A Robust Password-Based Multi-Server Authentication Scheme

2013/12/07 by Vorugunti Chandra Sekhar, Sekhar, Vorugunti Chandra, Mrudula Sarvabhatla +1
Computer Science · #Advanced Authentication Protocols Security #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #User Authentication and Security Systems #cs.CR

paper · pdf · doi:10.48550/arxiv.1401.6121

arxiv created 2013/12/07 · openalex publication_date 2013/12/07 · arxiv updated 2014/01/24 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28

Abstract

In 2013, Tsai et al. cryptanalyzed Yeh et al. scheme and shown that Yeh et al., scheme is vulnerable to various cryptographic attacks and proposed an improved scheme. In this poster we will show that Tsai et al., scheme is also vulnerable to undetectable online password guessing attack, on success of the attack, the adversary can perform all major cryptographic attacks. As apart of our contribution, we have proposed an improved scheme which overcomes the defects in Tsai et al. and Yeh et al. schemes.

Related

• Cryptanalysis and Improvement of Jiang et al.'s Smart Card Based Remote User Authentication Scheme
• Weakness in a Mutual Authentication Scheme for Session Initiation Protocol using Elliptic Curve Cryptography
• Cryptanalysis of Multi-Server Authenticated Key Agreement Scheme Based on Trust Computing Using Smart Cards and Biometrics
• Cryptanalysis of Sun and Cao's Remote Authentication Scheme with User Anonymity
• The Modified Scheme is still vulnerable to the parallel Session Attack