Remarks on Wang-Chang's password authentication scheme

An attack on a remote password authentication scheme proposed by Wang and Chang [1996] is presented. It is shown that the scheme is breakable. An intruder can easily construct a valid login request from a previously intercepted one and replay it later to pass the system authentication process