A PASSWORD-AUTHENTICATION SCHEME BASED ON SECURE TWO-PARTY COMPUTATION

摘要

Because of the convenience for using short secrets, the authentication based on password was very popular. But the password transferred on the internet was plain text or hash, which is easily decode or blown by the attackers. An equalitydetermination protocol is presented in this paper by developing the secure two-party computation protocol in [9], and the correctness and security are analyzed. Based on the protocol, an identity authentication scheme is presented. Even if the eavesdropper gets the cipher text, he cannot get any information about the password. The security of the scheme is analyzed at the end.