Cryptanalysis of Yang-Wang-Chang’s password authentication scheme with smart cards

Pathan, Al-Sakib Khan and Hong, Choong Seon (2008) Cryptanalysis of Yang-Wang-Chang’s password authentication scheme with smart cards. In: 10th International Conference on Advanced Communication Technology (IEEE ICACT 2008), February 17-20, 2008, Phoenix Park, Korea.

PDF - Published Version Restricted to Registered users only Download (404kB) | Request a copy

Abstract

In 2005, Yang, Wang, and Chang proposed an improved timestamp-based password authentication scheme in an attempt to overcome the flaws of Yang-Shieh’s legendary timestamp-based remote authentication scheme using smart cards. After analyzing the improved scheme proposed by Yang-Wang-Chang, we have found that their scheme is still insecure and vulnerable to four types of forgery attacks. Hence, in this paper, we prove that, their claim that their scheme is intractable is incorrect. Also, we show that even an attack based on Sun et al.’s attack could be launched against their scheme which they claimed to resolve with their proposal.

Item Type:	Conference or Workshop Item (Full Paper)
Additional Information:	6841/730
Uncontrolled Keywords:	cryptanalysis, forgery, smart card, authentication
Subjects:	Q Science > Q Science (General) Q Science > QA Mathematics > QA76 Computer software
Kulliyyahs/Centres/Divisions/Institutes (Can select more than one option. Press CONTROL button):	Kulliyyah of Information and Communication Technology Kulliyyah of Information and Communication Technology Kulliyyah of Information and Communication Technology > Department of Computer Science Kulliyyah of Information and Communication Technology > Department of Computer Science
Depositing User:	Dr. Al-Sakib Khan Pathan
Date Deposited:	02 Aug 2011 15:35
Last Modified:	02 Aug 2011 15:35
URI:	http://irep.iium.edu.my/id/eprint/730

Actions (login required)

View Item