A note on ``SCPUAK: smart card-based secure protocol for remote user authentication and key agreement''

ePrint Report: A note on ``SCPUAK: smart card-based secure protocol for remote user authentication and key agreement''

Zhengjun Cao, Lihua Liu

We show that the Cherbal-Benchetioui key agreement scheme [Comput. Electr. Eng., 109, 108759 (2023)] fails to keep user anonymity, not as claimed. The scheme simply thinks that user anonymity is equivalent to protecting the user's real identity. But the true anonymity means that the adversary cannot attribute different sessions to target entities, which relates to entity-distinguishable, not just identity-revealable.

anonymity authentication card eng eprint report key protocol report smart smart card