Password authentication with insecure communication

  • Authors:
  • Leslie Lamport

  • Affiliations:
  • SRI International, Menlo Park, CA

  • Venue:
  • Communications of the ACM
  • Year:
  • 1981

Quantified Score

Hi-index 48.24

Visualization

Abstract

A method of user password authentication is described which is secure even if an intruder can read the system's data, and can tamper with or eavesdrop on the communication between the user and the system. The method assumes a secure one-way encryption function and can be implemented with a microcomputer in the user's terminal.