Password-based independent authentication and key exchange protocol

This paper proposes a password-based authentication protocol suitable to certification through trustless network or key exchange. While the existing password-base protocols certify users through certification authority (CA) between client and server, in the proposed protocol of this paper, the users and the server exchange keys and perform authentication without the help of CA. To ameliorate the drawback of password-based protocols caused by the short length and randomness of password, the proposed protocol uses the signature techniques of ECDSA and the SRP protocol based on Diffie-Hellman key exchange method.