일방향 함수를 이용한 효율적인 3자 참여 인증된 키 교환 프로토콜

Abstract

Many password-based three-party authenticated key exchange protocols are proposed. However, they are vulnerable to the various attacks or not efficient. This paper proposes a password-based three-party authenticated key exchange protocol using one-way function as its main operation to support secure communication to the two users registered in the same server. Since the proposed protocol has a low computation cost by the using of one-way hash function and XOR operation and has a low communication cost by the small number of message transmissions, it can execute an effective authenticated key exchange. Furthermore, the proposed protocol is safe from password guessing attack by the using of verifiers derived from the passwords, and it is also safe from the server compromise attack because the server cannot know the shared session key between the two users.