A protected password change protocol
Cryptography and Security
2007-05-23 v1
Abstract
Some protected password change protocols were proposed. However, the previous protocols were easily vulnerable to several attacks such as denial of service, password guessing, stolen-verifier and impersonation atacks etc. Recently, Chang et al. proposed a simple authenticated key agreement and protected password change protocol for enhancing the security and efficiency. In this paper, authors shall show that password guessing, denial of service and known-key attacks can work in their password change protocol. At the same time, authors shall propose a new password change protocol to withstand all the threats of security.
Cite
@article{arxiv.cs/0506105,
title = {A protected password change protocol},
author = {Ren-Chiun Wang and Chou-Chen Yang and Kun-Ru Mo},
journal= {arXiv preprint arXiv:cs/0506105},
year = {2007}
}