DocumentCode
567337
Title
Cryptanalysis of password scheme
Author
Aboud, Sattar J.
Author_Institution
Inf. Technol. Dept., Iraqi Council of Representatives, Baghdad, Iraq
fYear
2012
fDate
25-28 June 2012
Firstpage
283
Lastpage
285
Abstract
In this paper, we review certain password scheme that using a smart card. The scheme verifies the logon password without password file. The idea of that scheme based on both integer factoring and discrete logarithm problem. Also, we describe some schemes which indicated there are two security problems in that password-typed smart card scheme, these are impersonation and offline password guessing attack. Then, we analyze the protection defenseless of the scheme. Assume that the hacker gains to calculate the modular exponentiation at both sides of the password scheme, with intercepted retrieve request, the hacker can create new access request with a successful enter into the remote server.
Keywords
authorisation; cryptography; number theory; smart cards; access request creation; cryptanalysis; discrete logarithm problem; impersonation attack; integer factoring problem; intercepted retrieve request; logon password verification; modular exponentiation; offline password guessing attack; password-typed smart card scheme; remote server; security problems; Authentication; Cryptography; Password scheme; impersonate attack; offline guessing attack; smart card;
fLanguage
English
Publisher
ieee
Conference_Titel
Information Society (i-Society), 2012 International Conference on
Conference_Location
London
Print_ISBN
978-1-4673-0838-0
Type
conf
Filename
6284976
Link To Document