A variant of password authenticated key exchange protocol
| Autor: | Wei Wu, Abdulhameed Alelaiwi, Yang Xiang, Yuexin Zhang |
|---|---|
| Rok vydání: | 2018 |
| Předmět: |
Password
Password policy Zero-knowledge password proof Cognitive password Computer Networks and Communications Computer science Key distribution 020206 networking & telecommunications 0102 computer and information sciences 02 engineering and technology Computer security computer.software_genre 01 natural sciences Password strength Authenticated Key Exchange 010201 computation theory & mathematics Hardware and Architecture 0202 electrical engineering electronic engineering information engineering Key (cryptography) Session key computer Software |
| Zdroj: | Future Generation Computer Systems. 78:699-711 |
| ISSN: | 0167-739X |
| Popis: | Password authenticated key exchange (PAKE) protocols are designed for a pair of users to establish a secret session key over a public and unreliable network. In existing PAKE protocols, it is assumed that short passwords are pre-shared between users. This assumption, however, would be impractical in certain applications. For instance, in the Internet of Things and Fog computing, billions of devices will be wirelessly connected. In practice, the devices are produced by different factories, and it is not practical to assume that these devices are pre-loaded with passwords when they leave factories. As a result, existing PAKE protocols cannot be directly employed in these applications. Moreover, it is investigated that devices can extract secrets using the wireless fading channel. However, the key extraction rate at the physical layer is slow. Motivated by these observations, this paper presents a variant of password authenticated key exchange (vPAKE) protocol without the password sharing assumption. To obtain the passwords, wireless devices, such as mobile phones, tablets, and laptops, are used to extract short secrets at the physical layer. Using the extracted secrets, users can establish a secret key at higher layers. The performance analysis shows that comparing with other PAKE protocols (which are proved secure in the standard model), the communication and computation consumptions of our protocol are significantly reduced. Additionally, the proposed protocol is proved secure in the standard model. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|
Full Text from ScienceDirect