On fortifying key negotiation schemes with poorly chosen passwords

  • Published 1994
Key exchange schemes such as Diffie Hellman are vulnerable to middleperson attacks, and thus are often augmented by means of shared secrets. Where these secrets must be memorised, they will usually be vulnerable to guessing attacks. We show how collision rich hash functions can be used to detect such attacks while they are in progress and thus frustrate… CONTINUE READING