Weaknesses of Yoon-Ryu-Yoo's hash-based password authentication scheme

Operating Systems Review (ACM)

Volumn 39, Issue 1, 2005, Pages 85-89

  Ku, Wei Chi ^a   Chiang, Min Hung ^a   Chang, Shen Tien ^a  

^a FU JEN CATHOLIC UNIVERSITY   (Taiwan)

Author keywords

Denial of service attack; Guessing attack; Hash function; Password authentication; Stolen verifier attack

Indexed keywords

COMPUTATIONAL COMPLEXITY; COMPUTER CRIME; DATA PRIVACY; FUNCTIONS; SECURITY OF DATA;

DENIAL OF SERVICE ATTACK; GUESSING ATTACK; HASH FUNCTION; PASSWORD AUTHENTICATION; STOLEN VERIFIER ATTACK;

ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS;

EID: 33646469746     PISSN: 01635980     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1044552.1044561     Document Type: Article

References (10)

1. C. M. Chen and W. C. Ku, "Stolen-verifier attack on two new strong-password authentication protocols," IEICE Transactions on Communications, vol. E58-B, no. 11, pp. 2519-2521, Nov. 2002.
2. J. J. Hwang and T. C. Yeh, "Improvement on Peyravian-Zunic's password authentication schemes," IEICE Transactions on Communications, vol. E85-B, no. 4, pp. 823-825, April 2002.
3. W. C. Ku, C. M. Chen, and H. L. Lee, "Cryptanalysis of a variant of Peyravian-Zunic's password authentication scheme," IEICE Transactions on Communications, vol. E86-B, no. 5, pp. 1682-1684, May 2003.
4. W. C. Ku, C. M. Chen, and H. L. Lee, "Weaknesses of Lee-Li-Hwang's hash-based password authentication scheme," ACM Operating Systems Review, vol. 37, no. 4, pp. 19-25, Oct. 2003.
5. C. C. Lee, L. H. Li, and M. S, Hwang, "A remote user authentication scheme using hash functions," ACM Operating Systems Review, vol. 36, no. 4, pp. 23-29, Oct. 2002.
6. C. L. Lin, H. M. Sun, and T. Hwang, "Attacks and solutions on strong-password authentication," IEICE Transactions on Communications, vol. E84-B, no. 9, pp. 2622-2627, Sept. 2001.
7. National Institute of Standards and Technology, "Secure hash standard," FIPS Publication 180-1, April 1995.
8. M. Peyravian and N. Zunic, "Methods for protecting password transmission," Computers & Security, vol. 19, no. 5, pp. 466-469, July 2000.
9. R. Rivest, "The MD5 message-digest algorithm," RFC 1321, April 1992.
10. E. J. Yoon, E. K. Ryu, and K. Y. Yoo, "A secure user authentication scheme using hash functions," ACM Operating Systems Review, vol. 38, no. 2, pp. 62-68, April 2004.