Abstract
In this work we consider two protocols for performing cryptanalysis and security enhancement. The first one by Jiang et al., is a password-based authentication scheme. which does not use smart cards. We note that this scheme is an improvement over Chen et al.’s scheme shown vulnerable to the off-line dictionary attack by Jiang et al. We perform a cryptanalysis on Jiang at al.’s improved protocol and observe that it is prone to the clogging attack, a kind of denial of service (DoS) attack. We then suggest an improvement on the protocol to prevent the clogging attack.
The other protocol we consider for analysis is by Wang et al. This is a smart card based authentication protocol. We again perform the clogging (DoS) attack on this protocol via replay. We observe that all smart card based authentication protocols which precede the one by Wang et al., and require the server to compute the computationally intensive modular exponentiation are prone to the clogging attack. We suggest (another) improvement on the protocol to prevent the clogging attack, which also applies to the protocol by Jiang et. al.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Jiang, Q., Ma, J., Li, G., Ma, Z.: An Improved Password-Based Remote User Authentication Protocol without Smart Cards. Information Technology and Control 42(2) (2013)
Jiang, Q., Ma, J., Li, G., Ma, Z.: Improvement of Robust Smart-card-based Password Authentication Scheme. International Journal of Communication Systems (2013)
Wang, D., Ma, C.: Robust smart card based password authentication scheme against smart card security breach. Cryptology ePrint Archive (2013), http://eprint.iacr.org/2012/439
Chen, B.L., Kuo, W.C., Wuu, L.C.: A Secure Password-Based Remote User Authentication Scheme Without Smart Cards. Information Technology and Control 41(1) (2012)
Chen, B.L., Kuo, W.C., Wuu, L.C.: Robust Smart Card Based Remote Password Authentication Scheme. International Journal of Communication Systems (2012)
Rhee, H.S., Kwon, J.O., Lee, D.H.: A remote user authentication scheme without using smart cards. Computer Standards & Interfaces Archive 31(1) (2009)
Chen, T., Hsiang, H., Shih, W.: Security enhancement on an improvement on two remote user authentication schemes using smart cards. Future Generation Computer Systems 27(4), 377–380 (2011)
He, D., Chen, J., Hu, J.: Improvement on a smart card based password authentication scheme. Journal of Internet Technology 13(3), 38–42 (2012)
Juang, W.S., Chen, S.T., Liaw, H.T.: Robust and efficient password-authenticated key agreement using smart cards. IEEE Transactions on Industrial Electronics 55(6), 2551–2556 (2008)
Li, C.T.: A new password authentication and user anonymity scheme based on elliptic curve cryptography and smart card. IET Information Security 7(1), 3–10 (2013)
Sood, S.K.: Secure dynamic identity-based authentication scheme using smart cards. Information Security Journal: A Global Perspective 20(2), 67–77 (2011)
Orman, H.: The Oakley Key Determination Protocol. University of Arizona. TR 97 02
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2014 Springer International Publishing Switzerland
About this paper
Cite this paper
Talluri, S.R., Roy, S. (2014). Cryptanalysis and Security Enhancement of Two Advanced Authentication Protocols. In: Kumar Kundu, M., Mohapatra, D., Konar, A., Chakraborty, A. (eds) Advanced Computing, Networking and Informatics- Volume 2. Smart Innovation, Systems and Technologies, vol 28. Springer, Cham. https://doi.org/10.1007/978-3-319-07350-7_34
Download citation
DOI: https://doi.org/10.1007/978-3-319-07350-7_34
Publisher Name: Springer, Cham
Print ISBN: 978-3-319-07349-1
Online ISBN: 978-3-319-07350-7
eBook Packages: EngineeringEngineering (R0)