Efficient Client-to-Client Password Authenticated Key Exchange Based on RSA

Abstract

The design of secure password authenticated key exchange (PAKE) protocols with RSA is a nontrivial hard work. Until now there have been only a few secure PAKE protocols based on RSA and most of them work in the two-party setting. Although two-party PAKE protocols are quite useful for client-server architectures, they are very inconvenient in key management for client-client communications in large-scale communication environment. In this paper we present an efficient PAKE protocol using RSA in the three-party setting, called E3PAKE-RSA protocol. We also provide a formal security proof of E3PAKE-RSA protocol under the RSA assumption and the random oracle model.