Portal de Periódicos da CAPES

Weaknesses and Improvement of Secure Hash-Based Strong-Password Authentication Protocol *

2010; Institute of Information Science; Volume: 26; Issue: 5 Linguagem: Inglês

1016-2364

Hanjae Jeong, Dongho Won, Seungjoo Kim,

Cryptographic Implementations and Security

In 2008, Kim-Koc proposed a secure hash-based strong-password authentication protocol using one-time public key cryptography. He claimed that the protocol was secure against guessing, stolen-verifier, replay, denial-of-service, and impersonation attacks. However, we show that the protocol is vulnerable to impersonation, guessing, and stolen-verifier attacks. We propose improvements to increase the security level of the protocol.