Author(s)

Shunbo Xiang, Bing Xu, Ke Chen

School of Computer, Guangdong University of Petrochemical Technology, Maoming, China.

To tackle with the security lack in the password-authenticated key exchange protocol, this paper proposes a two-party password-authenticated key exchange protocol based on a verifier. In the proposed protocol, a user stores his password in plaintext, and the server stores a verifier for the user’s password, using DL difficult problem and DH difficult problem, through the session between user and server to establish a session key. The security discussion result shows that the proposed protocol provides forward secrecy, and can effectively defend against server compromising fake attacks, dictionary attacks and middleman attacks. Protocol efficiency comparisons reveal our protocol is more reasonable.

Verifier, Password-Authenticated, Key Exchange, Fake Attack, Dictionary Attack, Session Key

Xiang, S. , Xu, B. and Chen, K. (2021) A Two-Party Password-Authenticated Key Exchange Protocol with Verifier. Journal of Computer and Communications, 9, 102-109. doi: 10.4236/jcc.2021.94007.