3자간 안전한 인증된 키 동의 프로토콜

Abstract

Recently, a password-based tripartite authenticated key exchange protocol using hash function and XOR operation as its main operations was proposed to support secure communication to the two users registered in the same server. But the protocol is vulnerable to the active attack of malicious server. This paper proposes a new tripartite authenticated key agreement protocol improving the protocol. The proposed protocol is not only safe from the active attack of malicious server, but also safe from password guessing attack by the using of verifiers derived from the passwords. In addition, it is safe from the server compromise attack because the server cannot know the shared session key between the two users.