Security of Shen et al.'s Timestamp-Based Password Authentication Scheme

Abstract. Recently, Shen et al. proposed an improvement on YangShieh’s timestamp-based password authentication scheme using smart cards. Then they claimed that their scheme cannot withstand a forged login attack, but also eliminate a problem of Yang-Shieh’s. However, their scheme is still susceptible to forged login attack. In this paper, we show how the forged login attack can be worked out on Shen et al.’s scheme and present an enhancement to resolve such a problem.

• Type: Conference
• Year: 2004
• Where: ICCSA
• Authors: Eun-Jun Yoon, Eun-Kyung Ryu, Kee-Young Yoo
• Keywords: Applied Computing, ICCSA 2004, Login Attack, Password Authentication Scheme, Shen Et Al