Remote password authentication scheme based on cross-product

A remote password authentication scheme based on cross-product is proposed in this paper. In this scheme, any legal user can freely choose his own pas sword in the card initialization phase. Using his password and smart card, he san then log into the system successfully. According to the analysis, in truders can not obtain any secret information from the public information o r transmitted messages and impersonate another legal user. In addition, thi s scheme can withstand the attack of replaying previously intercepted log-i n requests. The amount of computation in this scheme is smaller than that i n Chang and Hwang's scheme [Using smart cards to authenticate remote passwo rds, Comp. Math. Applic. 26(7) (1993) 19-27]. (C) 1999 Elsevier Science B.V . All rights reserved.