Analysis and improvement of cross-realm client-to-client password authenticated key exchange protocols
Xiaofei Ding, Chuangui Ma, Qingfeng Cheng · Wuhan University Journal of Natural Sciences · 2008
Because cross-realm C2C-PAKE (client-to-client password authenticated key exchange) protocols can not resist some attacks, this paper writes up new attacks on two representative protocols, then designs a new cross-realm C2C-PAKE protocol with signature and optimal number of rounds for a client (only 2-rounds between a client and a server). Finally, it is proved that the new protocol can be resistant to all known attacks through heuristic analysis and that it brings more security through the comparisons of security properties with other protocols.