Cryptology ePrint Archive: Report 2010/464

Weaknesses of SIP Authentication Scheme for Converged VoIP Networks

Q. Pu

Abstract: The Session Initiation Protocol (SIP) is commonly used to establish Voice over IP (VoIP) calls. Mostly recently, Yoon et al. proposed an efficient SIP authentication scheme in a converged VoIP network based on elliptic curve cryptosystem (ECC) [E-J. Yoon, K-Y. Yoo, C. Kim, Y-S. Hong, M. Jo, H-H. Chen, A Secure and Efficient SIP Authentication Scheme for Converged VoIP Networks, Computer Communications (2010), doi: 10.1016/j.comcom. 2010.03.026.]. In this letter, we first demonstrate that it is insecure against off-line password guessing attack.

Category / Keywords: cryptographic protocols / Voice over Internet Protocol; Session Initial Protocol; elliptic curve; authentication.

Date: received 2 Sep 2010, last revised 9 Sep 2010, withdrawn 17 Sep 2010

Contact author: monkey_joan at sina com cn

Available format(s): (-- withdrawn --)

Version: 20100917:111224 (All versions of this report)

Short URL:

[ Cryptology ePrint archive ]