Weaknesses of a Multi-Server Password Authenticated Weaknesses of a Multi-Server Password Authenticated

Abstract

Recently, Juang proposed an efficient password authenticated key agreement scheme using smart cards for the multi-server architecture, and claimed that his scheme was intended to provide mutual authentication and session key agreement. In this paper, we show that Juang’s scheme is still vulnerable to a privileged insider’s attack and is not reparable. Furthermore, it does not provide forward secrecy.