Cryptanalysis of the N-party encrypted diffie-hellman key exchange using different passwords

Raphael C.W. Phan; Bok Min Goi

doi:10.1007/11767480_15

Cryptanalysis of the N-party encrypted diffie-hellman key exchange using different passwords

Raphael C.W. Phan, Bok Min Goi

Research output: Chapter in Book/Report/Conference proceeding › Conference Paper › Research › peer-review

17 Citations (Scopus)

Abstract

We consider the security of the n-party EKE-U and EKE-M protocols proposed by Byun and Lee at ACNS '05. We show that EKE-U is vulnerable to an impersonation attack, offline dictionary attack and undetectable online dictionary attack. Surprisingly, even the strengthened variant recently proposed by the same designers to counter an insider offline dictionary attack by Tang and Chen, is equally vulnerable. We also show that both the original and strengthened EKE-M variants do not provide key privacy, a criterion desired by truly contributory key exchange schemes and recently formalized by Abdalla et al. We discuss ways to protect EKE-U against our attacks and argue that the strengthened EKE-U scheme shows the most potential as a provably secure n-party PAKE.

Original language	English
Title of host publication	Applied Cryptography and Network Security - 4th International Conference, ACNS 2006, Proceedings
Publisher	Springer
Pages	226-238
Number of pages	13
ISBN (Print)	3540347038, 9783540347033
DOIs	https://doi.org/10.1007/11767480_15
Publication status	Published - 2006
Externally published	Yes
Event	International Conference on Applied Cryptography and Network Security 2006 - Singapore, Singapore Duration: 6 Jun 2006 → 9 Jun 2006 Conference number: 4th https://link.springer.com/book/10.1007/11767480 (Proceedings)

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	3989 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	International Conference on Applied Cryptography and Network Security 2006
Abbreviated title	ACNS 2006
Country/Territory	Singapore
City	Singapore
Period	6/06/06 → 9/06/06
Internet address	https://link.springer.com/book/10.1007/11767480 (Proceedings)

Keywords

Collusion
Cryptanalysis
Dictionary attack
Key privacy
N-party
Password-authenticated key exchange

Access to Document

10.1007/11767480_15

Cite this

Phan, R. C. W., & Goi, B. M. (2006). Cryptanalysis of the N-party encrypted diffie-hellman key exchange using different passwords. In Applied Cryptography and Network Security - 4th International Conference, ACNS 2006, Proceedings (pp. 226-238). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 3989 LNCS). Springer. https://doi.org/10.1007/11767480_15

Phan, Raphael C.W. ; Goi, Bok Min. / Cryptanalysis of the N-party encrypted diffie-hellman key exchange using different passwords. Applied Cryptography and Network Security - 4th International Conference, ACNS 2006, Proceedings. Springer, 2006. pp. 226-238 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{cb3323799aec4b8f822a66a0d6c7953a,

title = "Cryptanalysis of the N-party encrypted diffie-hellman key exchange using different passwords",

abstract = "We consider the security of the n-party EKE-U and EKE-M protocols proposed by Byun and Lee at ACNS '05. We show that EKE-U is vulnerable to an impersonation attack, offline dictionary attack and undetectable online dictionary attack. Surprisingly, even the strengthened variant recently proposed by the same designers to counter an insider offline dictionary attack by Tang and Chen, is equally vulnerable. We also show that both the original and strengthened EKE-M variants do not provide key privacy, a criterion desired by truly contributory key exchange schemes and recently formalized by Abdalla et al. We discuss ways to protect EKE-U against our attacks and argue that the strengthened EKE-U scheme shows the most potential as a provably secure n-party PAKE.",

keywords = "Collusion, Cryptanalysis, Dictionary attack, Key privacy, N-party, Password-authenticated key exchange",

author = "Phan, {Raphael C.W.} and Goi, {Bok Min}",

note = "Copyright: Copyright 2015 Elsevier B.V., All rights reserved.; International Conference on Applied Cryptography and Network Security 2006, ACNS 2006 ; Conference date: 06-06-2006 Through 09-06-2006",

year = "2006",

doi = "10.1007/11767480_15",

language = "English",

isbn = "3540347038",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer",

pages = "226--238",

booktitle = "Applied Cryptography and Network Security - 4th International Conference, ACNS 2006, Proceedings",

url = "https://link.springer.com/book/10.1007/11767480",

}

Phan, RCW & Goi, BM 2006, Cryptanalysis of the N-party encrypted diffie-hellman key exchange using different passwords. in Applied Cryptography and Network Security - 4th International Conference, ACNS 2006, Proceedings. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 3989 LNCS, Springer, pp. 226-238, International Conference on Applied Cryptography and Network Security 2006, Singapore, Singapore, 6/06/06. https://doi.org/10.1007/11767480_15

Cryptanalysis of the N-party encrypted diffie-hellman key exchange using different passwords. / Phan, Raphael C.W.; Goi, Bok Min.

Applied Cryptography and Network Security - 4th International Conference, ACNS 2006, Proceedings. Springer, 2006. p. 226-238 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 3989 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference Paper › Research › peer-review

TY - GEN

T1 - Cryptanalysis of the N-party encrypted diffie-hellman key exchange using different passwords

AU - Phan, Raphael C.W.

AU - Goi, Bok Min

N1 - Conference code: 4th

PY - 2006

Y1 - 2006

N2 - We consider the security of the n-party EKE-U and EKE-M protocols proposed by Byun and Lee at ACNS '05. We show that EKE-U is vulnerable to an impersonation attack, offline dictionary attack and undetectable online dictionary attack. Surprisingly, even the strengthened variant recently proposed by the same designers to counter an insider offline dictionary attack by Tang and Chen, is equally vulnerable. We also show that both the original and strengthened EKE-M variants do not provide key privacy, a criterion desired by truly contributory key exchange schemes and recently formalized by Abdalla et al. We discuss ways to protect EKE-U against our attacks and argue that the strengthened EKE-U scheme shows the most potential as a provably secure n-party PAKE.

AB - We consider the security of the n-party EKE-U and EKE-M protocols proposed by Byun and Lee at ACNS '05. We show that EKE-U is vulnerable to an impersonation attack, offline dictionary attack and undetectable online dictionary attack. Surprisingly, even the strengthened variant recently proposed by the same designers to counter an insider offline dictionary attack by Tang and Chen, is equally vulnerable. We also show that both the original and strengthened EKE-M variants do not provide key privacy, a criterion desired by truly contributory key exchange schemes and recently formalized by Abdalla et al. We discuss ways to protect EKE-U against our attacks and argue that the strengthened EKE-U scheme shows the most potential as a provably secure n-party PAKE.

KW - Collusion

KW - Cryptanalysis

KW - Dictionary attack

KW - Key privacy

KW - N-party

KW - Password-authenticated key exchange

UR - http://www.scopus.com/inward/record.url?scp=33746600612&partnerID=8YFLogxK

U2 - 10.1007/11767480_15

DO - 10.1007/11767480_15

M3 - Conference Paper

AN - SCOPUS:33746600612

SN - 3540347038

SN - 9783540347033

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 226

EP - 238

BT - Applied Cryptography and Network Security - 4th International Conference, ACNS 2006, Proceedings

PB - Springer

T2 - International Conference on Applied Cryptography and Network Security 2006

Y2 - 6 June 2006 through 9 June 2006

ER -

Phan RCW, Goi BM. Cryptanalysis of the N-party encrypted diffie-hellman key exchange using different passwords. In Applied Cryptography and Network Security - 4th International Conference, ACNS 2006, Proceedings. Springer. 2006. p. 226-238. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). https://doi.org/10.1007/11767480_15

Cryptanalysis of the N-party encrypted diffie-hellman key exchange using different passwords

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Cite this