Cryptanalysis of Remote Data Integrity Checking Protocol Proposed by L. Chen for Cloud Storage
Shaojing Fu, Dongsheng Wang, Ming Xu, Jiangchun Ren · IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences · 2013
Remote data possession checking for cloud storage is very important, since data owners can check the integrity of outsourced data without downloading a copy to their local computers. In a previous work, Chen proposed a remote data possession checking protocol using algebraic signature and showed that it can resist against various known attacks. In this paper, we find serious security flaws in Chen's protocol, and shows that it is vulnerable to replay attack by a malicious cloud server. Finally, we propose an improved version of the protocol to guarantee secure data storage for data owners.