Robust and Simple Multi-server Authentication Protocol without Verification Table

摘要

Recently, Tsai et al. have proposed a multi-server authentication protocol. They claimed their protocol is secure and can withstand various attacks. But we found some security loopholes in the protocol. Accordingly, the current paper demonstrates that Tsai’s protocol does not provide perfect forward secrecy and is susceptible to a Denning-Sacco attack and Server spoofing. We then present an enhanced protocol to isolate such problems.