ijcisjournal

Joseph Kilcullen  Moylurg, Foxford Road, Ballina, Co. Mayo, F26 D9D2, Ireland.  ABSTRACT  The current implementation of TLS involves your browser displaying a padlock, and a green bar, after successfully verifying the digital signature on the TLS certificate. Proposed is a solution where your browser's response to successful verification of a TLS certificate is to display a login window. That login window displays the identity credentials from the TLS certificate, to allow the user to authenticate Bob. It also displays a 'user-browser' shared secret i.e. a specific picture from your hard disk. This is not SiteKey, the image is shared between the computer user and their browser. It is never transmitted over the internet. Since sandboxed websites cannot access your hard disk this image cannot be counterfeited by phishing websites. Basically if you view the installed software component of your browser as an actor in the cryptography protocol, then the solution to ...

Rahul Krishnan  Mass Academy of Math and Science 85 Prescott Street, Worcester, MA 99999, USA  ABSTRACT  In an increasingly connected world, security is a top concern for Internet of Things (IoT). These IoT devices have to be inexpensive implying that they will be constrained in storage and computing resources. In order to secure such devices, highly efficient public key cryptosystems (PKC) are critical. Elliptic Curve Cryptography (ECC) is the most commonly implemented PKC in use today. In this paper, an alternate and a more efficient PKC, called the PEC (Pells Equation Cryptography) has been proposed based on Pells equation: x 2 − D ∗ y 2 ≡ 1 (mod p). It is shown that scalar multiplication in PEC is significantly more efficient compared to ECC. It is also shown that the Discrete Logarithm Problem - computing the private key from the public key - in PEC is at least as hard as that of ECC.  KEYWORDS Public Key Cryptography, Elliptic Curve Cryptography,...

CRYPTANALYSIS AND ENHANCEMENT OF PASSWORD AUTHENTICATION SCHEME FOR SMART CARD Raphael Nyirongo1 , Solomon Kuonga1 , Patrick Ali1 , Levis Eneya1 and Hyunsung Kim1,2 1Mathematical Sciences Department, University of Malawi, Chancellor College, Zomba, Malawi 2 (Corresponding Author) Department of Cyber Security, Kyungil University, Kyungbuk, Korea ABSTRACT  Password authentication with smart card is one of the simplest and efficient authentication mechanisms to ensure secure communication over insecure network environments. Recently, Tsai et al. proposed an improved password authentication scheme for smart card. Their scheme is more secure than the other previous schemes. In this paper, we show Tsai et al.’s scheme is vulnerable to password guessing attack and has computational overhead. Furthermore, we propose an enhanced password authentication scheme to eliminate the security vulnerability and enhance the overhead. By presenting concrete analysis of security and perf...