Cryptanalysis and Security Enhancement of an Advanced Authentication Scheme using Smart Cards, and a Key Agreement Scheme for Tw

Abstract—In this work we consider two protocols for performing cryptanalysis and security enhancement. The first one by Song, is a password authentication scheme based on smart cards. We note that this scheme has already been shown vulnerable to the off-line password guessing attack by Tapiador et al. We perform a further cryptanalysis on this protocol and observe that it is prone to the clogging attack, a kind of denial of service (DOS) attack. We observe that all smart card based authentication protocols which precede the one by Song, and require the server to compute the computationally intensive modular exponentiation, like the one by Xu et al., or Lee at al., are prone to the clogging attack. We then suggest an improvement on the protocol to prevent the clogging attack. The other protocol we consider is a two-party identity-based authenticated key agreement protocol by H¨olbl et al. They have devised two such protocols in their work. They call them Protocol 1 and Protocol 2. B...

• Type: Journal
• Year: 2011
• Where: IACR
• Authors: Swapnoneel Roy, Amlan K. Das, Yu Li
• Keywords: Authentication Protocols, Denial Of Service Dos Attack, IACR 2011, Legitimate Provider