[Resource Topic] 2014/115: Comments on a novel user authentication and key agreement scheme

Welcome to the resource topic for 2014/115

Title:
Comments on a novel user authentication and key agreement scheme

Authors: Jia-Lun Tsai

Abstract:

In 2013, Sun et al. showed that the related works’ authentication schemes proposed by [2-7] are vulnerable to an insider attack and fail to provide mutual authentication. These two attacks can be successfully plotted by an adversary, since the private key of the server can compute all the legal users’ private keys. They then proposed a new remote user authentication and key agreement scheme for the mobile client-server environment. However, we find that their scheme is still vulnerable to insider attack (Sun et al.) and how to avoid such an insider attack on the client-server environment is still an open problem.

ePrint: https://eprint.iacr.org/2014/115

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .