Security Analysis of Remote Password Authentication Schemes for Multiserver Architecture Using Neural Networks

摘要

In 2001, Li et al. proposed a remote password authentication scheme for multiserver architecture using neural network. However, Ku pointed out that Li et al.'s scheme is vulnerable to an offline password guessing attack a privileged insiders attack, and he also showed its scheme had several drawbacks in practice. In this paper, we demonstrate that Li et al.'s scheme exist l-wDH problem. Using Baby-Step Giant Step, we can compute x = Pw_i~(T_i-T_j)(mod p-1) in O(log p·((q/d)~(1/2))) polynomial time, it is therefore insecure and can not against forgery attack.