Strong Password-Based Authentication in TLS using the Three-Party Group Diffie-Hellman Protocol

Michel Abdalla 1, 2, 3 Emmanuel Bresson 4 Olivier Chevassut 5 Bodo Möller David Pointcheval 1, 2, 3
1 CASCADE - Construction and Analysis of Systems for Confidentiality and Authenticity of Data and Entities
DI-ENS - Département d'informatique de l'École normale supérieure, Inria Paris-Rocquencourt, CNRS - Centre National de la Recherche Scientifique : UMR 8548
2 ENS Paris - École normale supérieure - Paris
3 LIENS - Laboratoire d'informatique de l'école normale supérieure
4 DCSSI/SDS/LTI - Laboratoire des Technologies de l'Information
5 LBNL - Lawrence Berkeley National Laboratory [Berkeley]
Abstract : The Internet has evolved into a very hostile ecosystem where "phishing" attacks are com- mon practice. This paper shows that the three-party group Diffie-Hellman key exchange can help protect against these attacks. We have developed password-based ciphersuites for the Transport Layer Security (TLS) protocol that are not only provably secure but also believed to be free from patent and licensing restrictions based on an analysis of relevant patents in the area.
Type de document :
Article dans une revue
International Journal of Security and Networks, Inderscience, 2007, 2 (3/4), pp.284-296. 〈10.1504/IJSN.2007.013181〉
Liste complète des métadonnées
https://hal.inria.fr/hal-00918396
Contributeur : Michel Abdalla <>
Soumis le : vendredi 13 décembre 2013 - 14:43:19
Dernière modification le : vendredi 25 mai 2018 - 12:02:05

Lien texte intégral

openaccess

Identifiants

Collections

INRIA | ENS-PARIS | PSL | INRIA-ROCQ

Citation

Michel Abdalla, Emmanuel Bresson, Olivier Chevassut, Bodo Möller, David Pointcheval. Strong Password-Based Authentication in TLS using the Three-Party Group Diffie-Hellman Protocol. International Journal of Security and Networks, Inderscience, 2007, 2 (3/4), pp.284-296. 〈10.1504/IJSN.2007.013181〉. 〈hal-00918396〉

Exporter

BibTeX TEI DC DCterms EndNote

Partager

Métriques

Consultations de la notice

235

Contact


archive-ouverte@inria.fr