Gateway-Oriented Password-Authenticated Key Exchange Based on RSA

Abstract

Gateway-oriented password-based authenticated key exchange(GPAKE) protocal is a three-party protocol,which allows a client and a gateway to establish a common session key with the help of an authentication server.To date,most of the published protocols for GPAKE were based on Diffie-Hellman key exchange.This paper presents the first provably-secure GPAKE protocol using RSA.It is based on the protocol PEKEP of Zhang and is provably-secure in the random oracle model under the RSA assumption.Furthermore,the proposed protocol can resist both e-residue and undetectable on-line dictionary attacks.