Paper 2009/535

Weakness of a three-party password-based authenticated key exchange protocol

S. Wu

Abstract

To guarantee the quality of the growing popular communication services, quite recently, Huang presented a simple and efficient three-party password-based authenticated key exchange protocol in International Journal of Communications and Systems. In this letter, we first show her protocol is still vulnerable to a partition attack (offline dictionary attack), by which the adversary can easily determine the correct password.