Welcome to Journal of University of Chinese Academy of Sciences,Today is

›› 2002, Vol. 19 ›› Issue (3): 229-232.DOI: 10.7523/j.issn.2095-6134.2002.3.002

Previous Articles     Next Articles

Cryptanalysis of a Remote Password Authentication Scheme

FANG Gen-Xi1, DAI Zong-Duo1, YANG Jun-Hui2   

  1. 1. SKLOIS, Graduate School of USTC, Beijing 100039;
    2. Institute of Software, CAS, Beijing 100080
  • Received:2002-06-03 Online:2002-05-18

Abstract:

This paper analyzes the security of Tan's scheme for remote password authentication based on cross-product. We point out that to impersonate one user's log-in reguest, the intruders need only to know the user's two log-in requests, or need only to know one log-in request after booking a smart card and getting some useful information from it, so the scheme is not secure. Some modifications to Tan's scheme for avoiding the above two kinds of possible attacks are given.

Key words: remote password authentication, smart card, time stamp, Hash function

CLC Number: