2001 · 43 citations · 5 references
ComputingComputer EngineeringComputer ScienceAuthenticationComputer SecurityCryptographyAuthentication ProtocolsAuthentication SecurityAuthentication VulnerabilitiesPassword-based AuthenticationPublic Key AuthenticationAuthentication AttacksPassword Guessing AttacksSecure Authentication Protocols
Abstract. Yamaguchi, Okayama, and Miyahara proposed a simple but efficient authentication sys-tem, SPLICE/AS. In this article, we show that their method is vulnerable to the guessing attack. An attacker can obtain the password, private-key, and public-key of the user. To overcome the vul-nerability of SPLICE/AS to the guessing attack, we propose an improvement of their system. In our scheme, we not only prevent the guessing attack to obtain secret messages but also enhance the security of the SPLICE/AS authentication system in WIDE.
5
New directions in cryptography
Whitfield Diffie, Martin E. Hellman · IEEE Transactions on Information Theory · 1976 · 14.4K citations
Protecting poorly chosen secrets from guessing attacks
Li‐Hua Gong, Mark Lomas, Roger M. Needham et al. · IEEE Journal on Selected Areas in Communications · 1993 · 366 citations