The DOI matches its Crossref record; 15 of the 15 references it cites were found in a registry or an index.
Strong password-only authenticated key exchange
Open accessAbstract
A new simple password exponential key exchange method (SPEKE) is described. It belongs to an exclusive class of methods which provide authentication and key establishment over an insecure channel using only a small password, without risk of offline dictionary attack. SPEKE and the closely-related Diffie-Hellman Encrypted Key Exchange (DH-EKE) are examined in light of both known and new attacks, along with sufficient preventive constraints. Although SPEKE and DH-EKE are similar, the constraints are different. The class of strong password-only methods is compared to other authentication schemes. Benefits, limitations, and tradeoffs between efficiency and security are discussed. These methods are important for several uses, including replacement of obsolete systems, and building hybrid two-factor systems where independent password-only and key-based methods can survive a single event of either key theft or password compromise.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Encrypted key exchange: password-based protocols secure against dictionary attacks
Bellovin, S. M., & Merritt, M. (2003) · IEEE Computer Society Symposium on Research in Security and Privacy · doi:10.1109/risp.1992.213269 · Cited by 1,354
Pohlig, S., & Hellman, M. (1978) · IEEE Transactions on Information Theory · doi:10.1109/tit.1978.1055817 · Cited by 1,199
Authentication and authenticated key exchanges
Diffie, W., van Oorschot, P. C., & Wiener, M. J. (1992) · Designs Codes and Cryptography · doi:10.1007/bf00124891 · Cited by 1,147
Augmented encrypted key exchange
Bellovin, S. M., & Merritt, M. (1993) · Proceedings of the ACM Conference on Computer and Communications Security · doi:10.1145/168588.168618 · Cited by 523
Privacy and authentication: An introduction to cryptography
Diffie, W., & Hellman, M. E. (1979) · Proceedings of the IEEE · doi:10.1109/proc.1979.11256 · Cited by 468
Protecting poorly chosen secrets from guessing attacks
Gong, L., Lomas, M., Needham, R. M., & Saltzer, J. H. (1993) · IEEE Journal on Selected Areas in Communications · doi:10.1109/49.223865 · Cited by 363
Refinement and extension of encrypted key exchange
Steiner, M., Tsudik, G., & Waidner, M. (1995) · ACM SIGOPS Operating Systems Review · doi:10.1145/206826.206834 · Cited by 253
The discrete logarithm problem
McCurley, K. S. (1991) · Proceedings of symposia in applied mathematics · doi:10.1090/psapm/042/1095551 · Cited by 185
On Diffie-Hellman Key Agreement with Short Exponents
van Oorschot, P. C., & Wiener, M. J. (1996) · Lecture notes in computer science · doi:10.1007/3-540-68339-9_29 · Cited by 134
SPX: global authentication using public key certificates
Tardo, J. J., & Alagappan, K. (2002) · IEEE Computer Society Symposium on Research in Security and Privacy · doi:10.1109/risp.1991.130791 · Cited by 126
Research works printed but not linked: 6
- 10.5555/882488.884178 · DOI
- Ellison C., 1996, Proceedings of the Sixth Annual USENIX Security Symposium, 67
- 10.5555/794195.795036 · DOI
- Jaspan B., 1996, Proceedings of the Sixth Annual USENIX Security Conference, 43
- 1996, {Sch96} B. Schneier, "Applied Cryptography
- van Oorschot P. C., 1996, Proceedings of Eurocrypt '96
Cited by
Sorted by citations
Items 101–200 of 526
Abdalla, M. F., Haase, B., & Hesse, J. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-92068-5_24 · Cited by 34
Password-Authenticated Key Exchange from Group Actions
Abdalla, M. F., Eisenhofer, T., Kiltz, E., Kunzweiler, S., & Riepel, D. (2022) · Lecture notes in computer science · doi:10.1007/978-3-031-15979-4_24 · Cited by 34
Analysis of the IPSec key exchange standard
Perlman, R., & Kaufman, C. (2002) · IEEE International Conference on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE) · doi:10.1109/enabl.2001.953405 · Cited by 34
A Cost Effective Symmetric Key Cryptographic Algorithm for Small Amount of Data
Sarker, M. Z. H., & Parvez, M. S. (2005) · IEEE International Multitopic Conference (INMIC) · doi:10.1109/inmic.2005.334435 · Cited by 34
Cox, R., Grosse, E. H., Pike, R. N., Presotto, D. L., & Quinlan, S. (2002) · USENIX Security Symposium · Cited by 34
Indifferentiable Hashing to Barreto–Naehrig Curves
Fouque, P.-A., & Tibouchi, M. (2012) · Lecture notes in computer science · doi:10.1007/978-3-642-33481-8_1 · Cited by 33
Lightweight private proximity testing for geospatial social networks
Kotzanikolaou, P., Patsakis, C., Magkos, E., & Korakakis, M. (2015) · Computer Communications · doi:10.1016/j.comcom.2015.07.017 · Cited by 33
Farashahi, R. R. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-21969-6_17 · Cited by 33
Improving Accessibility and Security for Mobile Phone Shopping
Lee, S., & Park, S. (2006) · Journal of Computer Information Systems · doi:10.1080/08874417.2006.11645906 · Cited by 33
Communication-efficient three-party protocols for authentication and key agreement
Lee, T., Liu, J.-L., Sung, M.-J., Yang, S.-B., & Chen, C.-M. (2009) · Computers & Mathematics with Applications · doi:10.1016/j.camwa.2009.02.039 · Cited by 32
Provably secure authenticated key exchange protocols for low power computing clients
Wen, H., Lin, C., & Hwang, T. (2005) · Computers & Security · doi:10.1016/j.cose.2005.09.010 · Cited by 32
Pointcheval, D., & Wang, G. (2017) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3052973.3053026 · Cited by 32
Security Analysis of a Password Authenticated Key Exchange Protocol
Bao, F. (2003) · Lecture notes in computer science · doi:10.1007/10958513_16 · Cited by 32
N-Party Encrypted Diffie-Hellman Key Exchange Using Different Passwords
Byun, J. W., & Lee, D. H. (2005) · Lecture notes in computer science · doi:10.1007/11496137_6 · Cited by 32
Efficient cryptographic protocols preventing man-in-the-middle attacks
Galil, Z., & Katz, J. I. (2002) · Cited by 32
Fusion of Cryptographic Watermarking Medical Image System with Reversible Property
Viswanathan, P., & Krishna, P. V. (2011) · Communications in computer and information science · doi:10.1007/978-3-642-22786-8_67 · Cited by 31
Efficient biometric and password based mutual authentication for consumer USB mass storage devices
Giri, D., Sherratt, R. S., Maitra, T., & Amin, R. (2015) · IEEE Transactions on Consumer Electronics · doi:10.1109/tce.2015.7389804 · Cited by 31
Timing attacks against trusted path
Trostle, J. T. (2002) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/secpri.1998.674829 · Cited by 31
Password-Based Authenticated Key Exchange
Pointcheval, D. (2012) · Lecture notes in computer science · doi:10.1007/978-3-642-30057-8_23 · Cited by 30
Hao, F., & van Oorschot, P. C. (2022) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3488932.3523256 · Cited by 30
Byun, J. W., Lee, D. H., & Lim, J. I. (2006) · IEEE Communications Letters · doi:10.1109/lcomm.2006.1714545 · Cited by 30
Repairing the Bluetooth Pairing Protocol
Wong, F. L., Stajano, F., & Clulow, J. (2007) · Springer eBooks · doi:10.1007/978-3-540-77156-2_4 · Cited by 30
PEGASIS: Practical Effective Class Group Action using 4-Dimensional Isogenies
Dartois, P., Eriksen, J. K., Fouotsa, T. B., Merdy, A. H. L., Invernizzi, R., Robert, D., Rueger, R., Vercauteren, F., & Wesolowski, B. (2025) · Lecture notes in computer science · doi:10.1007/978-3-032-01855-7_3 · Cited by 29
Hao, F., & Shahandashti, S. F. (2014) · Lecture notes in computer science · doi:10.1007/978-3-319-14054-4_2 · Cited by 29
Pass-thoughts: Authenticating With Our Minds.
Thorpe, J., van Oorschot, P. C., & Somayaji, A. B. (2005) · Cited by 29
On the Application of Identity-Based Cryptography in Grid Security
Lim, H. W. (2006) · Royal Holloway Digital Repository (Royal Holloway University of London) · Cited by 29
Simple authenticated key agreement protocol resistant to password guessing attacks
Yeh, H., & Sun, H. (2002) · ACM SIGOPS Operating Systems Review · doi:10.1145/583800.583802 · Cited by 28
Yet Another Attempt in User Authentication
Vokorokos, L., Pekár, A., Ádám, N., & Darányi, P. (2013) · Acta Polytechnica Hungarica · doi:10.12700/aph.10.03.2013.3.4 · Cited by 27
Two-server password-only authenticated key exchange
Katz, J. I., MACKENZIE, P. D., Taban, G., & Gligor, V. D. (2011) · Journal of Computer and System Sciences · doi:10.1016/j.jcss.2011.09.005 · Cited by 27
Gajek, S., Löhr, H., Sadeghi, A., & Winandy, M. (2009) · Scalable Trusted Computing · doi:10.1145/1655108.1655112 · Cited by 27
Threshold password authentication against guessing attacks in Ad hoc networks
Chai, Z., Cao, Z., & Lu, R. (2006) · Ad Hoc Networks · doi:10.1016/j.adhoc.2006.05.003 · Cited by 27
Practical Authenticated Key Agreement Using Passwords
Kwon, T. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-30144-8_1 · Cited by 27
A hash-based strong-password authentication scheme without using smart cards
Ku, W. (2004) · ACM SIGOPS Operating Systems Review · doi:10.1145/974104.974107 · Cited by 27
Provably secure threshold password-authenticated key exchange
Raimondo, M. D., & Gennaro, R. (2006) · Journal of Computer and System Sciences · doi:10.1016/j.jcss.2006.02.002 · Cited by 26
On the Security of Some Password Authentication Protocols
Hsieh, B., Sun, H., & Hwang, T. (2003) · Informatica · doi:10.15388/informatica.2003.014 · Cited by 26
Cryptanalysis of the dragonfly key exchange protocol
Clarke, D., & Hao, F. (2014) · IET Information Security · doi:10.1049/iet-ifs.2013.0081 · Cited by 25
A Remote User Authentication Scheme Using Strong Graphical Passwords
Ku, W., & Tsaur, M.-J. (2005) · Conference on Local Computer Networks · doi:10.1109/lcn.2005.16 · Cited by 24
Halting password puzzles: hard-to-break encryption from human-memorable keys
Boyen, X. (2007) · Cited by 24
Cryptanalysis of Two Password-Authenticated Key Exchange Protocols
Wan, Z., & Wang, S. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-27800-9_15 · Cited by 24
A Multifactor Secure Authentication System for Wireless Payment
Sanyal, S., Tiwari, A., & Sanyal, S. (2010) · Advanced information and knowledge processing · doi:10.1007/978-1-84996-074-8_13 · Cited by 23
Authentication Mechanisms and Classification: A Literature Survey
Chenchev, I., Aleksieva-Petrova, A., & Petrov, M. (2021) · Lecture notes in networks and systems · doi:10.1007/978-3-030-80129-8_69 · Cited by 23
Password-based authentication and key distribution protocols with perfect forward secrecy
Sun, H., & Yeh, H. (2006) · Journal of Computer and System Sciences · doi:10.1016/j.jcss.2006.03.005 · Cited by 23
Two simple attacks on Lin-Shen-Hwang's strong-password authentication protocol
Ku, W., Tsai, H.-C., & Chen, S.-M. (2003) · ACM SIGOPS Operating Systems Review · doi:10.1145/958965.958968 · Cited by 23
Improvement of recently proposed Remote User Authentication Schemes.Preprint
Fang, G., & Gen-xun, H. (2006) · IACR Cryptology ePrint Archive · Cited by 23
Security of Improvement on Methods for Protecting Password Transmission
Yang, C., Chang, T., & Hwang, M. (2003) · Informatica · doi:10.15388/informatica.2003.041 · Cited by 22
Homomorphic Hash and Blockchain Based Authentication Key Exchange Protocol for Strangers
Yao, H., Wang, C., Hai, B., & Zhu, S. (2018) · International Conference on Advanced Cloud and Big Data · doi:10.1109/cbd.2018.00051 · Cited by 22
Secure agreement scheme for g xy via password authentication
Kwon, & Song (1999) · Electronics Letters · doi:10.1049/el:19990623 · Cited by 22
More Efficient Password Authenticated Key Exchange Based on RSA
Wong, D. S., Chan, A. H., & Zhu, F. W. (2003) · Lecture notes in computer science · doi:10.1007/978-3-540-24582-7_28 · Cited by 22
Extensible Authentication Protocol (EAP) Authentication Using Only a Password
Harkins, D., & Zorn, G. (2010) · doi:10.17487/rfc5931 · Cited by 21
Cross-Domain Password-Based Authenticated Key Exchange Revisited
Chen, L., Lim, H. W., & Yang, G. (2014) · ACM Transactions on Information and System Security · doi:10.1145/2584681 · Cited by 21
Identifying Close Friends on the Internet.
Baden, R., Spring, N. T., & Bhattacharjee, B. (2009) · Cited by 21
Composition of Password-Based Protocols
Delaune, S., Kremer, S., & Ryan, M. D. (2008) · IEEE Computer Security Foundations Workshop (CSFW) · doi:10.1109/csf.2008.6 · Cited by 21
Evaluating Security of Low-Power Internet of Things Networks
Vaccari, I. (2019) · International Journal of Computing and Digital Systems · doi:10.12785/ijcds/080202 · Cited by 20
User location privacy protection mechanism for location-based services
He, Y., & Chen, J. (2020) · Digital Communications and Networks · doi:10.1016/j.dcan.2020.07.012 · Cited by 20
Efficient and Strong Symmetric Password Authenticated Key Exchange With Identity Privacy for IoT
Lian, H., Yang, Y., & Zhao, Y. (2022) · IEEE Internet of Things Journal · doi:10.1109/jiot.2022.3219524 · Cited by 20
Official Arbitration with Secure Cloud Storage Application
Küpçü, A. (2013) · The Computer Journal · doi:10.1093/comjnl/bxt138 · Cited by 20
TruWalletM: Secure Web Authentication on Mobile Platforms
Bugiel, S., Dmitrienko, A., Kostiainen, K., Sadeghi, A., & Winandy, M. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-25283-9_15 · Cited by 19
Password-Enabled PKI : Virtual Smartcards vs. Virtual Soft Tokens
Sandhu, R. S. (2002) · Cited by 19
Security enhancement for the "simple authentication key agreement algorithm"
Lin, I., Chang, C., & Hwang, M. (2002) · IEEE Annual International Computer Software and Applications Conference (COMPSAC) · doi:10.1109/cmpsac.2000.884699 · Cited by 19
Extending web applications with a lightweight zero knowledge proof authentication
Grzonkowski, S., Zaremba, W., Zaremba, M., & McDaniel, B. (2008) · Conference on Soft Computing as Transdisciplinary Science and Technology · doi:10.1145/1456223.1456241 · Cited by 19
APPMA - an Anti-phishing protocol with mutual Authentication
Saeed, M., & Shahhoseini, H. S. (2010) · IEEE Symposium on Computers and Communications (ISCC) · doi:10.1109/iscc.2010.5546794 · Cited by 18
Efficient and Strongly Secure Password-based Server Aided Key Exchange
Yoneyama, K. (2009) · Journal of Information Processing · doi:10.2197/ipsjjip.17.202 · Cited by 18
Secure Sessions from Weak Secrets
Christianson, B., Roe, M., & Wheeler, D. (2005) · Lecture notes in computer science · doi:10.1007/11542322_24 · Cited by 18
An EAP Authentication Method Based on the Encrypted Key Exchange (EKE) Protocol
Sheffer, Y., Zorn, G., Tschofenig, H., & Fluhrer, S. R. (2011) · doi:10.17487/rfc6124 · Cited by 18
A New Protocol for the Nearby Friend Problem
Chatterjee, S., Karabina, K., & Menezes, A. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-10868-6_14 · Cited by 17
Comparative studies on authentication and key exchange methods for 802.11 wireless LAN
Lei, J., Fu, X., Hogrefe, D., & Tan, J. (2007) · Computers & Security · doi:10.1016/j.cose.2007.01.001 · Cited by 17
Dragonblood: A Security Analysis of WPA3's SAE Handshake.
Vanhoef, M., & Ronen, E. (2019) · Lirias (KU Leuven) · Cited by 17
A SECURE AND EFFICIENT ECC-BASED AKA PROTOCOL FOR WIRELESS MOBILE COMMUNICATIONS
Lo, J.-L., 黃明祥, Lee, C., Hwang, & -, Y. C. (2010) · Cited by 17
A Generic Construction of Tightly Secure Password-Based Authenticated Key Exchange
Pan, J., & Zeng, R. (2023) · Lecture notes in computer science · doi:10.1007/978-981-99-8742-9_5 · Cited by 16
Towards Secure and Practical Location Privacy through Private Equality Testing
Magkos, E., Kotzanikolaou, P., Magioladitis, M., Sioutas, S., & Verykios, V. S. (2014) · Lecture notes in computer science · doi:10.1007/978-3-319-11257-2_24 · Cited by 16
A new password-authenticated module learning with rounding-based key exchange protocol: Saber.PAKE
Seyhan, K., & Akleylek, S. (2023) · The Journal of Supercomputing · doi:10.1007/s11227-023-05251-x · Cited by 16
Analyzing and Patching SPEKE in ISO/IEC
Hao, F., Metere, R., Shahandashti, S. F., & Dong, C. (2018) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2018.2832984 · Cited by 16
Constant-Round Password-Based Group Key Generation for Multi-layer Ad-Hoc Networks
Byun, J. W., Lee, S.-M., Lee, D. H., & Hong, D. (2006) · Lecture notes in computer science · doi:10.1007/11734666_2 · Cited by 16
Cryptanalysis of the N-Party Encrypted Diffie-Hellman Key Exchange Using Different Passwords
Phan, R. C. ‐., & Goi, B. (2006) · Lecture notes in computer science · doi:10.1007/11767480_15 · Cited by 16
Efficient Password-Authenticated Key Exchange Based on RSA
Park, S., Nam, J., Kim, S., & Won, D. (2006) · Lecture notes in computer science · doi:10.1007/11967668_20 · Cited by 16
On the Provable Security of the Dragonfly Protocol
Lancrenon, J., & Škrobot, M. (2015) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-23318-5_14 · Cited by 15
Efficient provably secure password-based explicit authenticated key agreement
Ruan, O., Kumar, N., He, D., & Lee, J.-H. (2015) · Pervasive and Mobile Computing · doi:10.1016/j.pmcj.2015.06.008 · Cited by 15
Off-the-Record Instant Messaging for Group Conversation
Bian, J., Seker, R., & Topaloĝlu, Ü. (2007) · IEEE International Conference on Information Reuse and Integration (IRI) · doi:10.1109/iri.2007.4296601 · Cited by 15
Security and privacy of using AllJoyn IoT framework at home and beyond
Tománek, O., & Kencl, L. (2016) · International Conference on Intelligent Green Building and Smart Grid · doi:10.1109/igbsg.2016.7539413 · Cited by 15
Very-Efficient Anonymous Password-Authenticated Key Exchange and Its Extensions
Shin, S., Kobara, K., & Imai, H. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-02181-7_16 · Cited by 15
On the Security of Methods for Protecting Password Transmission
Tseng, Y., Jan, J., & Chien, H. (2001) · doi:10.3233/inf-2001-12308 · Cited by 15
Password authenticated key exchange protocols among diverse network domains
Yeh, H., & Sun, H. (2005) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2005.03.001 · Cited by 15
Cryptanalysis of Song's advanced smart card based password authentication protocolPreprint
Tapiador, J., Hernandez-Castro, J. C., Lopez, P. P., & Clark, J. A. (2011) · arXiv (Cornell University) · doi:10.48550/arxiv.1111.2744 · Cited by 15
HPAKE : Password Authentication Secure against Cross-Site User Impersonation
Boyen, X. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-10433-6_19 · Cited by 14
SCAPACH: Scalable Password-Changing Protocol for Smart Grid Device Authentication
Tabassum, R., Nahrstedt, K., Rogers, E. J., & Lui, K. (2013) · International Conference on Computer Communications and Networks (ICCCN) · doi:10.1109/icccn.2013.6614189 · Cited by 14
PUF-Based Mutual Multifactor Entity and Transaction Authentication for Secure Banking
Resende, A. C. D., Mochetti, K., & Aranha, D. F. (2016) · Lecture notes in computer science · doi:10.1007/978-3-319-29078-2_5 · Cited by 14
Man-in-the-Machine : Exploiting Ill-Secured Communication Inside the Computer
Bui, T., Rao, S. P., Antikainen, M., Bojan, V. M., & Aura, T. (2018) · Aaltodoc (Aalto University) · Cited by 14
Becerra, J., Ostrev, D., & Škrobot, M. (2018) · Lecture notes in computer science · doi:10.1007/978-3-030-01446-9_21 · Cited by 14
Detecting Man-in-the-Middle Attack in Fog Computing for Social Media
Aliyu, F. M., Sheltami, T., Mahmoud, A. S. H., Al-Awami, L., & Yasar, A.-U.-H. (2021) · Computers, materials & continua/Computers, materials & continua (Print) · doi:10.32604/cmc.2021.016938 · Cited by 14
The “Quantum Annoying” Property of Password-Authenticated Key Exchange Protocols
Eaton, E., & Stebila, D. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-81293-5_9 · Cited by 14
How Not to Create an Isogeny-Based PAKE
Azarderakhsh, R., Jao, D., Koziel, B., LeGrow, J. T., Soukharev, V., & Taraskin, O. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-57808-4_9 · Cited by 14
On the Security of Some Password-Based Key Agreement Schemes
Tang, Q., & Mitchell, C. J. (2005) · Lecture notes in computer science · doi:10.1007/11596981_22 · Cited by 14
Password-based user authentication and key distribution protocols for client–server applications
Yeh, H., & Sun, H. (2003) · Journal of Systems and Software · doi:10.1016/s0164-1212(03)00093-1 · Cited by 14
Security analysis of the generalized key agreement and password authentication protocol
Yeh, H., Sun, H., & Hwang, T. (2001) · IEEE Communications Letters · doi:10.1109/4234.966034 · Cited by 14
PDM: a new strong password-based protocol
Kaufman, C., & Perlman, R. (2001) · Cited by 14
Security flaws of remote user access over insecure networks
Shim, K. (2006) · Computer Communications · doi:10.1016/j.comcom.2006.08.001 · Cited by 14
Perlman, R., & Kaufman, C. (2008) · Identity and Trust on the Internet · doi:10.1145/1373290.1373300 · Cited by 13
Prudent Practices in Security Standardization
Hao, F. (2021) · IEEE Communications Standards Magazine · doi:10.1109/mcomstd.121.2100005 · Cited by 13
Wan, Z., Deng, R. H., Bao, F., & Preneel, B. (2007) · Lecture notes in computer science · doi:10.1007/978-3-540-77048-0_3 · Cited by 13
Metadata
- Authors
- Jablon, D. P.
- Affiliations
- Integrity Sciences, Inc., Westboro, MA
- Corresponding author
- Jablon, David P.
- Venue
- ACM SIGCOMM Computer Communication Review
- Published
- 1996-10
- Volume
- 26
- Issue
- 5
- Pages
- 5-26
- ISSN
- 0146-4833 (ISSN-L)
- OpenAlex
- W2133432179
- Cited by
- 532
- References
- 15
- Citations by year
- 2026: 4 · 2025: 6 · 2024: 8 · 2023: 8 · 2022: 12 · 2021: 19 · 2020: 8 · 2019: 13 · 2018: 16 · 2017: 13 · 2016: 11 · 2015: 22 · 2014: 17 · 2013: 25 · 2012: 10
- FWCI
- 8.01
- Type
- journal article
- Language
- en
- Open access
- bronze
- doi.org
- Locations
- ACM SIGCOMM Computer Communication Review (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
- Physical Sciences › Computer Science › Information Systems › User Authentication and Security Systems
- Physical Sciences › Computer Science › Computer Networks and Communications › Cryptography and Data Security
- Keywords
- authenticated key agreement, offline dictionary attack, attack analysis, two-factor authentication, password compromise
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review