Verifier-based anonymous password-authenticated key exchange protocol in the standard model

Area of Science:

• Cryptography
• Information Security
• Computer Science

Background:

• Anonymous Password-Authenticated Key Exchange (APAKE) offers convenient authentication and privacy.
• Existing APAKE protocols often use symmetric settings, vulnerable to password file leakage.
• Server compromise poses a significant threat to sensitive user data.

Purpose of the Study:

• To propose a novel verifier-based APAKE protocol.
• To enhance security against server compromise and password file leakage.
• To provide a more robust and efficient APAKE solution.

Main Methods:

• Developed a verifier-based APAKE protocol.
• Utilized standard cryptographic primitives: public key encryption, smooth projective hash functions, and password hashing.
• Proved protocol security in the standard model without random oracles.

Main Results:

• The proposed protocol uses verifiers, mitigating risks associated with clear password storage.
• Security is proven in the standard model, enhancing trustworthiness.
• The protocol demonstrates stronger security guarantees compared to existing schemes.

Conclusions:

• The verifier-based APAKE protocol offers improved security and privacy.
• It effectively addresses the vulnerability of password file leakage in server compromise scenarios.
• The protocol achieves considerable efficiency alongside enhanced security.