The first edition of this book was published in 2003. Inevitably, certain parts of the book
became outdated quickly. At the same time new developments have continued apace …

When designing password-authenticated key exchange protocols (as opposed to key
exchange protocols authenticated using crypto-graphically secure keys), one must not allow …

A security protocol is an exchange of messages between two or more parties in which
encryption is used to provide authentication or to distribute cryptographic keys for new …

Many authentication schemes depend on secret passwords. Unfortunately, the length and
randomness of user-chosen passwords remain fixed over time. In contrast, hardware …

A strand is a sequence of events; it represents either the execution of an action by a
legitimate party in a security protocol or else a sequence of actions by a penetrator. A strand …

We study protocols for strong authentication and key exchange in asymmetric scenarios
where the authentication server possesses~ a pair of private and public keys while the client …

We encounter new types of security problems in ad hoc networks because such networks
have little or no support infrastructure. In this paper we consider one such problem: a group …

Abstract Recently Victor Shoup noted that there is a gap in the widely-believed security
result of OAEP against adaptive chosen-cipher-text attacks. Moreover, he showed that …

In this paper we present a general framework for password-based authenticated key
exchange protocols, in the common reference string model. Our protocol is actually an …

We present session-key generation protocols in a model where the legitimate parties share
only a human-memorizable password, and there is no additional set-up assumption in the …