A Lightweight Three-party Authenticated Key Exchange Protocol with XOR-based operation

Traditional three-party authenticated key exchange (3PAKE) protocols face two common problems, one is that the shared key can be compromised, and the other is the high computational cost that is required to run them. With the rapid development of services such as cloud and ubiquitous computing, devices with relatively low computing power are becoming more widely used. Some studies have thus proposed 3PAKE protocols with elliptic curve cryptography to reduce the computational cost in a mobile commerce environment, but these not only cannot counteract impersonation attacks, but still have a relatively high computational cost. Therefore, this paper proposes a lightweight 3PAKE protocol with XOR (exclusive OR)-based operation that has the following characteristics: (1) less computational cost than the 3PAKE protocols with elliptic curve cryptography, (2) greater confidentiality with regard to sharing keys, and (3) the ability to resist impersonation attacks.

關鍵字

3PAKE ； Authenticated Key Exchange ； XOR Operation

並列摘要

傳統的三方認證鑰匙交換協定存在共享鑰匙被外洩的威脅及需要較大的運算成本。隨著雲端及無所不在運算服務快速的發展，低運算能力的設備將可能被廣泛的使用。一些研究提出以橢圓曲線密碼為基礎的認證鑰匙交換協定，藉以在行動商務環境減低運算成本，然而，這些協定不但無法抵抗冒名攻擊，並且，仍存在較高的運算成本。基於此，我們提出以XOR運算為基礎之輕巧的三方認證鑰匙交換協定達到（1）較橢圓曲線密碼方法更低的運算成本（2）共享鑰匙的保密性（3）抵抗冒名攻擊。

並列關鍵字

3PAKE ；三方認證鑰匙交換協定； XOR運算

主題瀏覽