Highly efficient password-based three-party key exchange in random oracle model

Abstract

A password-based three-party encrypted key exchange (3PEKE) is a protocol enables any pair of two registered clients to establish session keys via the help of a trusted server such that each client shares only one password with the server. This approach greatly improves the scalability of key agreement protocol in distributed environments, and provides great user convenience. This paper proposes a new password-based 3PEKE scheme with only four message steps, which is the minimum among the published works. The proposed scheme is secure in the random oracle model. © 2008 Springer-Verlag Berlin Heidelberg.