworldjournal
|July 1, 2014
Summary
This study introduces the first three-party password-only authenticated key exchange (PAKE) protocol with security proven without idealized assumptions, addressing insider attacks. The new protocol offers enhanced security against dictionary attacks for password-based key exchange.
Area of Science:
- Computer Science
- Cryptography
- Network Security
Background:
- Three-party password-only authenticated key exchange (PAKE) protocols enable two clients to establish a shared secret key via a server.
- Existing PAKE protocols often rely on idealized assumptions like random oracles or do not account for insider threats, potentially compromising security.
- Vulnerabilities arise when random oracles are implemented with specific hash functions or when insider attacks target partner clients.
Purpose of the Study:
- To present the first three-party PAKE protocol with security rigorously proven without idealized assumptions.
- To develop a protocol secure within a model that explicitly considers insider attacks.
- To ensure robust password security against undetectable online dictionary attacks.
Main Methods:
- Developed a novel three-party PAKE protocol.
- Employed a variant of the indistinguishability-based security model by Bellare, Pointcheval, and Rogaway (2000) for security proofs.
- The security analysis was conducted in a model that captures insider attacks, avoiding reliance on random oracles.
Main Results:
- The proposed protocol achieves provable security without idealized assumptions.
- Security is demonstrated within a model that incorporates insider attacks.
- The protocol provides indistinguishability-based security for session keys and robust password security against online dictionary attacks.
Conclusions:
- This work presents a significant advancement in three-party PAKE protocol security by eliminating idealized assumptions.
- The protocol offers enhanced protection against insider threats and sophisticated dictionary attacks.
- It establishes a new benchmark for secure password-based key exchange in practical, real-world scenarios.
Related Concept Videos
01:14Norton's Theorem
2.0K
Norton's theorem is a fundamental principle stating that a linear two-terminal circuit can be substituted with an equivalent circuit, which comprises a current source (ⅠN) in parallel with a resistor (RN). Here, ⅠN represents the short-circuit current flowing through the terminals, and RN stands for the input or equivalent resistance at the terminals when all independent sources are deactivated. This implies that the circuit illustrated in Figure (a) can be exchanged with the one...
2.0K
01:17Strategies of Self-Presentation II: Self-Verification
271
Self-verification is a fundamental psychological drive wherein individuals seek affirmation of their self-concept from others, striving for consistency between their internal self-view and external perceptions. This drive operates even when the self-concept is negative, influencing interpersonal behavior and feedback preferences in complex and often counterintuitive ways. Unlike the self-enhancement motive, which seeks positive evaluations, self-verification prioritizes coherence and...
271
03:25Free Energy Changes for Nonstandard States
10.8K
The free energy change for a process taking place with reactants and products present under nonstandard conditions (pressures other than 1 bar; concentrations other than 1 M) is related to the standard free energy change according to this equation:
10.8K
01:16Second Uniqueness Theorem
1.4K
Consider a region consisting of several individual conductors with a definite charge density in the region between these conductors. The second uniqueness theorem states that if the total charge on each conductor and the charge density in the in-between region are known, then the electric field can be uniquely determined.
In contrast, consider that the electric field is non-unique and apply Gauss's law in divergence form in the region between the conductors and the integral form to the surface...
In contrast, consider that the electric field is non-unique and apply Gauss's law in divergence form in the region between the conductors and the integral form to the surface...
1.4K
01:22Net Change Theorem
216
The Net Change Theorem is a fundamental principle in calculus that establishes a direct relationship between a function’s rate of change and its accumulated change over an interval. Mathematically, it states that the definite integral of a function's derivative over a given interval [a,b] yields the net change in the original function:This theorem has significant applications in various real-world scenarios, including physics, economics, and engineering. A particularly useful application...
216
01:23Protecting Groups for Aldehydes and Ketones: Introduction
7.0K
Protecting groups are compounds that can bind to a specific functional group in the presence of other functional groups to protect them from undesired chemical reactions. These compounds can selectively bind to particular functional groups and advance chemoselective reactions in polyfunctional systems (Figure 1). After the functional group has served its purpose, it is removed by reacting it with specific compounds.
7.0K