Comments on two multi-server authentication protocols

Recently, Tsai and Liao et al. each proposed a multi-server authentication protocol. They claimed their protocols are secure and can withstand various attacks. But we found some security loopholes in each protocol. We will show the attacks on their schemes.

[1]  Wei-Bin Lee,et al.  A smart card-based remote scheme for password authentication in multi-server Internet services , 2004, Comput. Stand. Interfaces.

[2]  Ren-Junn Hwang,et al.  Password authenticated key agreement protocol for multi-servers architecture , 2005, 2005 International Conference on Wireless Networks, Communications and Mobile Computing.

[3]  Jia-Lun Tsai,et al.  Efficient multi-server authentication scheme based on one-way hash function without verification table , 2008, Comput. Secur..

[4]  Wen-Shenq Juang,et al.  Efficient multi-server password authenticated key agreement using smart cards , 2004, IEEE Transactions on Consumer Electronics.

[5]  Yixian Yang,et al.  An Efficient Multi-server Password Authenticated Key Agreement Scheme Using Smart Cards , 2007, 2007 International Conference on Multimedia and Ubiquitous Engineering (MUE'07).

[6]  Xiang Cao,et al.  Breaking a remote user authentication scheme for multi-server architecture , 2006, IEEE Communications Letters.

[7]  Min-Shiang Hwang,et al.  A new remote user authentication scheme for multi-server architecture , 2003, Future Gener. Comput. Syst..

[8]  Shuenn-Shyang Wang,et al.  A secure dynamic ID based remote user authentication scheme for multi-server environment , 2009, Comput. Stand. Interfaces.

[9]  Da-Zhi Sun,et al.  Cryptanalysis and Improvement of User Authentication Scheme using Smart Cards for Multi-Server Environments , 2006, 2006 International Conference on Machine Learning and Cybernetics.

[10]  Wei-Bin Lee,et al.  An enhanced user authentication scheme for multi-server Internet services , 2005, Appl. Math. Comput..

[11]  Dong Hoon Lee,et al.  Efficient and Secure Remote Authenticated Key Agreement Scheme for Multi-server Using Mobile Equipment , 2008, 2008 Digest of Technical Papers - International Conference on Consumer Electronics.

[12]  Chin-Chen Chang,et al.  An efficient multi-server password authenticated key agreement scheme using smart cards with access control , 2005, 19th International Conference on Advanced Information Networking and Applications (AINA'05) Volume 1 (AINA papers).

[13]  Ke Chen,et al.  Applied Mathematics and Computation , 2022 .