摘要
A scenario in which a user and a server can authenticate each other and generate a strong session key through a symmetric cipher by their shared weak (low-entropy) password in an insecure channel is considered. Until now, designing a secure protocol in this scenario has been an open problem due to the offline dictionary attack. A protocol to resolve this problem is proposed. The idea is to ensure that people must participate to verify each guessed password in the offline dictionary attack. Therefore, this attack cannot succeed in a reasonable time for the proposed protocol.
原文 | English |
---|---|
頁(從 - 到) | 185-186 |
頁數 | 2 |
期刊 | Electronics Letters |
卷 | 41 |
發行號 | 4 |
DOIs | |
出版狀態 | Published - 2005 2月 17 |
All Science Journal Classification (ASJC) codes
- 電氣與電子工程