Cryptology ePrint Archive: Report 2009/555

An enhanced password authenticated key agreement protocol for wireless mobile network

Zhigang Gao and Dengguo Feng

Abstract: Password-based Authenticated Key Agreement (PAKA) protocols are widely used in wireless mobile networks, however many existing PAKA protocols have security flaws. In the 3GPP2 network, there are several PAKA protocols proposed to enhance the security of the Authentication Key distribution mechanism which is subjected to the Man-In-The-Middle attack. We point out the security flaws of such protocols in [4,5] and give two practical attacks on them. Moreover we propose an enhanced PAKA protocol that can resist undetectable on-line and off-line password guessing attacks, and formally analyze its security in the Random Oracle model. In addition, we consider a special version of Diffie-Hellman problem called Degenerate Diffie-Hellman problem and propose two assumptions called Computational and Decision Degenerate Diffie-Hellman assumption which are as difficult as CDH assumption and DDH assumption respectively.

Category / Keywords: cryptographic protocols / Password Authentication Key Agreement Wireless Mobile Network

Date: received 13 Nov 2009, withdrawn 26 Feb 2010

Contact author: zhigang2005 at is iscas ac cn

Available formats: (-- withdrawn --)

Note: This is the full version of the paper which is accepted by Inscrypt2009 and published by Springer

Version: 20100226:074817 (All versions of this report)

Discussion forum: Show discussion | Start new discussion