An Efficient Password-based Authenticated Key Exchange Protocol

Password-based encrypted key exchange are protocols that are designed to provide pair of users communicating over an unreliable channel with a secure session key even when the secret key or password shared between two users is drawn from a small set of values. The proposed key exchange protocol provides implicit key authentication as well as the desired security attributes of an authenticated key exchange protocol. In this paper, we also conduct a detailed analysis on the flaws and also propose a verifier-based password-authenticated key exchange protocol via elliptic curves which is secure against various known attacks.