Cryptology ePrint Archive: Report 2012/115

Cryptanalysis of auditing protocol proposed by Wang et al. for data storage security in Cloud Computing

XU Chun-xiang and HE Xiao-hu and Daniel Abraha

Abstract: Cloud Computing as the on-demand and remote provision of computational resources has been eagerly waited for a long time as a computing utility. It helps users to store their data in the cloud and enjoy the high quality service. However, users do not have physical possession on their own data, hence it is indispensable to create mechanisms on how to protect the security of the data stored. Thus, some auditing protocols are introduced to ensure authenticity and integrity of the outsourced data. Wang et al. proposed a public auditing protocol in 2010 and argued that it can resist against various known attacks. In this paper, we analyze the protocol and find serious security flaws in their protocol. Our analysis shows that the public auditing scheme proposed by Wang et al. can not resist against existential forgery using a known message attack. Moreover, we show that the protocol is vulnerable to attacks by a malicious cloud server and an outside attacker through four specific attacking schemes. The results show that the protocol can not provide secure data storage for users.

Category / Keywords: cryptographic protocols / Cloud Computing, public auditing, secure data storage

Date: received 1 Mar 2012

Contact author: hh2870714 at 163 com

Available formats: PDF | BibTeX Citation

Version: 20120304:081604 (All versions of this report)

Discussion forum: Show discussion | Start new discussion