Cryptanalysis of Two PAKE Protocols for Body Area Networks and Smart Environments
Mohsen Toorani · 2015
Password-authenticated key exchange (PAKE) protocols enable two or more entities to authenticate each other and share a strong cryptographic key based on a pre-shared human memorable password. In this paper, we present several attacks on two recent elliptic curve-based PAKE protocols that have been suggested for use in body area networks and smart environments. A variant of the first PAKE protocol has been included in the latest standard for body area networks. The second PAKE protocol is a modified variant of the first protocol, and has been proposed for bridging the user interface gap in pervasive computing and smart environments.