Quantum Safe Computation-Friendly Identity-Binding Password Authenticated Key Exchange

Password Authenticated Key Exchange (PAKE) protocols are of paramount importance in applications like the Internet of Things (IoT) and wireless networking ensures the security of communication systems by enabling two parties to establish a shared secret key using only a low-entropy password. Recent advances in PAKE protocols have aimed to provide stronger security assurances including resilience against offline dictionary attacks, replay attacks, compromise attacks for both parties (client and server), pre-computation attacks, mutual authentication and perfect forward secrecy. Despite several improvements, challenges persist in both security and efficiency for existing PAKE proposals. To address these challenges, Cremers et al. (Crypto ’22) introduced the concept of identity-binding PAKE. None of the existing identity-binding PAKE is post-quantum secure. In response to these challenges, our contribution aims to bridge the gap in practical and secure post-quantum identity-binding PAKE. Our work proposes a post-quantum secure identity-binding PAKE protocols, LPAKE with enhanced security. Our lattice-based protocol LPAKE is secure based on the Module Pairing with Errors (MPWE) assumption and the Decision Module Learning with Errors (DMLWE) assumption. We present comprehensive security proof in a conventional game-based indistinguishability security model. Through rigorous performance evaluations, the paper demonstrates that the proposed PAKE scheme exhibits notable advantages in terms of total computation cost with enhanced security properties compared to existing identity-binding PAKE protocols.