Paper 2004/017 Original: eprint.iacr.org/2004/017 ↗
Cryptanalysis of an ID-based Password Authentication Scheme using Smart Cards and Fingerprints
Abstract
In a paper recently published in the ACM Operating Systems Review, Kim, Lee and Yoo \cite{kim-lee-yoo} describe two ID-based password authentication schemes for logging onto a remote network server using smart cards, passwords and fingerprints. Various claims are made regarding the security of the schemes, but no proof is offered. Here we show how a passive eavesdropper, without access to any smart card, password or fingerprint, and after passively eavesdropping only one legitimate log-on, can subsequently log-on to the server claiming any identity.
Metadata
- Available format(s)
PDF- Category
- Cryptographic protocols
- Publication info
- Preprint.
- History
- 2004-01-27: last updated
- 2004-01-27: published
- Short URL
- https://ia.cr/2004/017
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2004/017,
author = {M. Scott},
title = {Cryptanalysis of an ID-based Password Authentication Scheme using Smart Cards and Fingerprints},
howpublished = {Cryptology {ePrint} Archive, Paper 2004/017},
year = {2004},
url = {https://eprint.iacr.org/2004/017}
}