Comments on “Provably Secure Dynamic Id-Based Anonymous Two-Factor Authenticated Key Exchange Protocol With Extended Security Model”
- 21 August 2018
- journal article
- editorial
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Information Forensics and Security
- Vol. 14 (12) , 3344-3345
Abstract
Password-based authenticated key exchange (PAKE) protocol has been widely used in practice since it is convenient for users. However, the easy-to-remember property of the password also brings security problem. In this letter, we show there is an off-line dictionary attack in an efficient PAKE protocol when the smart card is lost. In order to resist the attack we give a countermeasure to improve it. The countermeasure makes a simple change to the original protocol which does not affect the efficiency of the protocol.Keywords
Funding Information
- National Natural Science Foundation of China (61572460, 61462003, 71462001)
- Open Project Program of the State Key Laboratory of Information Security (2017-ZD-01)
This publication has 4 references indexed in Scilit:
- Anonymous and Lightweight Authentication for Secure Vehicular NetworksIEEE Transactions on Vehicular Technology, 2017
- Provably Secure Dynamic ID-Based Anonymous Two-Factor Authenticated Key Exchange Protocol With Extended Security ModelIEEE Transactions on Information Forensics and Security, 2017
- A Provably Secure, Efficient, and Flexible Authentication Scheme for Ad hoc Wireless Sensor NetworksIEEE Transactions on Wireless Communications, 2015
- Authenticated Key Exchange Secure against Dictionary Attacks2000