Weaknesses and Improvement of Secure Hash-Based Strong-Password Authentication Protocol

作者：Jeong Hanjae; Won Dongho; Kim Seungjoo^*

来源：Journal of Information Science and Engineering, 2010, 26(5): 1845-1858.

• impersonation attack
• guessing attack
• stolen-verifier attack
• password-based authentication
• hash-based password authentication

In 2008, Kim-Koc proposed a secure hash-based strong-password authentication protocol using one-time public key cryptography. He claimed that the protocol was secure against guessing, stolen-verifier, replay, denial-of-service, and impersonation attacks. However, we show that the protocol is vulnerable to impersonation, guessing, and stolen-verifier attacks. We propose improvements to increase the security level of the protocol.

• 出版日期2010-9