Formal Analysis and Improvement of Zero-Knowledge Password Authentication Protocol
Ikhwanul Hakim Masri, Sepha Siswantyo, Syafira Mardhiyah · 2022
The Internet as a communication medium has become a common thing in society. Communicating via the Internet requires a communication service where users are obliged to have an account. The login process to an account usually uses a password authentication protocol that is not provably secure. Datta offers Zero-Knowledge Password Authentication Protocol, an alternative protocol claimed to be safer. We conducted a formal analysis of the protocol proposed by Datta using Scyther tool and later found an attack compromising the security of the protocol i.e., man-in-the-middle attack. Furthermore, we modified Datta's protocol to cope with this attack.