Stolen-verifier attack on an efficient smartcard-based one-time password authentication scheme

IEICE Transactions on Communications

Volumn E87-B, Issue 8, 2004, Pages 2374-2376

  Ku, Wei Chi ^a   Tsai, Hao Chuan ^a   Tsaur, Maw Jinn ^a  

^a FU JEN CATHOLIC UNIVERSITY   (Taiwan)

Author keywords

Authentication; Hash function; Password; S KEY; Smartcard

Indexed keywords

COMPUTER NETWORKS; DATABASE SYSTEMS; NETWORK PROTOCOLS; RANDOM PROCESSES; SECURITY OF DATA; SERVERS; TELECOMMUNICATION NETWORKS;

AUTHENTICATION; COMPUTATIONAL LOADS; HASH FUNCTIONS; PASSWORD;

SMART CARDS;

EID: 4344596953     PISSN: 09168516     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Conference Paper

References (15)

1. L. Lamport, "Password authentication with insecure communication," Commun. ACM, vol.24, no.11, pp.770-772, Nov. 1981.
2. W. Diffie, P.C. Van Oorschot, and M.J. Wiener, "Authentication and authenticated key exchanges," Des. Codes Cryptogr., vol.2, no.2, pp.107-125, June 1992.
3. S. Bellovin and M. Merritt, "Encrypted key exchange: Password-based protocols secure against dictionary attacks," Proc. IEEE Symposium on Research in Security and Privacy, pp.72-84, 1992.
4. N.M. Haller, "The S/KEY (TM) one-time password system," Proc. Internet Society Symposium on Network and Distributed System Security, pp.151-158, 1994.
5. C.J. Mitchell and L. Chen, "Comments on the S/KEY user authentication scheme," ACM Oper. Syst. Rev., vol.39, no.4, pp. 12-16, Oct. 1996.
6. A. Shimizu, T. Horioka, and H. Inagaki, "A password authentication method for contents communication on the Internet," IEICE Trans. Commun., vol.E81-B, no.8, pp.1666-1763, Aug. 1998.
7. T. Wu, "The secure remote password protocol," Proc. Internet Society Symposium on Network and Distributed System Security, pp.97-111, 1998.
8. D. Jablon, "B-SPEKE," Integrity Sciences White Paper, Sept. 1999.
9. M. Sandirigama, A. Shimizu, and M.T. Noda, "Simple and secure password authentication protocol (SAS)," IEICE Trans. Commun., vol.E83-B, no.6, pp.1363-1365, June 2000.
10. T. Kwon, "Authentication and key agreement via memorable password," Proc. NDSS 2001 Symposium Conference, pp.7-9, Feb. 2001.
11. C.L. Lin, H.M. Sun, and T. Hwang, "Attacks and solutions on strong-password authentication," IEICE Trans. Commun., vol.E84-B, no.9, pp.2622-2627, Sept. 2001.
12. T.C. Yeh, H.Y. Shen, and J.J. Hwang, "A secure one-time password authentication scheme using smart cards," IEICE Trans. Commun., Vol.E85-B, no. 11, pp.2515-2518, Nov. 2002.
13. C.M. Chen and W.C. Ku, "Stolen-verifier attack on two new strong-password authentication protocols," IEICE Trans. Commun., Vol.E85-B, no.11, pp.2519-2521, Nov. 2002.
14. T. Tsuji and A. Shimizu, "An impersonation attack on one-time password authentication protocol OSPA," IEICE Trans. Commun., Vol.E86-B, no.7, pp.2182-2185, July 2003.
15. IEEE P1363.2/D11 (Standard specifications for password-based public-key cryptographic techniques), IEEE P1363 working group, Aug. 2003.