Cryptanalysis of An Advanced Authentication Scheme

In this paper we study a scheme for making cryptanalysis and security improvement. This protocol by Song, is a password authentication protocol using smart card. We note that this protocol has been shown to be prone to the offline password guessing attack. We perform an additional cryptanalysis on this scheme and detect that it is vulnerable to the clogging attack, a type of denial-of-service attack. We notice that all smart card typed authentication schemes which lead the scheme by Song, and need the server to find the computationally exhaustive modular exponentiation, similar to the scheme by Xu et al., and it is vulnerable to the clogging attack. Then we propose an enhancement in the scheme to avoid the clogging attack.

@article{Aboud2011,
  title     = {Cryptanalysis of An Advanced Authentication Scheme},
  journal   = {International Journal of Advanced Computer Science and Applications},
  volume    = {2},
  number    = {10},
  year      = {2011},
  publisher = {The Science and Information Organization},
  author    = {Sattar J Aboud and Abid T. Al Ajeeli},
  doi       = {10.14569/IJACSA.2011.021018},
  url       = {https://doi.org/10.14569/IJACSA.2011.021018}
}