Recently, Chang proposed a practical three-party key exchange (C-3PEKE) protocol with round efficiency.
Unfortunately, this paper shall show that C-3PEKE is not secure and suffers from off-line password guessing
attacks.
Relation:
INFORMATION TECHNOLOGY AND CONTROL, 37 (4): 333-335 2008