期刊名称：The International Arab Journal of Information Technology
印刷版ISSN：1683-3198
出版年度：2013
卷号：10
期号：3
出版社：Zarqa Private University
摘要：This paper discusses the security for a simple and efficient three-party password-based authenticated key exchange protocol proposed by Huang most recently. Our analysis shows her protocol is still vulnerable to three kinds of attacks: (1) undetectable on-line dictionary attacks; and (2) key-compromise impersonation attack. Thereafter we propose an enhanced protocol that can defeat the attacks described and yet is reasonably efficient.
