A practical password-based two-server authentication and key exchange system

• Main Authors: YANG, Yanjiang, DENG, Robert H., Bao, Feng
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2006
• Subjects: Password system; password verification data (PVD); user authentication; key exchange; offline dictionary attack; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/1190; https://ink.library.smu.edu.sg/context/sis_research/article/2189/viewcontent/A_practical_password_based_two_server_authentication_and_key_exchange_system.pdf
• Institution: Singapore Management University

Most password-based user authentication systems place total trust on the authentication server where cleartext passwords or easily derived password verification data are stored in a central database. Such systems are, thus, by no means resilient against offline dictionary attacks initiated at the se...