Cryptanalysis of shifted conjugacy authentication protocol

Jonathan Longrigg,Alexander Ushakov

DOI: https://doi.org/10.48550/arXiv.0708.1768

2007-08-14

Group Theory

Abstract:In this paper we present the first practical attack on the shifted conjugacy-based authentication protocol proposed by P. Dehornoy. We discuss the weaknesses of that primitive and propose ways to improve the protocol.

What problem does this paper attempt to address?

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

XIE Qi,CHEN De-ren,YU Xiu-yuan

IF: 2.034

2010-01-01

Systems Engineering

Abstract:In 2009, Park, et al. proposed an efficient remote user authentication protocol. They claimed that their protocol was the first password and smart card based remote user authentication scheme which can resist the off-line password guessing attack, and had many advantages over existing solutions such as no password tables and timestamp, low communication and computational costs. However, this paper shows that their protocol cannot resist the forgery attack and off-line password guessing attack. To overcome the security weaknesses, two improved schemes based on either nonce or timestamp without affecting the merits of the Park, et al. scheme are proposed. Technical discussions are provided to show that the improved protocol is secure, efficient and practical.
Cryptanalysis on Four Two-Party Authentication Protocols

Yalin Chen,Jue-Sam Chou*,Chun-Hui Huang

DOI: https://doi.org/10.48550/arXiv.1007.0060

2010-07-01

Abstract:In this paper, we analyze four authentication protocols of Bindu et al., Goriparthi et al., Wang et al. and Hölbl et al.. After investigation, we reveal several weaknesses of these schemes. First, Bindu et al.'s protocol suffers from an insider impersonation attack if a malicious user obtains a lost smart card. Second, both Goriparthi et al.'s and Wang et al.'s protocols cannot withstand a DoS attack in the password change phase, i.e. an attacker can involve the phase to make user's password never be used in subsequent authentications. Third, Hölbl et al.'s protocol is vulnerable to an insider attack since a legal but malevolent user can deduce KGC's secret key.

Cryptography and Security
A New Analysis Method of Cryptographic Protocols

QIAN Yong,ZHANG Yong,BAI Yingcai

DOI: https://doi.org/10.3969/j.issn.1000-3428.2001.03.008

2001-01-01

Abstract:An approach which made use of running modes of two-party cryptographic protocols to analyze protocols was put forwarded in [1]. Through some counter-examples, we found flaws in the approach. In this paper, an efficient method is developed, which matchs faked messages with received set of attacks,messages in other run of protocol. Using the method, we found holes of some cryptographic protocols successly.
Cryptanalysis of Some RFID Authentication Protocols.

Tianjie Cao,Peng Shen,Elisa Bertino

DOI: https://doi.org/10.4304/jcm.3.7.20-27

2008-01-01

Journal of Communications

Abstract:Two effective attacks, namely de-synchronization attack and impersonation attack, against Ha et al.’s LCSS RFID authentication protocol, Song and Mitchell’s protocol are identified. The former attack can break the synchronization between the RFID reader and the tag in a single protocol run so that they can not authenticate each other in any following protocol run. The latter can impersonate a legal tag to spoof the RFID reader by extracting the ID of a specific tag during the authentication process. An impersonation attack against Chen et al.’s RFID authentication scheme is also identified. By sending malicious queries to the tag and collecting the response messages emitted by the tag, the attack allows an adversary to extract the secret information from the tag and further to impersonate the legal tag.
Cryptanalysis of a Three-Party Password-Based Authenticated Key Exchange Protocol Using Weil Pairing.

Debiao He,Jianhua Chen

DOI: https://doi.org/10.1504/ijesdf.2012.049754

2014-01-01

Abstract:Recently, Zeng et al. proposed a three-party password-based authenticated key exchange protocol, in which two users could generate a common secret key with the help of the server. Although Zeng et al. claimed that their protocol could withstand various attacks, we point out that their protocol cannot resist impersonation attacks and undetectable online dictionary attacks. The analysis shows Zeng et al.'s protocol is insecure for practical applications.
Cryptanalysis of the LCSS RFID Authentication Protocol.

Tianjie Cao,Peng Shen,Elisa Bertino

DOI: https://doi.org/10.1109/isecs.2008.73

2008-01-01

Abstract:To reduce the computational load on both the back-end database and the tags, Ha et al. proposed a low-cost and strong-security (LCSS) RFID authentication protocol. In this paper, we identify two effective attacks, a desynchronization attack and a spoofing attack, against the LCSS protocol. The former attack can break the synchronization between the RFID reader and the tag in a single protocol run so that they can not authenticate each other in any following protocol run. The latter can impersonate a legal tag to spoof the RFID reader by extracting the ID of a specific tag during the authentication process. Moreover, we point out the potential countermeasure by adding an integrity check to improve the security.
Cryptanalysis of Song's advanced smart card based password authentication protocol

Juan E. Tapiador,Julio C. Hernandez-Castro,P. Peris-Lopez,John A. Clark

DOI: https://doi.org/10.48550/arXiv.1111.2744

2011-11-11

Abstract:Song \cite{Song10} proposed very recently a password-based authentication and key establishment protocol using smart cards which attempts to solve some weaknesses found in a previous scheme suggested by Xu, Zhu, and Feng \cite{XZF09}. In this paper, we present attacks on the improved protocol, showing that it fails to achieve the claimed security goals.

Cryptography and Security
Cryptanalysis on the RFID ACTION Protocol

H. M. Sun,S. M. Chen,K. H. Wang

2011-01-01

Abstract:There are increasing concerns on the security of RFID usages. Recently, Lu et al. presented ACTION, a privacy preservative authentication protocol for RFID. It is claimed that it achieves high level of security even if a large number of tags is compromised. However, we found that this protocol is vulnerable to two severe attacks : Desynchronizing attacks and Tracking attacks. In this pape r, we present how these two attacks work even if the protocol parameters are moderated.
Cryptanalysis of two ID-based deniable authentication protocol from pairings

Tianjie Cao,Yingying Kan

2009-01-01

Journal of Information and Computational Science

Abstract:On ICCSA 2007 and ICISS 2008, Lim et al.'s proposed two improved ID-based deniable authentication protocol from pairings to resist the key-compromise impersonation (KCI) attack. However in this paper, we show that both of Lim et al.'s protocols suffer from the KCI attack. In our attacks, when the longterm key of an entity A is compromised, the adversary may be able to masquerade not only as A but also to A as another party B. © 2009 Binary Information Press.
Cryptanalysis of some Nonabelian Group-Based Key Exchange Protocols

Simran Tinani,Carlo Matteotti,Joachim Rosenthal

2023-10-08

Abstract:In the recently emerging field of nonabelian group-based cryptography, a prominently used one-way function is the Conjugacy Search Problem (CSP), and two important classes of platform groups are polycyclic and matrix groups. In this paper, we discuss the complexity of the conjugacy search problem (CSP) in these two classes of platform groups using the three protocols in [10], [26], and [29] as our starting point. We produce a polynomial time solution for the CSP in a finite polycyclic group with two generators, and show that a restricted CSP is reducible to a DLP. In matrix groups over finite fields, we usedthe Jordan decomposition of a matrix to produce a polynomial time reduction of an A-restricted CSP, where A is a cyclic subgroup of the general linear group, to a set of DLPs over an extension of Fq. We use these general methods and results to describe concrete cryptanalysis algorithms for these three systems. In particular, we show that in the group of invertible matrices over finite fields and in polycyclic groups with two generators, a CSP where conjugators are restricted to a cyclic subgroup is reducible to a set of O(n2) discrete logarithm problems. Using our general results, we demonstrate concrete cryptanalysis algorithms for each of these three schemes. We believe that our methods and findings are likely to allow for several other heuristic attacks in the general case.

Cryptography and Security,Computational Complexity
Cryptanalysis of a privacy-preserving behavior-oriented authentication scheme

Sigurd Eskeland,Ahmed Fraz Baig

DOI: https://doi.org/10.5220/001114030000328

2022-09-14

Abstract:Continuous authentication has been proposed as a complementary security mechanism to password-based authentication for computer devices that are handled directly by humans, such as smart phones. Continuous authentication has some privacy issues as certain user features and actions are revealed to the authentication server, which is not assumed to be trusted. Wei et al. proposed in 2021 a privacy-preserving protocol for behavioral authentication that utilizes homomorphic encryption. The encryption prevents the server from obtaining sampled user features. In this paper, we show that the Wei et al. scheme is insecure regarding both an honest-but-curious server and an active eavesdropper. We present two attacks: The first attack enables the authentication server to obtain the secret user key, plaintext behavior template and plaintext authentication behavior data from encrypted data. The second attack enables an active eavesdropper to restore the plaintext authentication behavior data from the transmitted encrypted data.

Cryptography and Security
Cooperating Attackers in Neural Cryptography

L. N. Shacham,E. Klein,R. Mislovaty,I. Kanter,W. Kinzel

DOI: https://doi.org/10.1103/PhysRevE.69.066137

2003-12-02

Abstract:A new and successful attack strategy in neural cryptography is presented. The neural cryptosystem, based on synchronization of neural networks by mutual learning, has been recently shown to be secure under different attack strategies. The advanced attacker presented here, named the ``Majority-Flipping Attacker'', is the first whose success does not decay with the parameters of the model. This new attacker's outstanding success is due to its using a group of attackers which cooperate throughout the synchronization process, unlike any other attack strategy known. An analytical description of this attack is also presented, and fits the results of simulations.

Disordered Systems and Neural Networks,Statistical Mechanics
Cryptanalysis and Improvement of Robust Deniable Authentication Protocol

Fagen Li,Tsuyoshi Takagi

DOI: https://doi.org/10.1007/s11277-012-0640-4

IF: 2.017

2012-01-01

Wireless Personal Communications

Abstract:A deniable authentication protocol enables a receiver to identify the source of a given message, but the receiver cannot prove the source of the message to a third party. Recently, Yoon et al. (Wirel Pers Commun 55:81–90, 2010) proposed a robust deniable authentication protocol based on ElGamal cryptosystem. Although they proved that their protocol satisfies the deniable authentication, mutual authentication and confidentiality, we show that their protocol does not satisfy the deniable authentication property. The receiver can prove the source of a given message to a third party. In addition, we propose an improved protocol that removes this weakness.
Remarks on Unknown Key-Share Attack on Authenticated Multiple-Key Agreement Protocol

HS Zhou,L Fan,JH Li

DOI: https://doi.org/10.1049/el:20030804

2003-01-01

Electronics Letters

Abstract:Recently Shim gave an attack on Harn's modified authenticated multiple-key agreement protocol. The authors point out Shim's attack is not workable. However, Harn's modified protocol is still insecure and the authors give another attack on it. Finally, the authors propose an efficient protocol that can prevent this attack.
Cryptanalysis of Aydos Et Al.'s ECC-based Wireless Authentication Protocol

HM Sun,BT Hsieh,SM Tseng

DOI: https://doi.org/10.1109/eee.2004.1287366

2004-01-01

Abstract:With the rapid development of communication technology, wireless technology has become more and more important, and has been widely used in personal communication. Recently, Aydos et al. proposed an ECC-based authenticated key agreement protocol for wireless communication. In their protocol, they used ECDSA and Diffie-Hellman key agreement to provide authentication and to obtain a session key for later communication. In this paper, however, we show that Aydos et al's ECC-based authenticated key agreement protocol for wireless communication does not achieve some essential security requirements including forward secrecy, known-key security, and mutual authentication.
Cryptanalysis of an Exquisite Mutual Authentication Scheme with Key Agreement Using Smart Card.

Debiao He,Jianhua Chen,Jin Hu

2010-01-01

Abstract:The weakness of an exquisite authentication scheme based on smart cards and passwords proposed by Liao et al. (C. H. Liao, H. C. Chen, and C. T. Wang, An Exquisite Mutual Authentication Scheme with Key Agreement Using Smart Card, Informatica, Vol. 33, No. 2, 2009, 125-132.) is analyzed. Five kinds of weakness are presented in different scenarios. The analyses show that Liao et al.'s scheme is insecure for practical application.
Cryptanalysis of Two MD5-Based Authentication Protocols: APOP and NMAC.

Lei Wang,Kazuo Ohta,Yu Sasaki,Kazuo Sakiyama,Noboru Kunihiro

DOI: https://doi.org/10.1587/transinf.e93.d.1087

2010-01-01

IEICE Transactions on Information and Systems

Abstract:Many hash-based authentication protocols have been proposed, and proven secure assuming that underlying hash functions are secure. On the other hand, if a hash function compromises, the security of authentication protocols based on this hash function becomes unclear. Therefore, it is significantly important to verify the security of hash-based protocols when a hash function is broken.In this paper, we will re-evaluate the security of two MD5-based authentication protocols based on a fact that MD5 cannot satisfy a required fundamental property named collision resistance. The target protocols are APOP (Authenticated Post Office Protocol) and NMAC (Nested Message Authentication Code), since they or their variants are widely used in real world. For security evaluation of APOP, we will propose a modified password recovery attack procedure, which is twice as fast as previous attacks. Moreover, our attack is more realistic, as the probability of being detected is lower than that of previous attacks. For security evaluation of MD5-based NMAC, we will propose a new key-recovery attack procedure, which has a complexity lower than that of previous attack. The complexity of our attack is 2(76), while that of previous attack is 2(100).**Moreover, our attack has another interesting point. NMAC has two keys: the inner key and the outer key. Our attack can recover the outer key partially without the knowledge of the inner key.
Cryptanalysis and Enhancements of Delegation-Based Authentication Protocol for Secure Roaming Service

Yichen Wang,Qiong Pu,Shuhua Wu

DOI: https://doi.org/10.1504/ijesdf.2012.049755

2012-01-01

International Journal of Electronic Security and Digital Forensics

Abstract:Most recently, Youn and Lim proposed an improved delegation-based authentication protocol for secure roaming service with unlinkability. In this letter, we show that: 1) it is vulnerable to a denial of service (DoS) attack; 2) cannot provide the unlinkability as claimed. Finally, we propose an enhanced protocol to remedy the security loopholes existing in it. Moreover, our improved protocol is still efficient.
Attacks on the (enhanced) Yang-Shieh Authentication

KF Chen,S Zhong

DOI: https://doi.org/10.1016/s0167-4048(03)00012-9

IF: 5.105

2003-01-01

Computers & Security

Abstract:The Yang-Shieh authentication is a time-stamp based password authentication scheme that uses smart cards [1]. In [2,3], various attacks on this scheme are described. However, an enhancement of the scheme is proposed in [3] and enables the scheme to resist these existing attacks. In this paper, we show two new attack that can break the enhanced scheme. We further point out that the fundamental computational assumption of the Yang-Shieh authentication scheme is incorrect.
Cryptanalysis of two dynamic ID-Based remote user authentication schemes for multi-server architecture

Ding Wang,Chun-guang Ma,De-li Gu,Zhen-shan Cui

DOI: https://doi.org/10.1007/978-3-642-34601-9_35

2012-01-01

Abstract:In NSS'10, Shao and Chin pointed out that Hsiang and Shih's dynamic ID-based remote user authentication scheme for multi-server environment has several security flaws and further proposed an improved version which is claimed to be efficient and secure. In this study, however, we will demonstrate that Shao-Chin's scheme still cannot achieve the claimed security goals, and we report its following flaws: (1) It cannot withstand offline password guessing attack under their non-tamper resistance assumption of the smart card; (2) It fails to provide user anonymity; (3) It is prone to user impersonation attack. More recently, Li et al. found that Sood et al.'s dynamic ID-based authentication protocol for multi-server architecture is still vulnerable to several kinds of attacks and presented a new scheme that attempts to overcome the identified weaknesses. Notwithstanding their ambitions, Li et al.'s scheme is still found vulnerable to various known attacks by researchers. In this study, we perform a further cryptanalysis and uncover its two other vulnerabilities: (1) It cannot achieve user anonymity, which is the essential goal of a dynamic ID-based scheme; (2) It is susceptible to offline password guessing attack. The proposed cryptanalysis discourages any use of the two schemes under investigation in practice and reveals some subtleties and challenges in designing this type of schemes.

Cryptanalysis of shifted conjugacy authentication protocol

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

Cryptanalysis on Four Two-Party Authentication Protocols

A New Analysis Method of Cryptographic Protocols

Cryptanalysis of Some RFID Authentication Protocols.

Cryptanalysis of a Three-Party Password-Based Authenticated Key Exchange Protocol Using Weil Pairing.

Cryptanalysis of the LCSS RFID Authentication Protocol.

Cryptanalysis of Song's advanced smart card based password authentication protocol

Cryptanalysis on the RFID ACTION Protocol

Cryptanalysis of two ID-based deniable authentication protocol from pairings

Cryptanalysis of some Nonabelian Group-Based Key Exchange Protocols

Cryptanalysis of a privacy-preserving behavior-oriented authentication scheme

Cooperating Attackers in Neural Cryptography

Cryptanalysis and Improvement of Robust Deniable Authentication Protocol

Remarks on Unknown Key-Share Attack on Authenticated Multiple-Key Agreement Protocol

Cryptanalysis of Aydos Et Al.'s ECC-based Wireless Authentication Protocol

Cryptanalysis of an Exquisite Mutual Authentication Scheme with Key Agreement Using Smart Card.

Cryptanalysis of Two MD5-Based Authentication Protocols: APOP and NMAC.

Cryptanalysis and Enhancements of Delegation-Based Authentication Protocol for Secure Roaming Service

Attacks on the (enhanced) Yang-Shieh Authentication

Cryptanalysis of two dynamic ID-Based remote user authentication schemes for multi-server architecture