An enhanced Kerberos protocol with non-interactive zero-knowledge proof

作者：Zhu, Yuesheng^*; Ma, Limin; Zhang, Jinjiang

来源：Security and Communication Networks, 2015, 8(6): 1108-1117.

DOI：10.1002/sec.1066

• authentication
• Kerberos
• password-guessing attacks
• PKINIT
• zero-knowledge proof

As one of the most important trusted third-party-based authentication protocols, Kerberos is widely used to provide authentication service in distributed networks. However, it is vulnerable to common brute force password-guessing attacks because of its password-based mechanism. Some enhanced Kerberos protocols based on public key cryptography were proposed as solutions, but they require excessive computation and communication resources. In this paper, a new enhanced Kerberos protocol with non-interactive zero-knowledge proof is proposed, in which the clients and the authentication server can mutually authenticate each other without revealing any information during the authentication process. Our security analysis and experimental results have shown that the proposed scheme can resist password-guessing attacks and is more convenient and efficient than previous schemes.

• 出版日期2015-4
• 单位北京大学深圳研究生院