skip to main content
OSTI.GOV title logo U.S. Department of Energy
Office of Scientific and Technical Information

Title: Strong Password-Based Authentication in TLS Using the Three-PartyGroup Diffie-Hellman Protocol

Abstract

The Internet has evolved into a very hostile ecosystem where"phishing'' attacks are common practice. This paper shows that thethree-party group Diffie-Hellman key exchange can help protect againstthese attacks. We have developed a suite of password-based cipher suitesfor the Transport Layer Security (TLS) protocol that are not onlyprovably secure but also assumed to be free from patent and licensingrestrictions based on an analysis of relevant patents in thearea.

Authors:
; ; ; ;
Publication Date:
Research Org.:
COLLABORATION - Ecole NormaleSuperieure/France
OSTI Identifier:
923272
Report Number(s):
LBNL-59947
R&D Project: KL0501; BnR: YN0100000; TRN: US200804%%1035
DOE Contract Number:  
DE-AC02-05CH11231
Resource Type:
Journal Article
Journal Name:
International Journal of Security and Networks
Additional Journal Information:
Journal Volume: 2; Journal Issue: 3-4; Related Information: Journal Publication Date: 04/11/2007
Country of Publication:
United States
Language:
English
Subject:
42; ECOSYSTEMS; INTERNET; LICENSING; SECURITY; TRANSPORT; Password Authentication Group Diffie-Hellman Key ExchangeTLS

Citation Formats

Abdalla, Michel, Bresson, Emmanuel, Chevassut, Olivier, Moeller, Bodo, and Pointcheval, David. Strong Password-Based Authentication in TLS Using the Three-PartyGroup Diffie-Hellman Protocol. United States: N. p., 2006. Web.
Abdalla, Michel, Bresson, Emmanuel, Chevassut, Olivier, Moeller, Bodo, & Pointcheval, David. Strong Password-Based Authentication in TLS Using the Three-PartyGroup Diffie-Hellman Protocol. United States.
Abdalla, Michel, Bresson, Emmanuel, Chevassut, Olivier, Moeller, Bodo, and Pointcheval, David. Sat . "Strong Password-Based Authentication in TLS Using the Three-PartyGroup Diffie-Hellman Protocol". United States.
@article{osti_923272,
title = {Strong Password-Based Authentication in TLS Using the Three-PartyGroup Diffie-Hellman Protocol},
author = {Abdalla, Michel and Bresson, Emmanuel and Chevassut, Olivier and Moeller, Bodo and Pointcheval, David},
abstractNote = {The Internet has evolved into a very hostile ecosystem where"phishing'' attacks are common practice. This paper shows that thethree-party group Diffie-Hellman key exchange can help protect againstthese attacks. We have developed a suite of password-based cipher suitesfor the Transport Layer Security (TLS) protocol that are not onlyprovably secure but also assumed to be free from patent and licensingrestrictions based on an analysis of relevant patents in thearea.},
doi = {},
url = {https://www.osti.gov/biblio/923272}, journal = {International Journal of Security and Networks},
number = 3-4,
volume = 2,
place = {United States},
year = {2006},
month = {8}
}