Cryptanalysis of Song's advanced smart card based password authentication protocol

2011/11/11 by Juan Tapiador, Juan E. Tapiador, Julio Hernández-Castro +8
Computer Science · #Advanced Authentication Protocols Security #Cognitive Computing and Networks #Cryptography and Data Security #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #User Authentication and Security Systems #cs.CR

paper · pdf · doi:10.48550/arxiv.1111.2744

7 pages

arxiv created 2011/11/11 · openalex publication_date 2011/11/11 · arxiv updated 2011/11/14 · openalex created_date 2022/09/02 · openalex updated_date 2026/07/28

Abstract

Song \citeSong10 proposed very recently a password-based authentication and key establishment protocol using smart cards which attempts to solve some weaknesses found in a previous scheme suggested by Xu, Zhu, and Feng \citeXZF09. In this paper, we present attacks on the improved protocol, showing that it fails to achieve the claimed security goals.

Citations

• Password authentication with insecure communication

Related

• Cryptanalysis and Improvement of Jiang et al.'s Smart Card Based Remote User Authentication Scheme
• An Improved Remote User Authentication Scheme Using Smart Cards
• Faults and Improvements of an Enhanced Remote User Authentication Scheme Using Smart Cards
• The Modified Scheme is still vulnerable to the parallel Session Attack
• Security Analysis of a Remote User Authentication Scheme with Smart Cards