TY - GEN
T1 - Cryptanalysis and improvement of a SIP authentication scheme
AU - Zheng, Jun
AU - Wang, Dongyun
N1 - Publisher Copyright:
© 2014 IEEE.
PY - 2014/5/11
Y1 - 2014/5/11
N2 - SIP (Session Initial Protocol) has been a very popular protocol for VoIP. However, the authentication of this protocol just derives from HTTP digest authentication, which has been demonstrated insecure in the open network. Recently, Arshad et al. proposed an improved mutual authentication scheme based on ECC and claimed that it's secure enough. In this paper, however, we point out that their protocol still could not resist offline password guessing attacks. Furthermore, we propose an ECC-based mutual authentication and key agreement scheme to overcome such a security problem. Also, an analysis of it is provided to indicate that compared to Arshad et al.'s scheme, this scheme reduces twice hash operation and is more secure with reasonable computation cost.
AB - SIP (Session Initial Protocol) has been a very popular protocol for VoIP. However, the authentication of this protocol just derives from HTTP digest authentication, which has been demonstrated insecure in the open network. Recently, Arshad et al. proposed an improved mutual authentication scheme based on ECC and claimed that it's secure enough. In this paper, however, we point out that their protocol still could not resist offline password guessing attacks. Furthermore, we propose an ECC-based mutual authentication and key agreement scheme to overcome such a security problem. Also, an analysis of it is provided to indicate that compared to Arshad et al.'s scheme, this scheme reduces twice hash operation and is more secure with reasonable computation cost.
KW - ECC
KW - Key Agreement
KW - Mutual Authentication
KW - Password Guessing Attacks
KW - Session Initial Protocol
UR - http://www.scopus.com/inward/record.url?scp=84949929057&partnerID=8YFLogxK
U2 - 10.1109/ICITEC.2014.7105601
DO - 10.1109/ICITEC.2014.7105601
M3 - Conference contribution
AN - SCOPUS:84949929057
T3 - Proceedings of 2nd International Conference on Information Technology and Electronic Commerce, ICITEC 2014
SP - 199
EP - 203
BT - Proceedings of 2nd International Conference on Information Technology and Electronic Commerce, ICITEC 2014
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 2nd International Conference on Information Technology and Electronic Commerce, ICITEC 2014
Y2 - 20 December 2014 through 21 December 2014
ER -
