A strong password-based remote mutual authentication with key agreement scheme on elliptic curve cryptosystem for portable devices

Authors

Xuelei Li, School of Mathematical Sciences, University of Jinan, Jinan, Shandong 250022, P R ChinaFollow
Fengtong Wen
Shenjun Cui

Author Country (or Countries)

P R China

Abstract

In this paper, we cryptanalyze Kim et al.’s scheme and point out several weaknesses in their scheme. Off-line password guessing/dictionary attack could be effective. Moreover, we demonstrate that there is a mistake in their security analysis. To remedy the weaknesses, we propose a more secure, robust and practical scheme, which is designed for portable devices based upon the discrete logarithm on elliptic curve. In addition, the expensive synchronization clock system is replaced by nonce(ephemeral random number), and the new scheme provides more functions for security and flexibility, including key agreement, password change, secret number update, revocation and DoS-resistant. Finally, security analysis shows that our scheme could resist the known common attacks.

Suggested Reviewers

N/A

Recommended Citation

Li, Xuelei; Wen, Fengtong; and Cui, Shenjun (2012) "A strong password-based remote mutual authentication with key agreement scheme on elliptic curve cryptosystem for portable devices," Applied Mathematics & Information Sciences: Vol. 06: Iss. 2, Article 6.
Available at: https://digitalcommons.aaru.edu.jo/amis/vol06/iss2/6