Portal de Periódicos da CAPES

Secure Hash-Based Password Authentication Protocol Using Smartcards

2011; Springer Science+Business Media; Linguagem: Inglês

10.1007/978-3-642-21934-4_48

1611-3349

Hyunhee Jung, Hyunsung Kim,

Biometric Identification and Security

Recently, Jeong-Won-Kim proposed a hash-based strong-password authentication protocol and claimed that the protocol is secure against guessing attack, stolen-verifier attack, replay attack, and impersonation attack. However, we show that their protocol has two vulnerabilities, password guessing attack and authentication answer guessing attack. Furthermore, we present a secure hash-based password authentication protocol using smartcards to cope with the vulnerabilities. Security analysis shows that our protocol provides better security properties than the other related authentication protocols with the similar computational complexity with others.