Improved G-3PAKE Protocol with Formal Verification

Abstract

Password based mechanism is widely used for authentication since it allows people to choose their own passwords without any device to generate or store them. However these protocols should resist all types of password guessing attacks due to the low entropy of passwords. Recently many three party password authenticated key exchange (3PAKE) protocols have been proposed but most of them are vulnerable to various attacks. The present paper proposes an improved G-3PAKE protocol which can resist all the known attacks along with its formal proof.