Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Journal of Information and Computer Security

IDMS Quantum Password-Authenticated Key Exchange Protocols

Yingfei Xu, Yan Sun, Lu Zhang, Hongfeng Zhu

Published Jan 1, 2024• 0 citations
Publisher

Abstract

In this paper, we design an ID-based M-server quantum password-authenticated key exchange scheme, where the client computes a strong key from its password and splits the key into m portions, and then encrypts them and sends them to m servers to be used as the basis for encryption and decryption in the subsequent key exchange process. The adoption of multiple servers can effectively prevent third-party attacks on the server and ensure the security of the key information, which is just like a complex secret sharing mechanism in traditional computational cryptography, for example, secret sharing (m, n) threshold scheme, but our new quantum fusion technology to realise the secret sharing mechanism is more efficient and simpler. Finally, through analysis, our scheme can meet most of the security requirements and perform well. It is feasible to implement the protocol under the existing quantum technology.

DOI
10.1504/ijics.2024.10064758

Related papers

IDMS quantum password-authenticated key exchange protocols

Lu Zhang, Yan Sun, Yingfei Xu +1 more

In this paper, we design an ID-based M-server quantum password-authenticated key exchange scheme, where the client computes a strong key from its password and splits the key into m portions, and then encrypts them and sends them to m servers to be used as the basis for encryption and decryption in the subsequent key exchange process. The adoption of multiple servers can effectively prevent third-party attacks on the server and ensure the security of the key information, which is just like a complex secret sharing mechanism in traditional computational cryptography, for example, secret sharing (m, n) threshold scheme, but our new quantum fusion technology to realise the secret sharing mechanism is more efficient and simpler. Finally, through analysis, our scheme can meet most of the security requirements and perform well. It is feasible to implement the protocol under the existing quantum technology.

International Journal of Information and Computer Security•Jan 1, 2024•0 citations

Quantum password sharing scheme using trusted servers

Gabriela Mogos

The main purpose of the sharing schemes based on trusted servers is to obtain a password. The threshold cryptography aims the secret cryptographic protection, and is based on the distribution of the key on several servers, with the purpose to tolerate the attacks. In this work I will present a quantum version of the password sharing protocol, using a number n of trustful servers, to assure its security. The model I propose approaches the issue of the distribution of the authentication key between a client and n-1 servers.

International Journal of Information and Network Security (IJINS)•Feb 10, 2013•1 citation

A Construction of Three Party Post Quantum Secure Authenticated Key Exchange for Mobile Users

Uddeshaya Kumar, Yogesh Pal, Perla Sai Nikhil +3 more

A three-party authenticated key exchange protocol enables two entities to agree on a session key with the help of a dedicated server through an insecure channel. Lattice based cryptography plays a very important role in authentication and key exchanges that protects against the threat of quantum attacks. However, it is not easy to design quantum resistant password based three-party protocol due to the high demand for security requirements and the limited resources nature of mobile devices. In this article, we have proposed a new post quantum three party key exchange based on a variant of lattice assumption, the ring learning errors. The protocol ensures security against impersonation attack, stolen smartcard attack, password guessing attack, and other existing attacks. In authentication phase, the protocol have used lattice based cryptography that plays a very important role in authentication and key exchanges that protects against the threat of quantum attacks. The proposed protocol ensures both securities against quantum attacks and efficiency due to simple algebraic operations that are polynomial addition and multiplications.

International Conference on Computing, Communication and Networking Technologies (ICCCNT)•Jul 6, 2023•3 citations

Asymmetric Password Authentication Transport Layer Security Protocol

Yuhao Han, Libin Wang

Transport Layer Security (TLS) protocols are essential for ensuring the confidentiality, integrity, and authentication of data communications. Mutual authentication between client and server is crucial in high-security scenarios such as finance and government. However, existing TLS protocols typically rely on certificate-based public key infrastructures (PKI) for client authentication, which increases deployment complexity and introduces risks associated with third-party trust. In contrast, password-authenticated TLS protocols use memorable passwords for client authentication, offering advantages in simplicity and usability. Nonetheless, such protocols remain vulnerable to server compromise and fail to provide sufficient security against quantum adversaries.To address these challenges, we propose a novel TLS protocol based on asymmetric password-authenticated key exchange (PAKE). The protocol employs an asymmetric PAKE mechanism wherein only password-derived information is stored on the server, while the client derives its private key from the password. This design effectively mitigates the risk of server leakage attacks. The protocol further integrates two types of post-quantum secure key encapsulation mechanisms (KEMs): an OW-ChCCA (One-Way Checkable against Chosen-Ciphertext Attacks) secure KEM for server key exchange and authentication, and an OW-PCA (One-Way Plaintext-Checkable Attacks) secure KEM for binding the client’s password-derived private key to enable client authentication. Both KEMs support multi-user, multi-challenge settings and admit tight, post-quantum secure instantiations.Furthermore, this paper provides a formal security analysis of the proposed protocol within an optimized multi-stage key exchange model. By combining the random oracle and ideal cipher models with a game-based proof methodology, we demonstrate that the protocol achieves mutual authentication and forward secrecy, while also providing tight security bounds and post-quantum resilience. This work thus presents a promising solution for constructing post-quantum password-authenticated TLS protocols.

International Conference on Blockchain Technology and Information Security (ICBCTIS)•Dec 5, 2025•0 citations

An Authentication Protocol for Quantum Enabled Mobile Devices

Natarajan Venkatachalam, Subrahmanya VRK Rao, Vijay Karthikeyan Dhandapani +1 more

The quantum communication technology is an evolving design which connects multiple quantum enabled devices to internet for secret communication or sensitive information exchange. In future, the number of these compact quantum enabled devices will increase immensely making them an integral part of present communication systems. Therefore, safety and security of such devices is also a major concern for us. To ensure the customer sensitive information will not be eavesdropped or deciphered, we need a strong authentications and encryption mechanism. In this paper, we propose a mutual authentication scheme between these smart quantum devices and server based on the secure exchange of information through quantum channel which gives better solutions for symmetric key exchange issues. An important part of this work is to propose a secure mutual authentication protocol over the quantum channel. We show that our approach offers robust authentication protocol and further our solution is lightweight, scalable, cost-effective with optimized computational processing overheads.

•Nov 2, 2018•0 citations

Integrated Quantum and Classical Key Scheme for Two Servers Password Authentication

Krishnan

Problem statement: Traditional user authentication system uses passwords for their secured accessibility in a central server, which is prone to attack by adversaries.The adversaries gain access to the contents of the user in attack prone servers.To overcome this problem, the multi-server systems were being proposed in which the user communicate in parallel with several or all of the servers for the purpose of authentication.Such system requires a large communication bandwidth and needs for synchronization at the user.Approach: Present an efficient two server user password authentication and reduce the usage of communication traffic and bandwidth consumption between the servers.Integration of quantum and classical key exchange model is deployed to safeguard user access security in large networks.The proposed work presented, a two server system, front end service server interacts directly to the user and the back end control server visible to the service server.The performance measure of the user password made for the transformed two long secrets held by both service and control server.Further the proposal applied quantum key distribution model along with classical key exchange in the two server authentication.Three-party Quantum key distribution used in this model, one with implicit user authentication and other with explicit mutual authentication, deployed for ecommerce buyer authentication in internet peer servers.Results: Effect of online and offline dictionary attacks prevailing in the single and multi-server systems are analyzed.The performance efficiency test carried out in terms success rate of authenticity for two server shows 35% better than single server.The performance of integrated Quantum Key Distribution (QKD) systems and classical public key model have shown experimentally better performance in terms of computational efficiency and security rounds (11% improvement) than traditional cryptic security model.Conclusion: With the results obtained it is concluded that intricate security principle of quantum theory and traditional public key model integration provides an improved security model for password authentication between the password exchanges of two servers.

Journal of Computer Science•Nov 5, 2010•3 citations
In this paper, we design an ID-based M-server quantum password-authenticated key exchange scheme, where the client computes a strong key from its password and splits the key into m portions, and then encrypts them and sends them to m servers to be used as the basis for encryption and decryption in the subsequent key exchange process. The adoption of multiple servers can effectively prevent third-party attacks on the server and ensure the security of the key information, which is just like a complex secret sharing mechanism in traditional computational cryptography, for example, secret sharing (m, n) threshold scheme, but our new quantum fusion technology to realise the secret sharing mechanism is more efficient and simpler. Finally, through analysis, our scheme can meet most of the security requirements and perform well. It is feasible to implement the protocol under the existing quantum technology.
In this paper, we design an ID-based M-server quantum password-authenticated key exchange scheme, where the client computes a strong key from its password and splits the key into m portions, and then encrypts them and sends them to m servers to be used as the basis for encryption and decryption in the subsequent key exchange process. The adoption of multiple servers can effectively prevent third-party attacks on the server and ensure the security of the key information, which is just like a complex secret sharing mechanism in traditional computational cryptography, for example, secret sharing (m, n) threshold scheme, but our new quantum fusion technology to realise the secret sharing mechanism is more efficient and simpler. Finally, through analysis, our scheme can meet most of the security requirements and perform well. It is feasible to implement the protocol under the existing quantum technology.
The main purpose of the sharing schemes based on trusted servers is to obtain a password. The threshold cryptography aims the secret cryptographic protection, and is based on the distribution of the key on several servers, with the purpose to tolerate the attacks. In this work I will present a quantum version of the password sharing protocol, using a number n of trustful servers, to assure its security. The model I propose approaches the issue of the distribution of the authentication key between a client and n-1 servers.
A three-party authenticated key exchange protocol enables two entities to agree on a session key with the help of a dedicated server through an insecure channel. Lattice based cryptography plays a very important role in authentication and key exchanges that protects against the threat of quantum attacks. However, it is not easy to design quantum resistant password based three-party protocol due to the high demand for security requirements and the limited resources nature of mobile devices. In this article, we have proposed a new post quantum three party key exchange based on a variant of lattice assumption, the ring learning errors. The protocol ensures security against impersonation attack, stolen smartcard attack, password guessing attack, and other existing attacks. In authentication phase, the protocol have used lattice based cryptography that plays a very important role in authentication and key exchanges that protects against the threat of quantum attacks. The proposed protocol ensures both securities against quantum attacks and efficiency due to simple algebraic operations that are polynomial addition and multiplications.
Transport Layer Security (TLS) protocols are essential for ensuring the confidentiality, integrity, and authentication of data communications. Mutual authentication between client and server is crucial in high-security scenarios such as finance and government. However, existing TLS protocols typically rely on certificate-based public key infrastructures (PKI) for client authentication, which increases deployment complexity and introduces risks associated with third-party trust. In contrast, password-authenticated TLS protocols use memorable passwords for client authentication, offering advantages in simplicity and usability. Nonetheless, such protocols remain vulnerable to server compromise and fail to provide sufficient security against quantum adversaries.To address these challenges, we propose a novel TLS protocol based on asymmetric password-authenticated key exchange (PAKE). The protocol employs an asymmetric PAKE mechanism wherein only password-derived information is stored on the server, while the client derives its private key from the password. This design effectively mitigates the risk of server leakage attacks. The protocol further integrates two types of post-quantum secure key encapsulation mechanisms (KEMs): an OW-ChCCA (One-Way Checkable against Chosen-Ciphertext Attacks) secure KEM for server key exchange and authentication, and an OW-PCA (One-Way Plaintext-Checkable Attacks) secure KEM for binding the client’s password-derived private key to enable client authentication. Both KEMs support multi-user, multi-challenge settings and admit tight, post-quantum secure instantiations.Furthermore, this paper provides a formal security analysis of the proposed protocol within an optimized multi-stage key exchange model. By combining the random oracle and ideal cipher models with a game-based proof methodology, we demonstrate that the protocol achieves mutual authentication and forward secrecy, while also providing tight security bounds and post-quantum resilience. This work thus presents a promising solution for constructing post-quantum password-authenticated TLS protocols.
The quantum communication technology is an evolving design which connects multiple quantum enabled devices to internet for secret communication or sensitive information exchange. In future, the number of these compact quantum enabled devices will increase immensely making them an integral part of present communication systems. Therefore, safety and security of such devices is also a major concern for us. To ensure the customer sensitive information will not be eavesdropped or deciphered, we need a strong authentications and encryption mechanism. In this paper, we propose a mutual authentication scheme between these smart quantum devices and server based on the secure exchange of information through quantum channel which gives better solutions for symmetric key exchange issues. An important part of this work is to propose a secure mutual authentication protocol over the quantum channel. We show that our approach offers robust authentication protocol and further our solution is lightweight, scalable, cost-effective with optimized computational processing overheads.
Problem statement: Traditional user authentication system uses passwords for their secured accessibility in a central server, which is prone to attack by adversaries.The adversaries gain access to the contents of the user in attack prone servers.To overcome this problem, the multi-server systems were being proposed in which the user communicate in parallel with several or all of the servers for the purpose of authentication.Such system requires a large communication bandwidth and needs for synchronization at the user.Approach: Present an efficient two server user password authentication and reduce the usage of communication traffic and bandwidth consumption between the servers.Integration of quantum and classical key exchange model is deployed to safeguard user access security in large networks.The proposed work presented, a two server system, front end service server interacts directly to the user and the back end control server visible to the service server.The performance measure of the user password made for the transformed two long secrets held by both service and control server.Further the proposal applied quantum key distribution model along with classical key exchange in the two server authentication.Three-party Quantum key distribution used in this model, one with implicit user authentication and other with explicit mutual authentication, deployed for ecommerce buyer authentication in internet peer servers.Results: Effect of online and offline dictionary attacks prevailing in the single and multi-server systems are analyzed.The performance efficiency test carried out in terms success rate of authenticity for two server shows 35% better than single server.The performance of integrated Quantum Key Distribution (QKD) systems and classical public key model have shown experimentally better performance in terms of computational efficiency and security rounds (11% improvement) than traditional cryptic security model.Conclusion: With the results obtained it is concluded that intricate security principle of quantum theory and traditional public key model integration provides an improved security model for password authentication between the password exchanges of two servers.