一个强口令认证协议的漏洞研究

研究了基于散列函数的强口令密码认证协议,分析了目前该类协议中具有较高安全性的SPAS协议。虽然协议具有较高的安全性,但是通过分析发现协议还是存在安全漏洞。存在安全缺陷的主要原因是协议中使用的密码技术过于单一。该类协议中,如果不使用其它密码技术,很难使协议达到安全。

Study of the Hole of Strong Password Authentication Protocol

Studied a strong password authentication protocol based on hash function,by analyzing the security of SPAS protocol among this kind of protocols.Although the SPAS is designed meticulously and regarded as more secure,but we also find some secure vulnerability in it.Using single cryptography technology induces this protocol has secure leak.At last we can prove that if this kind of protocol uses single cryptography technology,it can't produce a secure protocol.