Security Flaws in Three Password-Based Remote User Authentication Schemes with Smart Cards

Cryptologia

Volumn 36, Issue 1, 2012, Pages 62-69

  Shim, Kyung Ah ^a  

^a NIMS   (South Korea)

Author keywords

authentication; impersonation attack; password; secret key forward secrecy; smart card

Indexed keywords

EID: 84858112506     PISSN: 01611194     EISSN: 15581586     Source Type: Journal    
DOI: 10.1080/01611194.2011.606352     Document Type: Article

References (25)

1. Bellare, M. and P. Rogaway. 1995. "Provably Secure Session Key Distribution; the Three Party Case," Proc. 27th Annual Symposium on the Theory of Computing ACM, 57-66.
2. Bellare, M., R. Canetti, and H. Krawczyk. 1998. "A Modular Approach to the Design and Analysis of Authentication and Key Exchange Protocols," In: Proceeding of the 30th Annual Symposium on the Theory of Computing ACM, Las Vegas, Nevada, USA. 419-428.
3. Bellare, M., D. Pointcheval, and P. Rogaway. 2000. "Authenticated Key Exchange Secure against Dictionary Attacks," In: Proceeding of Eurocrypt'00, LNCS, 1807: 139-155.
4. Bresson, E., O. Chevassut, and D. Pointcheval. 2003. "Security Proofs for an Efficient Password-based Key Exchange,"In: Proceeding of the 10th ACM Conference On Computer And Communication Security, B. Preneel, ed., ACM Press, Bruges, Belgium, 241-250.
5. Chien, H. Y., J. K. Jan, and Y. M. Tseng. 2002. "An Efficient and Practical Solution to Remote Authentication Smart Card," Computers & Security, 21 (4): 372-375.
6. Das, M. L. and A. Saxena. 2004. "A Dynamic ID-Based Remote User Authentication Scheme," IEEE Transactions on Consumer Electronics, 50 (2): 958-961.
7. Duan, X., J. W. Liu, and Q. Zhang. 2006. "Security Improvement on Chien et al.'s Remote user Authentication Scheme using Smart Cards," IEEE International Conference on Computational Intelligence and Security, 2: 1133-1135.
8. Hsiang, H. C. and W. K. Shih. 2009. "Weaknesses and Improvements of the Yoon-Ryu-Yoo Remote User Authentication Scheme using Smart Cards," Computer Communications, 32: 649-652.
9. Hwang, M. S. and L. H. Li. 2000. "A New Remote user Authentication Scheme Using Smart Cards," IEEE Transactions on Consumer Electronics, 46 (1): 28-30.
10. Kim, S. K. and M. G. Chung. 2009. "More Secure Remote User Authentication Scheme," Computer Communications, 32: 1018-1021.
11. Kocher, P., J. Jaffe, and B. Jun. 1999. "Differential Power Analysis," In: Proceedings Crypto'99, M. Wiener, ed., LNCS, Santa Barbara, CA, USA. 1109: 388-397.
12. Ku, W. C. and S. M. Chen. 2004. "Weaknesses and Improvements of an Efficient Password based Remote user Authentication Scheme Using Smart Cards," IEEE Transactions on Consumer Electronics, 50 (1): 204-207.
13. Lamport, L. 1981. "Password Authentication with Insecure Communication," Communications of the ACM, 24 (11): 770-772.
14. Lee, S., H. Kim, and K. Yoo. 2004. "Improved Efficient Remote User Authentication Scheme using Smart Cards," IEEE Transactions on Consumer Electronics, 50 (2): 565-567.
15. Lee, S., H. Kim, and K. Yoo. 2004. "Improvement of Chien et al.'s Remote User Authentication Scheme using Smart Cards," Computer Standards & Interfaces, 27: 181-183.
16. Lee, C. C., L. H. Li, and M. S. Hwang. 2002. "A Remote User Authentication Scheme Using Hash Functions," ACM Operating Systems Review, 36 (4): 23-29.
17. Lennon, R. E., S. M. Matyas, and C. H. Mayer. 1981. "Cryptographic Authentication of Time invariant Quantities," IEEE Transactions on Communications, 29 (6): 773-777.
18. Messerges, T. S., E. A. Dabbish, and R. H. Sloan. 2002. "Examining Smart-card Security under the Threat of Power Analysis Attacks," IEEE Transactions on Computers, 51 (5): 541-552.
19. Mitchell, C. 1989. "Limitations of Challenge-Response Entity Authentication," Electronics Letters, 25 (17): 1195-1196.
20. Sun, H. M. 2000. "An Efficient Remote User Authentication Scheme Using Smart Cards," IEEE Transactions on Consumer Electronics, 46 (4): 958-961.
21. Tang, Y. L., M. S. Hwang, and C. C. Lee. 2002. "A Simple Remote User Authentication Scheme," Mathematical and Computer Modeling, 36: 103-107.
22. Wang, Y. Y., J. Y. Liu, F. X. Xiao, and J. Dan. 2009. "A More Efficient and Secure Dynamic ID-Based Remote User Authentication Scheme," Computer Communications, 32: 583-585.
23. Yen, S. M. and K. H. Liao. 1997. "Shared Authentication Token Secure against Replay and Weak Key Attack," Information Processing Letters, 62 (2): 78-80.
24. Yoon, E. and K. Yoo. 2005. "More Efficient and Secure Remote User Authentication Scheme Using Smart Cards," Proceedings of the 11th International Conference on Parallel and Distributed System, 2: 73-77.
25. Yoon, E. J., E. K. Ryu, and K. Y. Yoo. 2004. "Further Improvement of an Efficient Password Based Remote User Authentication Scheme Using Smart Cards," IEEE Transactions on Consumer Electronics, 50 (2): 612-614.