On the Security of Methods for Protecting Password Transmission
Volume 12, Issue 3 (2001), pp. 469–476
Pub. online: 1 January 2001
Type: Research Article
This research was partially supported by National Science Council, Taiwan, R.O.C., under contract no. NSC89–2213-E-252–008.
Received
1 October 2000
1 October 2000
Published
1 January 2001
1 January 2001
Abstract
Peyravian and Zunic (2000) proposed a password transmission scheme and a password change scheme over an insecure network. Their proposed solutions do not require the use of any symmetric-key or public-key cryptosystems. However, this article points out that their schemes have several security flaws for practical applications. A slight improvement on their schemes is proposed in this paper to remove the security flaws.