关键词: 信息安全, 密钥协商, 口令, 椭圆曲线

Abstract: Password-based Authenticated Key Agreement (PAKA) protocols allow parties sharing only a low-entropy, human-memorable password to authenticate them and establish a common session key over an insecure channel in a secure manner. A new three-party password-based authenticated key agreement protocol based on the elliptic curve was proposed in this paper. The new protocol skillfully hid the password of each participant into the messages to ensure the security of passwords. The security of the new protocol was based on the discrete logarithm on elliptic curve, and the server did not need to be completely trusted. The results of security analysis and efficiency analysis show that the new protocol realizes the secure communications under the low computational cost.

Key words: information security, key agreement, password, elliptic curve