Cryptanalysis of an anonymous user identification and key distribution scheme

Abstract

A scheme of anonymous user identification and key distribution was proposed by Wu and Hsu. This paper shows that their scheme is insecure to three attacks: a malicious responder can obtain the initiator’s secret key, an adversary can impersonate a service provider, and an adversary can impersonate another legal user.