Click Here to download this article
- Articles
- Authors
- Blogs
- Free Tools
- Links
- Message Boards
- Newsletter
- Security Tests
- Services
- Software
- White Papers
Encrypted Key Exchange: Password-Based Protocols Secure Against Dictionary Attacks
|
| |
|
Classical cryptographic protocols based on user-chosen keys allow an attacker to mount password-guessing attacks. We introduce a novel combination of asymmetric (public-key) and symmetric (secret-key) cryptography that allow two parties sharing a common password to exchange confidential and authenticated information over an insecure network. These protocols are secure against active attacks, and have the property that the password is protected against off-line "dictionary" attacks. There are a number of other useful applications as well, including secure public telephones.
Featured Links*
Become a WindowSecurity.com member!
Discuss your security issues with thousands of other network security experts. Click here to join!