Password authentication with insecure communication

1981/11/01 by Leslie Lamport · 2,789 citations
Computer Science · #Authentication (law) #Authentication protocol #Challenge–response authentication #Chaos-based Image/Signal Encryption #Cognitive Computing and Networks #Computer network #Computer science #Computer security #Encryption #Password #S/KEY #Terminal (telecommunication) #User Authentication and Security Systems

paper · pdf · doi:10.1145/358790.358797

published in Communications of the ACM 24(11), 770-772 (Association for Computing Machinery)

openalex publication_date 1981/11/01 · openalex created_date 2025/10/10 · openalex updated_date 2026/08/01

Abstract

A method of user password authentication is described which is secure even if an intruder can read the system's data, and can tamper with or eavesdrop on the communication between the user and the system. The method assumes a secure one-way encryption function and can be implemented with a microcomputer in the user's terminal.

Cited by

• Genomic Encryption of Digital Data Stored in Synthetic DNA
• An Idea to Increase the Security of EAP-MD5 Protocol Against Dictionary Attack
• The Modified Scheme is still vulnerable to the parallel Session Attack
• Confidentiality & Authentication Mechanism for Biometric Information Transmitted over Low Bandwidth & Unreliable channel
• Deconstructing Blockchains: A Comprehensive Survey on Consensus, Membership and Structure
• Decryptable to Your Eyes: Visualization of Security Protocols at the User Interface
• Dovetail: Stronger Anonymity in Next-Generation Internet Routing
• Secure Biometric-based Remote Authentication Protocol using Chebyshev Polynomials and Fuzzy Extractor
• A Typology of Authentication Systems
• On the Security of ``an efficient and complete remote user authentication scheme''
• Faults and Improvements of an Enhanced Remote User Authentication Scheme Using Smart Cards
• A Survey on Essential Components of a Self-Sovereign Identity
• Inclusive by design: Developing Barrier-Free Authentication for Blind and Low Vision Users through the ALIAS Project
• Verification Cost Asymmetry in Cognitive Warfare: A Complexity-Theoretic Framework
• Information-theoretically Secret Key Generation for Fading Wireless Channels
• Cryptanalysis of Song's advanced smart card based password authentication protocol
• Security Analysis of a Remote User Authentication Scheme with Smart Cards
• On the Security of Liaw et al.'s Scheme
• An Improved Remote User Authentication Scheme Using Smart Cards
• The Nuts and Bolts of Micropayments: A Survey
• PACStack: an Authenticated Call Stack
• ChainMarks: Securing DNN Watermark with Cryptographic Chain
• The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes
• Analysis and improvement of a multi-factor biometric authentication scheme
• CompChall: addressing password guessing attacks
• Quantum Locker Using a Novel Verification Algorithm and Its Experimental Realization in IBM Quantum Computer
• Hash chain [wikipedia]
• An enhanced biometric-based authentication scheme for telecare medicine information systems using elliptic curve cryptosystem. [europepmc]
• Robust biometrics based authentication and key agreement scheme for multi-server environments using smart cards. [europepmc]
• Cryptanalysis and Improvement of "A Secure Password Authentication Mechanism for Seamless Handover in Proxy Mobile IPv6 Networks". [europepmc]
• An Improvement of Robust Biometrics-Based Authentication and Key Agreement Scheme for Multi-Server Environments Using Smart Cards. [europepmc]
• Cryptanalysis and Improvement of a Biometric-Based Multi-Server Authentication and Key Agreement Scheme. [europepmc]
• An Enhanced Biometric Based Authentication with Key-Agreement Protocol for Multi-Server Architecture Based on Elliptic Curve Cryptography. [europepmc]
• An Anonymous User Authentication and Key Agreement Scheme Based on a Symmetric Cryptosystem in Wireless Sensor Networks. [europepmc]
• An Improved and Secure Anonymous Biometric-Based User Authentication with Key Agreement Scheme for the Integrated EPR Information System. [europepmc]
• A robust anonymous biometric-based authenticated key agreement scheme for multi-server environments. [europepmc]
• Cryptanalysis and improvement of a biometrics-based authentication and key agreement scheme for multi-server environments. [europepmc]
• A Multi-Server Two-Factor Authentication Scheme with Un-Traceability Using Elliptic Curve Cryptography. [europepmc]
• An Enhanced Lightweight IoT-based Authentication Scheme in Cloud Computing Circumstances. [europepmc]
• A Secure Lightweight Three-Factor Authentication Scheme for IoT in Cloud Computing Environment. [europepmc]
• Securing MQTT by Blockchain-Based OTP Authentication. [europepmc]
• SLUA-WSN: Secure and Lightweight Three-Factor-Based User Authentication Protocol for Wireless Sensor Networks. [europepmc]
• An Efficient Two-Factor Authentication Scheme Based on the Merkle Tree. [europepmc]
• Chaotic-map based authenticated security framework with privacy preservation for remote point-of-care. [europepmc]
• WSN-SLAP: Secure and Lightweight Mutual Authentication Protocol for Wireless Sensor Networks. [europepmc]
• Robotics cyber security: vulnerabilities, attacks, countermeasures, and recommendations. [europepmc]
• A Key Management Protocol Based on the Hash Chain Key Generation for Securing LoRaWAN Networks. [europepmc]
• Automatic Key Update Mechanism for Lightweight M2M Communication and Enhancement of IoT Security: A Case Study of CoAP Using Libcoap Library. [europepmc]
• Dependable and Provable Secure Two-Factor Mutual Authentication Scheme Using ECC for IoT-Based Telecare Medical Information System. [europepmc]
• Developing a blockchain-based digitally secured model for the educational sector in Saudi Arabia toward digital transformation. [europepmc]
• An Improved Lightweight User Authentication Scheme for the Internet of Medical Things. [europepmc]
• BAuth-ZKP-A Blockchain-Based Multi-Factor Authentication Mechanism for Securing Smart Cities. [europepmc]

Related

• Authentication Mechanism for Resistance to Password Stealing and Reuse Attack
• Password Cracking and Countermeasures in Computer Security: A Survey
• An authentication model based on cryptography
• A Security Protocol for Multi-User Authentication
• Systematic Solutions to Login and Authentication Security Problems: A Dual-Password Login-Authentication Mechanism