Encrypted key exchange

Encrypted Key Exchange (also known as EKE) is a family of password-authenticated key agreement methods described by Steven M. Bellovin and Michael Merritt.[1] Although several of the forms of EKE in this paper were later found to be flawed , the surviving, refined, and enhanced forms of EKE effectively make this the first method to amplify a shared password into a shared key, where the shared key may subsequently be used to provide a zero-knowledge password proof or other functions.

In the most general form of EKE, at least one party encrypts an ephemeral (one-time) public key using a password, and sends it to a second party, who decrypts it and uses it to negotiate a shared key with the first party.

A second paper describes Augmented-EKE,[2] and introduced the concept of augmented password-authenticated key agreement for client/server scenarios. Augmented methods have the added goal of ensuring that password verification data stolen from a server cannot be used by an attacker to masquerade as the client, unless the attacker first determines the password (e.g. by performing a brute force attack on the stolen data).

A version of EKE based on Diffie-Hellman, known as DH-EKE, has survived attack and has led to improved variations, such as the PAK family of methods in IEEE P1363.2.

With the US patent on EKE expiring in late 2011, an EAP authentication method using EKE was published as an IETF RFC.[3] The EAP method uses the Diffie-Hellman variant of EKE.

Patents

U.S. Patent 5,241,599, owned by Lucent, describes the initial EKE method. It expired in October 2011.
U.S. Patent 5,440,635, owned by Lucent, describes the augmented EKE method. It expired in August 2013.

References

  1. ↑ S. M. Bellovin; M. Merritt (May 1992). "Encrypted Key Exchange: Password-Based Protocols Secure Against Dictionary Attacks" (PDF). Proceedings of the I.E.E.E. Symposium on Research in Security and Privacy, Oakland.
  2. ↑ S. M. Bellovin; M. Merritt (November 1993). "Augmented Encrypted Key Exchange: A Password-Based Protocol Secure Against Dictionary Attacks and Password File Compromise" (PDF). Proceedings of the 1st ACM Conference on Computer and Communications Security. ACM Press. pp. 244–250.
  3. ↑ Y. Sheffer; G. Zorn, H. Tschofenig, S. Fluhrer (February 2011), An EAP Authentication Method Based on the Encrypted Key Exchange (EKE) Protocol. Cite uses deprecated parameter |coauthors= (help)

See also

This article is issued from Wikipedia - version of the Wednesday, May 07, 2014. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.