一种实用的远程通行字认证方案

A Practical Remote Password Authentication Scheme

应用GF(P)上的代数运算和单向函数，构造了一种不用通行字表的远程通行字认证方案，并对该方案进行了安全性分析和计算特性分析。在该方案中，用户可以自己选择通行字，入侵者不能导出任何用户的通行字和任何保密信息，该方案能抵御重试攻击，能防止内部伪造访问信息，能适合多种安全性强度的需要。该方案计算特性简单。

A remote password authentication scheme is given only applying some arithmetic operation and an one_way function in field GF(P), and analyses this schemes security and computing property. In the scheme, every user can choose his password by himself, intruders cannot derive any users password and any secret information. The scheme is without password table, can withstand replaying attacks, avoid to fabricate accessing history, suit for many security intensity. This schemes computing is simpler.