Research note: On the security of HY-key authentication scheme

  • Authors:
  • B Zhan;Z Li;Y Yang;Z Hu

  • Affiliations:
  • Department of Information Engineering, Beijing University of Posts and Telecommunication, P.O. Box 145, Beijing 100876, People's Republic of China;Department of Information Engineering, Beijing University of Posts and Telecommunication, P.O. Box 145, Beijing 100876, People's Republic of China;Department of Information Engineering, Beijing University of Posts and Telecommunication, P.O. Box 145, Beijing 100876, People's Republic of China;Department of Information Engineering, Beijing University of Posts and Telecommunication, P.O. Box 145, Beijing 100876, People's Republic of China

  • Venue:
  • Computer Communications
  • Year:
  • 1999

Quantified Score

Hi-index 0.24

Visualization

Abstract

It is proved that the HY-key authentication scheme proposed by (Horng and Yang, Computer Communications 19 (1996) 848-850) is vulnerable to the guessing attack (Li et al., IEEE Journal on Selected Areas in Communications 11 (5) (1993)). The user's password is obtained by the guessing attack, and then the user's public key can be forged or the user's private key can be recovered. In order to overcome this disadvantage, we propose a new improved HY-scheme. The attacker cannot recover the user's private key, even though he has obtained the user's password.