The DOI matches its Crossref record; 15 of the 15 references it cites were found in a registry or an index.
Strong password-only authenticated key exchange
Open accessAbstract
A new simple password exponential key exchange method (SPEKE) is described. It belongs to an exclusive class of methods which provide authentication and key establishment over an insecure channel using only a small password, without risk of offline dictionary attack. SPEKE and the closely-related Diffie-Hellman Encrypted Key Exchange (DH-EKE) are examined in light of both known and new attacks, along with sufficient preventive constraints. Although SPEKE and DH-EKE are similar, the constraints are different. The class of strong password-only methods is compared to other authentication schemes. Benefits, limitations, and tradeoffs between efficiency and security are discussed. These methods are important for several uses, including replacement of obsolete systems, and building hybrid two-factor systems where independent password-only and key-based methods can survive a single event of either key theft or password compromise.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Encrypted key exchange: password-based protocols secure against dictionary attacks
Bellovin, S. M., & Merritt, M. (2003) · IEEE Computer Society Symposium on Research in Security and Privacy · doi:10.1109/risp.1992.213269 · Cited by 1,354
Pohlig, S., & Hellman, M. (1978) · IEEE Transactions on Information Theory · doi:10.1109/tit.1978.1055817 · Cited by 1,199
Authentication and authenticated key exchanges
Diffie, W., van Oorschot, P. C., & Wiener, M. J. (1992) · Designs Codes and Cryptography · doi:10.1007/bf00124891 · Cited by 1,147
Augmented encrypted key exchange
Bellovin, S. M., & Merritt, M. (1993) · Proceedings of the ACM Conference on Computer and Communications Security · doi:10.1145/168588.168618 · Cited by 523
Privacy and authentication: An introduction to cryptography
Diffie, W., & Hellman, M. E. (1979) · Proceedings of the IEEE · doi:10.1109/proc.1979.11256 · Cited by 468
Protecting poorly chosen secrets from guessing attacks
Gong, L., Lomas, M., Needham, R. M., & Saltzer, J. H. (1993) · IEEE Journal on Selected Areas in Communications · doi:10.1109/49.223865 · Cited by 363
Refinement and extension of encrypted key exchange
Steiner, M., Tsudik, G., & Waidner, M. (1995) · ACM SIGOPS Operating Systems Review · doi:10.1145/206826.206834 · Cited by 253
The discrete logarithm problem
McCurley, K. S. (1991) · Proceedings of symposia in applied mathematics · doi:10.1090/psapm/042/1095551 · Cited by 185
On Diffie-Hellman Key Agreement with Short Exponents
van Oorschot, P. C., & Wiener, M. J. (1996) · Lecture notes in computer science · doi:10.1007/3-540-68339-9_29 · Cited by 134
SPX: global authentication using public key certificates
Tardo, J. J., & Alagappan, K. (2002) · IEEE Computer Society Symposium on Research in Security and Privacy · doi:10.1109/risp.1991.130791 · Cited by 126
Optimal authentification protocols resistant to password guessing attacks
Gong, L. (2002) · doi:10.1109/csfw.1995.518549 · Cited by 115
Establishing identity without certification authorities
Ellison, C. M. (1996) · Cited by 65
An attack on the Interlock Protocol when used for authentication
Bellovin, S. M., & Merritt, M. (1994) · IEEE Transactions on Information Theory · doi:10.1109/18.272497 · Cited by 43
Fortifying key negotiation schemes with poorly chosenpasswords
Anderson, R., & Lomas, T. (1994) · Electronics Letters · doi:10.1049/el:19940697 · Cited by 32
Jaspan, B. (1996) · Cited by 24
Flagged first, then by citations
Research works printed but not linked: 6
- 10.5555/882488.884178 · DOI
- Ellison C., 1996, Proceedings of the Sixth Annual USENIX Security Symposium, 67
- 10.5555/794195.795036 · DOI
- Jaspan B., 1996, Proceedings of the Sixth Annual USENIX Security Conference, 43
- 1996, {Sch96} B. Schneier, "Applied Cryptography
- van Oorschot P. C., 1996, Proceedings of Eurocrypt '96
Cited by
Sorted by citations
Kocher, P. C., Jaffe, J. S., & Jun, B. (1999) · Lecture notes in computer science · doi:10.1007/3-540-48405-1_25 · Cited by 7,569
Authenticated Key Exchange Secure against Dictionary Attacks
Bellare, M., Pointcheval, D., & Rogaway, P. (2000) · Lecture notes in computer science · doi:10.1007/3-540-45539-6_11 · Cited by 1,511
Provably Secure Password-Authenticated Key Exchange Using Diffie-Hellman
Boyko, V., MACKENZIE, P. D., & Patel, S. (2000) · Lecture notes in computer science · doi:10.1007/3-540-45539-6_12 · Cited by 725
The Secure Remote Password Protocol.
Wu, T. D. (1998) · Cited by 448
PKCS #5: Password-Based Cryptography Specification Version 2.0
Kaliski, B. S. (2000) · doi:10.17487/rfc2898 · Cited by 375
Metadata
- Authors
- Jablon, D. P.
- Affiliations
- Integrity Sciences, Inc., Westboro, MA
- Corresponding author
- Jablon, David P.
- Venue
- ACM SIGCOMM Computer Communication Review
- Published
- 1996-10
- Volume
- 26
- Issue
- 5
- Pages
- 5-26
- ISSN
- 0146-4833 (ISSN-L)
- OpenAlex
- W2133432179
- Cited by
- 532
- References
- 15
- Citations by year
- 2026: 4 · 2025: 6 · 2024: 8 · 2023: 8 · 2022: 12 · 2021: 19 · 2020: 8 · 2019: 13 · 2018: 16 · 2017: 13 · 2016: 11 · 2015: 22 · 2014: 17 · 2013: 25 · 2012: 10
- FWCI
- 8.01
- Type
- journal article
- Language
- en
- Open access
- bronze
- doi.org
- Locations
- ACM SIGCOMM Computer Communication Review (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
- Physical Sciences › Computer Science › Information Systems › User Authentication and Security Systems
- Physical Sciences › Computer Science › Computer Networks and Communications › Cryptography and Data Security
- Keywords
- authenticated key agreement, offline dictionary attack, attack analysis, two-factor authentication, password compromise
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
