Security of group key exchange protocols with different passwords

Raphael C.W. Phan

doi:10.1109/WAINA.2009.38

Security of group key exchange protocols with different passwords

Research output: Chapter in Book/Report/Conference proceeding › Conference Paper › Research › peer-review

Abstract

Password-based authenticated group key exchange protocols allow group users to jointly share a session key based on a human-memorizable password. In this paper, we present an undetectable online dictionary attack on N-EKE-D, a recent provably secure protocol designed to explicitly resist this type of attack. Thus, our result contradicts the design goal. We also give a simple attack on the key indistinguishability of N-EKE-D and two N-EKE-M variants that exploits the definition of partnering in their security model.

Original language	English
Title of host publication	Proceedings - 2009 International Conference on Advanced Information Networking and Applications Workshops, WAINA 2009
Pages	147-152
Number of pages	6
DOIs	https://doi.org/10.1109/WAINA.2009.38
Publication status	Published - 2009
Externally published	Yes
Event	International Conference on Advanced Information Networking and Applications Workshops 2009 - Bradford, United Kingdom Duration: 26 May 2009 → 29 May 2009 https://ieeexplore.ieee.org/xpl/conhome/5136571/proceeding (Proceedings)

Publication series

Name	Proceedings - International Conference on Advanced Information Networking and Applications, AINA
ISSN (Print)	1550-445X

Conference

Conference	International Conference on Advanced Information Networking and Applications Workshops 2009
Abbreviated title	WAINA 2009
Country/Territory	United Kingdom
City	Bradford
Period	26/05/09 → 29/05/09
Internet address	https://ieeexplore.ieee.org/xpl/conhome/5136571/proceeding (Proceedings)

Keywords

Cryptanalysis
Group
Key indistinguishability
Model
Password-authenticated key exchange
Proof
Undetectable online dictionary attack

Access to Document

10.1109/WAINA.2009.38

Cite this

@inproceedings{1d40787b206c453cb223672ee8d1a160,

title = "Security of group key exchange protocols with different passwords",

abstract = "Password-based authenticated group key exchange protocols allow group users to jointly share a session key based on a human-memorizable password. In this paper, we present an undetectable online dictionary attack on N-EKE-D, a recent provably secure protocol designed to explicitly resist this type of attack. Thus, our result contradicts the design goal. We also give a simple attack on the key indistinguishability of N-EKE-D and two N-EKE-M variants that exploits the definition of partnering in their security model.",

keywords = "Cryptanalysis, Group, Key indistinguishability, Model, Password-authenticated key exchange, Proof, Undetectable online dictionary attack",

author = "Phan, {Raphael C.W.}",

note = "Copyright: Copyright 2009 Elsevier B.V., All rights reserved.; International Conference on Advanced Information Networking and Applications Workshops 2009, WAINA 2009 ; Conference date: 26-05-2009 Through 29-05-2009",

year = "2009",

doi = "10.1109/WAINA.2009.38",

language = "English",

isbn = "9780769536392",

series = "Proceedings - International Conference on Advanced Information Networking and Applications, AINA",

pages = "147--152",

booktitle = "Proceedings - 2009 International Conference on Advanced Information Networking and Applications Workshops, WAINA 2009",

url = "https://ieeexplore.ieee.org/xpl/conhome/5136571/proceeding",

}

Phan, RCW 2009, Security of group key exchange protocols with different passwords. in Proceedings - 2009 International Conference on Advanced Information Networking and Applications Workshops, WAINA 2009. Proceedings - International Conference on Advanced Information Networking and Applications, AINA, pp. 147-152, International Conference on Advanced Information Networking and Applications Workshops 2009, Bradford, United Kingdom, 26/05/09. https://doi.org/10.1109/WAINA.2009.38

Security of group key exchange protocols with different passwords. / Phan, Raphael C.W.
Proceedings - 2009 International Conference on Advanced Information Networking and Applications Workshops, WAINA 2009. 2009. p. 147-152 (Proceedings - International Conference on Advanced Information Networking and Applications, AINA).

Research output: Chapter in Book/Report/Conference proceeding › Conference Paper › Research › peer-review

TY - GEN

T1 - Security of group key exchange protocols with different passwords

AU - Phan, Raphael C.W.

PY - 2009

Y1 - 2009

N2 - Password-based authenticated group key exchange protocols allow group users to jointly share a session key based on a human-memorizable password. In this paper, we present an undetectable online dictionary attack on N-EKE-D, a recent provably secure protocol designed to explicitly resist this type of attack. Thus, our result contradicts the design goal. We also give a simple attack on the key indistinguishability of N-EKE-D and two N-EKE-M variants that exploits the definition of partnering in their security model.

AB - Password-based authenticated group key exchange protocols allow group users to jointly share a session key based on a human-memorizable password. In this paper, we present an undetectable online dictionary attack on N-EKE-D, a recent provably secure protocol designed to explicitly resist this type of attack. Thus, our result contradicts the design goal. We also give a simple attack on the key indistinguishability of N-EKE-D and two N-EKE-M variants that exploits the definition of partnering in their security model.

KW - Cryptanalysis

KW - Group

KW - Key indistinguishability

KW - Model

KW - Password-authenticated key exchange

KW - Proof

KW - Undetectable online dictionary attack

UR - http://www.scopus.com/inward/record.url?scp=70350122905&partnerID=8YFLogxK

U2 - 10.1109/WAINA.2009.38

DO - 10.1109/WAINA.2009.38

M3 - Conference Paper

AN - SCOPUS:70350122905

SN - 9780769536392

T3 - Proceedings - International Conference on Advanced Information Networking and Applications, AINA

SP - 147

EP - 152

BT - Proceedings - 2009 International Conference on Advanced Information Networking and Applications Workshops, WAINA 2009

T2 - International Conference on Advanced Information Networking and Applications Workshops 2009

Y2 - 26 May 2009 through 29 May 2009

ER -

Security of group key exchange protocols with different passwords

Abstract

Publication series

Conference

Keywords

Access to Document

Other files and links

Cite this