A Provably Secure General Construction for Key Exchange Protocols Using Smart Card and Password

Password Authenticated Key Exchange and Protected Password Change Protocols

“…In this section, we compare our scheme with Zhang et al's scheme [21] [24], and Yang et al's scheme [16], which provide a password authentication protocol and a PPC protocol. In the Key Compromise Impersonation attack [25], an attacker who is in possession of a client's password installed at a victim, can impersonate any server.…”