Security of Improvement on Methods for Protecting Password Transmission
Volume 14, Issue 4 (2003), pp. 551–558
Pub. online: 1 January 2003
Type: Research Article
Received
1 June 2003
1 June 2003
Published
1 January 2003
1 January 2003
Abstract
Recently, Tseng et al. proposed an improvement on Peyravian and Zunic's protected password transmission scheme and protected changing scheme to remove some security flaws. However, as we will point out in this paper, any adversary can intercept the request for changing the password sent by a legal user and modify it with a wrong password. Furthermore, we shall also propose an improved version of their protected password changing scheme to help it out of the trouble.