Abstract:

Firstly, an efficient verifierbased threeparty passwordauthenticated key exchange protocol previously proposed is analyzed. The protocol is vulnerable to security threats such as server key disclosure attack and so on, and has a lack of forward secrecy. Secondly, on the basis of the analysis, in order to solve the problem that most of existing verifierbased 3PAKE protocols cannot resist server key disclosure attack, a novel 3PAKE protocol is proposed. Through security analysis, the new protocol can be proved to be more secure than the old one, and has the ability to resist all known attacks. In addition, compared with existing protocols, it is more efficient.

Key words: verifier-based;password-authenticated key exchange protocol for three-party;server key disclosure attack;session key;forward secrecy