Secure Password Authentication for Distributed Computing

This paper describes secure password-based authentication involving a trusted third party, while the previous secure password authentication schemes focused on authentication involving two parties who shares the password. Kerberos is a well-known password-based authentication protocol involving a trusted third party. However, Kerberos is weak against the dictionary attack and suffers from a single point of failure. Additionally, Kerberos cannot provide a forward secrecy, which protects past sessions and further compromise, when a password is revealed. Our password authentication schemes provides single sign on like Kerberos and is secure against on/off-line dictionary attack. Moreover, the schemes provide a forward secrecy, and reduces the damage of the single point of failure