Cryptanalysis and Security Enhancement of Two Advanced Authentication Protocols
Document Type
Conference Proceeding
Publication Date
1-1-2014
Abstract
In this work we consider two protocols for performing cryptanalysis and security enhancement. The first one by Jiang et al., is a password-based authentication scheme. which does not use smart cards. We note that this scheme is an improvement over Chen et al.'s scheme shown vulnerable to the off-line dictionary attack by Jiang et al. We perform a cryptanalysis on Jiang at al.'s improved protocol and observe that it is prone to the clogging attack, a kind of denial of service (DoS) attack. We then suggest an improvement on the protocol to prevent the clogging attack. The other protocol we consider for analysis is by Wang et al. This is a smart card based authentication protocol. We again perform the clogging (DoS) attack on this protocol via replay. We observe that all smart card based authentication protocols which precede the one by Wang et al., and require the server to compute the computationally intensive modular exponentiation are prone to the clogging attack. We suggest (another) improvement on the protocol to prevent the clogging attack, which also applies to the protocol by Jiang et. al. © Springer International Publishing Switzerland 2014.
Publication Title
Smart Innovation, Systems and Technologies
Volume
28
Issue
VOLUME 2
First Page
307
Last Page
316
Digital Object Identifier (DOI)
10.1007/978-3-319-07350-7_34
ISSN
21903018
E-ISSN
21903026
ISBN
9783319073491
Citation Information
Talluri, & Roy, S. (n.d.). Cryptanalysis and Security Enhancement of Two Advanced Authentication Protocols. In Advanced Computing, Networking and Informatics- Volume 2 (pp. 307–316). Springer International Publishing. https://doi.org/10.1007/978-3-319-07350-7_34