Referenced Items are not available for this document.
Recently, Abdalla et al. proposed a gateway-oriented password-based authenticated key exchange (GPAKE) protocol among a client, a gateway, and an authentication server, where a password is only shared between the client and the authentication server. The security goal of GPAKE is to securely establish a session key between the client and the gateway by the help of the authentication server without revealing any information of the password to the gateway. In the letter, we show that a malicious gateway of GPAKE is still able to gain information of password by performing an undetectable on-line password guessing attack. We also present a countermeasure against the attack
Published in:
Communications Letters, IEEE
(Volume:10
,
Issue:
9
)
Date of Publication: Sept. 2006
- Page(s):
- 683 - 685
- ISSN :
- 1089-7798
- INSPEC Accession Number:
- 9101759
- Digital Object Identifier :
- 10.1109/LCOMM.2006.1714545
- Product Type:
- Journals & Magazines
- Date of Current Version :
- 23 October 2006
- Issue Date :
- Sept. 2006
- Sponsored by :
- IEEE Communications Society
About IEEE Xplore | Contact | Help | Terms of Use | Nondiscrimination Policy | Site Map | Privacy & Opting Out of Cookies
A not-for-profit organization, IEEE is the world's largest professional association for the advancement of technology.
© Copyright 2013 IEEE - All rights reserved. Use of this web site signifies your agreement to the terms and conditions.
