Work

Encrypted key exchange: password-based protocols secure against dictionary attacks

Year: 2003

Type: conference-paper

Abstract: Classic cryptographic protocols based on user-chosen keys allow an attacker to mount password-guessing attacks. A combination of asymmetric (public-key) and symmetric (secret-key) cryptography that allow two parties sharing a common password to exchange confidential and authenticated information over an insecure network is introduced. In particular, a protocol relying on the counter-intuitive motion of using a secret key to encrypt a public key is presented. Such protocols are secure against active attacks, and have the property that the password is protected against offline dictionary attacks.>

Source: IEEE Computer Society Symposium on Research in Security and Privacy

DOI: 10.1109/risp.1992.213269

Authors: S.M. Bellovin, M. Merritt

Institution: AT&T (United States)

Language: English

Topic: Advanced Authentication Protocols Security

Subfield: Computer Networks and Communications

Field: Computer Science

Domain: Physical Sciences

Open Access status: green

OpenAlex ID: W2157604883

FWCI: 44.87

Cites: 22

Cited by: 1,362

Related to: 10