Cryptanalysis of A One-Time Password Authentication Protocol

Abstract

Recently, Sandirigama et al. propose a simple one-time password authentication protocol,SAS, which is intended to be superior to order similar protocols in the aspects of security and efficiency. In this paper, we show that the SAS protocol is still vulnerable to the modification attack. Then, an improved version of the SAS protocol is described.