Efficient and flexible password authenticated key agreement for Voice over Internet Protocol Session Initiation Protocol using smart card

SUMMARY Providing a suitable key agreement protocol for session initiation protocol is crucial to protecting the communication among the users over the open channel. This paper presents an efficient and flexible password authenticated key agreement protocol for session initiation protocol associated with Voice over Internet Protocol. The proposed protocol has many unique properties, such as session key agreement, mutual authentication, password updating function and the server not needing to maintain a password or verification table, and so on. In addition, our protocol is secure against the replay attack, the impersonation attack, the stolen‐verifier attack, the man‐in‐the‐middle attack, the Denning–Sacco attack, and the offline dictionary attack with or without the smart card. Copyright © 2013 John Wiley & Sons, Ltd. The proposed authenticated key agreement protocol has some unique properties, such as password updating function and the server not needing to maintain a password or verification table, which has not been considered in other related work. These new features are crucial to implementing a practical and universal authenticated key agreement for session initiation protocol used by Voice over Internet Protocol.