Abstract:Understanding security failures of cryptographic protocols is the key to both patching existing protocols and designing future schemes. In this paper, we analyze two recent proposals in the area of password-based remote user authentication using smart cards. First, we point out that the scheme of Chen et al. cannot achieve all the claimed security goals and report its following flaws: (i) it is vulnerable to offline password guessing attack under their nontamper resistance assumption of the smart cards; and (ii) it fails to provide forward secrecy. Then, we analyze an efficient dynamic ID-based scheme without public-key operations introduced byWen and Li in 2012. This proposal attempts to overcome many of the well-known security and efficiency shortcomings of previous schemes and supports more functionalities than its counterparts. Nevertheless, Wen-Li's protocol is vulnerable to offline password guessing attack and denial of service attack, and fails to provide forward secrecy and to preserve user anonymity. Furthermore, with the security analysis of these two schemes and our previous protocol design experience, we put forward three general principles that are vital for designing secure smart-card-based password authentication schemes: (i) public-key techniques are indispensable to resist against offline password guessing attack and to preserve user anonymity under the nontamper resistance assumption of the smart card; (ii) there is an unavoidable trade-off when fulfilling the goals of local password update and resistance to smart card loss attack; and (iii) at least two exponentiation (respectively elliptic curve point multiplication) operations conducted on the server side are necessary for achieving forward secrecy. The cryptanalysis results discourage any practical use of the two investigated schemes and are important for security engineers to make their choices correctly, whereas the proposed three principles are valuable to protocol designers for advancing more robust schemes. Copyright (C) 2012 John Wiley & Sons, Ltd.

Public key versus symmetric key cryptography in client–server authentication protocols

Public-key cryptography and password protocols

Hash Function and Smart Card Based Multi-Server Authentication Protocol

Weaknesses of a Password-Authenticated Key Exchange Protocol between Clients with Different Passwords

Password-based User Authentication and Key Distribution Protocols for Client-Server Applications

A Heterogeneous User Authentication and Key Establishment for Mobile Client–server Environment

KeyAuth: Bringing Public-key Authentication to the Masses

Crytanalysis of Three Anonymous Authentication Schemes for Multi-Server Environment

An Efficient Certificateless User Authentication and Key Exchange Protocol for Client-Server Environment.

An Improved User Authentication With Key Agreement Scheme For Multi-Server Architecture Using Scpks

Password-based Authentication and Key Distribution Protocols with Perfect Forward Secrecy

Anonymous Biometrics-Based Authentication with Key Agreement Scheme for Multi-Server Environment Using ECC

Security Analysis of Yang et al.'s Practical Password-Based Two-Server Authentication and Key Exchange System

A lightweight dynamic pseudonym identity based authentication and key agreement protocol without verification tables for multi-server architecture

An Efficient Two‐party Authentication Key Exchange Protocol for Mobile Environment

Enhanced Three-Party Encrypted Key Exchange Without Server Public Keys

New robust biometrics-based mutual authentication scheme with key agreement using elliptic curve cryptography

Revised Anonymous Authentication Protocol For Adaptive Client-Server Infrastructure

Security Flaws In Two Improved Remote User Authentication Schemes Using Smart Cards

On the Security of Public Key Protocols

Client-Server Password Recovery (Extended Abstract)