[Resource Topic] 2004/017: Cryptanalysis of an ID-based Password Authentication Scheme using Smart Cards and Fingerprints

Welcome to the resource topic for 2004/017

Title:
Cryptanalysis of an ID-based Password Authentication Scheme using Smart Cards and Fingerprints

Authors: M. Scott

Abstract:

In a paper recently published in the ACM Operating Systems Review, Kim, Lee and Yoo \cite{kim-lee-yoo} describe two ID-based password authentication schemes for logging onto a remote network server using smart cards, passwords and fingerprints. Various claims are made regarding the security of the schemes, but no proof is offered. Here we show how a passive eavesdropper, without access to any smart card, password or fingerprint, and after passively eavesdropping only one legitimate log-on, can subsequently log-on to the server claiming any identity.

ePrint: https://eprint.iacr.org/2004/017

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .