Strong password-based authentication in TLS using the three-party group DiffieHellman protocol. (12th April 2007)

• Record Type: Journal Article
• Authors: Abdalla, Michel; Bresson, Emmanuel; Chevassut, Olivier; Moller, Bodo; , David Pointcheval
• Is Part Of: International journal of security and networks. Volume 2:Number 3/4(2007)
• Page Start: 284
• Page End: 296
• Publication Date: 2007-04-12
• Subjects: password authentication -- group DiffieHellman key exchange -- transport layer security -- TLS -- phishing attacks -- cryptography -- networks; Computer networks -- Security measures -- Periodicals; 005.805
• Languages: English
• ISSNs: 1747-8405

Abstract

The internet has evolved into a very hostile ecosystem where 'phishing' attacks are common practice. This paper shows that the three-party group Diffie-Hellman key exchange can help protect against these attacks. We have developed password-based ciphersuites for the Transport Layer Security (TLS) protocol that are not only provably secure but also believed to be free from patent and licensing restrictions based on an analysis of relevant patents in the area.