Practical Encrypted Key Agreement Using Passwords

0 IntroductionWith rapid development on the Internet a user Bob caneasily access the networkto get some services fromaservice provider ,or toretrieve his sensitive private data storedinthe server previously.In that case,he has to establish se-cure session keys with remote servers . To verify the identity(IDfor short) of a user manyreal systems use password-basedauthenticated key exchange protocol . The fundamental prob-lems with passwords come from the fact that most users’passwords are dra…

Practical encrypted key agreement using passwords

We presented a simple and efficient password-based encrypted key exchange protocol that allows a user to establish secure session keys with remote servers from client terminals in low resource environments. He does not need to carry smart card storing his private information but just needs to know his identity and password. For this purpose, the scheme was implemented over elliptic curves because of their well-known advantages with regard to processing and size constraints. Furthermore, the scheme is provably secure under the assumptions that the hash function closely behaves like a random oracle and that the elliptic curve computational Diffie-Hellman problem is difficult.