Cryptanalysis of Provably Secure Authentication Scheme for Multi-Server Environment

Recently Misra has proposed a provably secure authentication scheme for remote access in multi-server environment. We are impressed with the motivation behind his design. In this paper, we present the cryptanalysis of Misra's scheme and we found that his scheme is vulnerable to off-line dictionary attack, known session-specific temporary information attack, smart-card-lost attack, and spoofing attack. Moreover, his scheme's registration phase is inefficient and fails to provide two-factor security. In the extended work, we will propose a secure design for remote access in multi-server environment with considerable efficiency.