Three-party password-based authenticated key exchange protocol based on bilinear pairings

Abstract

Three-party password-based authenticated key exchange (3-party PAKE) protocols enable two communication parties, each shares a human-memorable password with a trusted server, to establish a common session key with the help of the trusted server. We propose a provably-secure 3-party PAKE protocol using bilinear pairings, and prove its security in the random oracle model. The proposed protocol requires four communication steps, which is more efficient than previous solutions in terms of communication complexity. In addition to the semantic security, we also present the authentication security to resist the undetectable on-line dictionary attacks. © 2010 Springer-Verlag Berlin Heidelberg.