Comment on A dynamic ID-based Remote User Authentication Scheme

Since 1981, when Lamport introduced the remote user authentication scheme using table, a plenty of schemes had been proposed with table and without table using. Recently Das, Saxena and Gulati have proposed A dynamic ID-based remote user authentication scheme. They claimed that their scheme is secure against ID-theft, and can resist the reply attacks, forgery attacks, insider attacks and so on. In this paper we show that Das et al.'s scheme is completely insecure and using of this scheme is like an open server access without password. 1