A Review: PAKE Security for Distributed Environment

With the advancement of technology, communications today should be secured by secret session key. A password-authenticated key agreement method is an interactive password based method to establish secret session keys. A number of protocols for Password based Authentication and Key Exchange (PAKE) is designed for the single server environment where each user shares a password with a server. These systems are not resistant to offline dictionary attacks once the servers are compromised by an attacker. To overcome these drawbacks, two server password based authentication and key exchange protocols had been proposed. Two server protocols split passwords into two long shares and store them indifferent servers such that the compromise of one server will not provide useful information about the password. This paper provides a wide spread survey on authentication schemes using two server PAKE protocols.