HIGH-PERFORMANCE NONCE-BASED AUTHENTICATION AND KEY DISTRIBUTION PROTOCOLS AGAINST PASSWORD GUESSING ATTACKS

A family of nonce-based authentication and key distribution protocols based on the trusted third-party model are proposed which are not only efficient on the view points of computation and communication, but al so secure against on-line and off-line password guessing attacks. A ne w concept of implicit or indirect challenge-response authentication wh ich can be used to combine the processes of identity authentication an d data integrity assurance during key distribution and to make the ent ire protocol be more concise and efficient is introduced in this paper . In the proposed family of protocols, specific protocol can be chosen such that the secure session key to be distributed is selected by spe cific participant in the protocol. Detailed security analyses of every protocols are given.