Cryptanalysis of a remote user authentication scheme using smart cards

Authors:
Huang Kai;Ou Qingyu;Wu Xiaoping;Song Yexin
Affiliations:
Depart. of Information security, Naval University of Engineering, Wuhan, China;Depart. of Information security, Naval University of Engineering, Wuhan, China;Depart. of Information security, Naval University of Engineering, Wuhan, China;Depart. of Information security, Naval University of Engineering, Wuhan, China
Venue:
WiCOM'09 Proceedings of the 5th International Conference on Wireless communications, networking and mobile computing
Year:
2009

Citing 8
Cited 0

Password authentication with insecure communication

Communications of the ACM
Examining Smart-Card Security under the Threat of Power Analysis Attacks

IEEE Transactions on Computers
Cryptanalysis and Improvement of an "Improved Remote Authentication Scheme with Smart Card'

ARES '08 Proceedings of the 2008 Third International Conference on Availability, Reliability and Security
Cryptanalysis of a password authentication scheme over insecure networks

Journal of Computer and System Sciences
Vulnerabilities in a remote agent authentication scheme using smart cards

KES-AMSTA'08 Proceedings of the 2nd KES International conference on Agent and multi-agent systems: technologies and applications
An efficient and complete remote user authentication scheme using smart cards

Mathematical and Computer Modelling: An International Journal
A simple remote user authentication scheme

Mathematical and Computer Modelling: An International Journal
Weaknesses and improvements of an efficient password based remote user authentication scheme using smart cards

IEEE Transactions on Consumer Electronics

Quantified Score

Hi-index	0.00

Visualization

Abstract

With the popularity of computer network, smart card based remote user authentication is receiving more and more attention than ever. Recently, Liaw et al. proposed an efficient and complete remote user authentication scheme using smart cards. Its security depends on the one-way hash function and is nonce-based. They claim that it achieves more functionality and satisfies all criteria and can withstand the replay attack. Nevertheless, there still exist several security flaws in their scheme. In this paper, we give a cryptanalysis of the scheme and present that the scheme is vulnerable and insecure against at least four kinds of attack, including the offline password guessing attack, two impersonation attacks, the intruder-in-the-middle attack and the denial-of-service attack.