Cryptanalysis of Farash et al.'s SIP authentication protocol

DOI10.1504/IJDSDE.2018.089097MaRDI QIDQ2289535zbMATH OpenFDO

Authors Mourade Azrour, Yousef Farhaoui, Mohammed Ouanan

Publication date 23 January 2020

Published in International Journal of Dynamical Systems and Differential Equations (Search for Journal in Brave)

Full work available at URL https://doi.org/10.1504/IJDSDE.2018.089097

zbMATH Keywords

attackauthentication protocoldenial of serviceDenning-Saccoelliptic curve cryptographysecuritysession initiation protocol

Mathematics Subject Classification ID

Algebraic coding theory; cryptography (number-theoretic aspects) (11T71) Cryptography (94A60) Authentication, digital signatures and secret sharing (94A62)

Review text

Summary: Session initiation protocol (SIP) is the most popular signalling protocol used in order to establish, maintain and terminate multimedia sessions between different participants. Nowadays, the security of SIP is becoming more and more important. Authentication is the most important security service required for SIP. To provide secure communication, many SIP authentication schemes have been proposed. In [``An enhanced authenticated key agreement for session initiation protocol, Inf. Technol. Control. 42, No. 4 (2013; \url{doi:10.5755/j01.itc.42.4.2496})], \textit{M. S. Farash} and \textit{M. A. Attari} proposed a new SIP authentication protocol based on elliptic curve cryptography. They proved that their scheme is secured against different attacks. However, in this paper we show that Farash et al.'s protocol suffers from Denning-Sacco attacks and denial of service attacks. Moreover, we propose our solution to solve the problem. The security analysis shows that our proposed solution is more secure and can resist to various attacks.

Recommendations

• Robust and efficient authentication scheme for session initiation protocol
• An anonymous SIP authenticated key agreement protocol based on elliptic curve cryptography
• Designing attacks on SIP call set-up
• A Robust and Efficient SIP Authentication Scheme
• Quantum authentication and key agreement scheme for SIP protocol

Cited in

(5)

• An anonymous SIP authenticated key agreement protocol based on elliptic curve cryptography
• Mean-set attack: cryptanalysis of Sibert et al. authentication protocol
• A Robust and Efficient SIP Authentication Scheme
• Designing attacks on SIP call set-up
• A framework for protecting a SIP-based infrastructure against malformed message attacks

This page was built for publication: Cryptanalysis of Farash et al.'s SIP authentication protocol

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2289535)