Cryptanalysis and Design of a Three-Party Authenticated Key Exchange Protocol Using Smart Card

摘要: Three-party authenticated key exchange protocol (3PAKE) is used to provide security protection on the transmitted data over insecure communication by performing session agreement between entities involved. Comparing with 2PAKE protocol, 3PAKE more suitable for managing unrestricted number of users. Recently, several researchers have proposed many protocols using smart card. However, we scrutinized carefully recently published Yang et al.’s and it has been observed that same suffers from weaknesses such as insider attack, off-line password guessing logged-in users’ attack replay attack. Moreover, justified a serious issue change phase scheme. In order fix above-mentioned shortcomings, this paper proposes an efficient card based cryptographic one-way hash function. The formal analysis proves provides strong relevant attacks including weaknesses. simulation results scheme AVISPA tool show SAFE under OFMC CL-AtSe models. performance comparisons are also made, which ensure relatively better than existing related schemes. To best our knowledge, should be implemented in practical application, well attacks, complexities schemes, achieves proper mutual authentication along user-friendly phase.