NDLI: Off-Line Password-Guessing Attack to Yang's and Huang's Authentication Schemes for Session Initiation Protocol

Content Provider	IEEE Xplore Digital Library
Author	Heasuk Jo Yunho Lee Mijin Kim Seungjoo Kim Dongho Won
Copyright Year	2009
Abstract	The Session Initiation Protocol(SIP) is an application-layer control protocol for creating, modifying, and terminating sessions with one or more participants in the IP-based telephony environment.Yang et al. and Huang et al. proposed a secure authentication scheme for session initiation protocol.Yang's scheme is based on Deffi-Hellman key agreement scheme and a combination of hash functions. In 2006, Huang et al. pointed out that Yang's scheme is insecure, and proposed an improved authentication scheme for SIP. In this paper, the secure of Yang's and Huang's scheme is analyzed. It is demonstrated that both schemes still have some weaknesses: it cannot withstand against the off-line password-guessing attack. Based on our analysis, we found the security problem with these schemes and, in addition, shows how to fix it.
Starting Page	618
Ending Page	621
File Size	309846
Page Count	4
File Format	PDF
ISBN	9781424452095
DOI	10.1109/NCM.2009.251
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2009-08-25
Publisher Place	South Korea
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Key agreement Network servers Smart cards Authentication Communication system control Access protocols Security Session initiation protocol Internet telephony Videoconference Web server Random number generation
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Security enhancements of smart card-based remote user password authentication scheme with session key agreement

Security analysis of smart card based password authentication schemes

Security Weaknesses in Chang and Wu's Key Agreement Protocol for a Multi-Server Environment

Off-line Password Guessing Attack on An Efficient Key Agreement Protocol for Secure Authentication Abstract (2005)

1 comments on three multi-server authentication protocols.

An Improved Authentication Protocol Based on One-Way Hash Functions and Diffie-Hellman Key Exchange

A Reliable Dynamic User-Remote Password Authentication Scheme over Insecure Network

Breaking a Smart Card based Secure Password Authentication Scheme

Security design for three-party encrypted key exchange protocol using smart cards

Off-Line Password-Guessing Attack to Yang's and Huang's Authentication Schemes for Session Initiation Protocol

Similar Documents

Security enhancements of smart card-based remote user password authentication scheme with session key agreement

Security analysis of smart card based password authentication schemes

Security Weaknesses in Chang and Wu's Key Agreement Protocol for a Multi-Server Environment

Off-line Password Guessing Attack on An Efficient Key Agreement Protocol for Secure Authentication Abstract (2005)

1 comments on three multi-server authentication protocols.

An Improved Authentication Protocol Based on One-Way Hash Functions and Diffie-Hellman Key Exchange

A Reliable Dynamic User-Remote Password Authentication Scheme over Insecure Network

Breaking a Smart Card based Secure Password Authentication Scheme

Security design for three-party encrypted key exchange protocol using smart cards

Off-Line Password-Guessing Attack to Yang's and Huang's Authentication Schemes for Session Initiation Protocol