Reconsidering a lightweight anonymous authentication protocol

Chien Ming Chen; King Hang Wang; Weicheng Fang; Tsu Yang Wu; Eric Ke Wang

doi:10.1080/02533839.2018.1537808

Reconsidering a lightweight anonymous authentication protocol

Chien Ming Chen
, King Hang Wang^*
, Weicheng Fang
, Tsu Yang Wu
, Eric Ke Wang

^*Corresponding author for this work

Department of Computer Science

Research output: Contribution to journal › Journal article › peer-review

13 Citations (Scopus)

Abstract

In the cryptographic community, many efforts have been expended to build secure authentication protocols without using heavy asymmetric encryption. However, many of these efforts were ineffectual because many of them were found insecure due to low robustness to different types of attacks. This paper identifies a particular type of an attacker model that will never allow a secure lightweight authentication protocol. We demonstrate this finding by breaking a recently proposed protocol that is fixed from two insecure protocols. Then, we present the arguments for the impossibility of the existence of such a protocol while a secure protocol can appear only in an augmented version of this attacker model.

Original language	English
Pages (from-to)	9-14
Number of pages	6
Journal	Journal of the Chinese Institute of Engineers, Transactions of the Chinese Institute of Engineers, Series A
Volume	42
Issue number	1
DOIs	https://doi.org/10.1080/02533839.2018.1537808
Publication status	Published - 2 Jan 2019

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

SDG 9 Industry, Innovation, and Infrastructure

User-Defined Keywords

Authenticated key agreement
off-line password guessing attack
user anonymity

Access to Document

10.1080/02533839.2018.1537808

Cite this

@article{a59e8fe5b6a342ee930b998eb53d8be0,

title = "Reconsidering a lightweight anonymous authentication protocol",

abstract = "In the cryptographic community, many efforts have been expended to build secure authentication protocols without using heavy asymmetric encryption. However, many of these efforts were ineffectual because many of them were found insecure due to low robustness to different types of attacks. This paper identifies a particular type of an attacker model that will never allow a secure lightweight authentication protocol. We demonstrate this finding by breaking a recently proposed protocol that is fixed from two insecure protocols. Then, we present the arguments for the impossibility of the existence of such a protocol while a secure protocol can appear only in an augmented version of this attacker model.",

keywords = "Authenticated key agreement, off-line password guessing attack, user anonymity",

author = "Chen, \{Chien Ming\} and Wang, \{King Hang\} and Weicheng Fang and Wu, \{Tsu Yang\} and Wang, \{Eric Ke\}",

note = "The work of Chien-Ming Chen was supported in part by Shenzhen Technical Project under grant number [JCYJ20170307151750788] and in part by Shenzhen Technical Project under grant number [KQJSCX20170327161755]. The Work of Eric Ke Wang was supported in part by National Natural Science Foundation of China (No.61572157), grant number [2016A030313660] from Guangdong Province Natural Science Foundation, [JCYJ20160608161351559] from Shenzhen Municipal Science and Technology Innovation Project. Publisher Copyright: {\textcopyright} 2019, {\textcopyright} 2019 The Chinese Institute of Engineers.",

year = "2019",

month = jan,

day = "2",

doi = "10.1080/02533839.2018.1537808",

language = "English",

volume = "42",

pages = "9--14",

journal = "Journal of the Chinese Institute of Engineers, Transactions of the Chinese Institute of Engineers, Series A",

issn = "0253-3839",

publisher = "Taylor and Francis Ltd.",

number = "1",

}

TY - JOUR

T1 - Reconsidering a lightweight anonymous authentication protocol

AU - Chen, Chien Ming

AU - Wang, King Hang

AU - Fang, Weicheng

AU - Wu, Tsu Yang

AU - Wang, Eric Ke

N1 - The work of Chien-Ming Chen was supported in part by Shenzhen Technical Project under grant number [JCYJ20170307151750788] and in part by Shenzhen Technical Project under grant number [KQJSCX20170327161755]. The Work of Eric Ke Wang was supported in part by National Natural Science Foundation of China (No.61572157), grant number [2016A030313660] from Guangdong Province Natural Science Foundation, [JCYJ20160608161351559] from Shenzhen Municipal Science and Technology Innovation Project. Publisher Copyright: © 2019, © 2019 The Chinese Institute of Engineers.

PY - 2019/1/2

Y1 - 2019/1/2

N2 - In the cryptographic community, many efforts have been expended to build secure authentication protocols without using heavy asymmetric encryption. However, many of these efforts were ineffectual because many of them were found insecure due to low robustness to different types of attacks. This paper identifies a particular type of an attacker model that will never allow a secure lightweight authentication protocol. We demonstrate this finding by breaking a recently proposed protocol that is fixed from two insecure protocols. Then, we present the arguments for the impossibility of the existence of such a protocol while a secure protocol can appear only in an augmented version of this attacker model.

AB - In the cryptographic community, many efforts have been expended to build secure authentication protocols without using heavy asymmetric encryption. However, many of these efforts were ineffectual because many of them were found insecure due to low robustness to different types of attacks. This paper identifies a particular type of an attacker model that will never allow a secure lightweight authentication protocol. We demonstrate this finding by breaking a recently proposed protocol that is fixed from two insecure protocols. Then, we present the arguments for the impossibility of the existence of such a protocol while a secure protocol can appear only in an augmented version of this attacker model.

KW - Authenticated key agreement

KW - off-line password guessing attack

KW - user anonymity

UR - https://www.scopus.com/pages/publications/85060775266

U2 - 10.1080/02533839.2018.1537808

DO - 10.1080/02533839.2018.1537808

M3 - Journal article

AN - SCOPUS:85060775266

SN - 0253-3839

VL - 42

SP - 9

EP - 14

JO - Journal of the Chinese Institute of Engineers, Transactions of the Chinese Institute of Engineers, Series A

JF - Journal of the Chinese Institute of Engineers, Transactions of the Chinese Institute of Engineers, Series A

IS - 1

ER -

Reconsidering a lightweight anonymous authentication protocol

Abstract

UN SDGs

User-Defined Keywords

Access to Document

Other files and links

Fingerprint

Cite this