Paper 2023/1671 Original: eprint.iacr.org/2023/1671 ↗
A note on ``SCPUAK: smart card-based secure protocol for remote user authentication and key agreement''
Abstract
We show that the Cherbal-Benchetioui key agreement scheme [Comput. Electr. Eng., 109, 108759 (2023)] fails to keep user anonymity, not as claimed. The scheme simply thinks that user anonymity is equivalent to protecting the user's real identity. But the true anonymity means that the adversary cannot attribute different sessions to target entities, which relates to entity-distinguishable, not just identity-revealable.
Metadata
- Available format(s)
PDF- Category
- Attacks and cryptanalysis
- Publication info
- Preprint.
- History
- 2023-10-27: last updated
- 2023-10-27: published
- Short URL
- https://ia.cr/2023/1671
- License
- https://creativecommons.org/publicdomain/zero/1.0/
BibTeX
@misc{cryptoeprint:2023/1671,
author = {Zhengjun Cao and Lihua Liu},
title = {A note on ``SCPUAK: smart card-based secure protocol for remote user authentication and key agreement''},
howpublished = {Cryptology {ePrint} Archive, Paper 2023/1671},
year = {2023},
url = {https://eprint.iacr.org/2023/1671}
}