An Efficient Key Exchange Authentication Using Browser Based Security

Abstract—Password-authenticated key exchange (PAKE) is where a client and a server, who share a password, authenticate each other and meanwhile establish a cryptographic key by exchange of messages. In this setting, all the passwords necessary to authenticate clients are stored in a single server. If the server is compromised, due to, for example, hacking or even insider attacks, passwords stored in the server are all disclosed. In this paper, we propose a browser based security and usage of two servers which cooperate to authenticate a client. Even if one server is compromised, the attacker still cannot pretend to be the client with the information from the compromised server. Index Terms — Password, (PAKE), Messages, security, I