Analysis and Improvement of Two-Factor Authenticated Key Exchange Protocols in Public Wireless LANs

In 2009, Lee et al. proposed two password authenticated key exchange protocols based on Juang and Wu's protocols. In this paper, we will show that Lee et al.'s protocols cannot resist impersonation attack. It means that the adversary can impersonate the server to cheat the client and break their two protocols trivially. Furthermore, we propose an improvement of their protocols with impersonation attack resilience.