AMPi. AMPi excludes the ampli ed password le from AMP. The di erence of protocol setup is that Bob stores (id; ; = g ) where = h1( ; ). Of course, salt can be obtained implicitly. The di erence in protocol run is that ▇▇▇▇▇ computes the inverse of the ampli ed password, after receiving message G2. AMPi slightly reduces the running time about G2 but loses the strong security against a password le compromise. That is, if the password le is compromised, ▇▇▇ is able to directly impersonate a server or launch dictionary attacks in AMPi while it was much more di cult in AMP. We set $ = (x + ) 1(x + e) mod q.
Appears in 2 contracts
Sources: Authentication and Key Agreement Protocol, Authentication and Key Agreement Protocol