Efficient OTP(One Time Password) Generation using AES-based MAC

  • Park, Soon-Dong (Division of Electronics and Computer Engineering, Hanyang University) ;
  • Na, Joong-Chae (Department of Computer Science and Engineering, Sejong University) ;
  • Kim, Young-Hwan (Cluem Co. Ltd.) ;
  • Kim, Dong-Kyue (Division of Electronics and Computer Engineering, Hanyang University)
  • Published : 2008.06.30

Abstract

The ID/password method is the most classical method among authentication techniques on the internet, and is performed more easily and successfully than other methods. However, it is a vulnerable method against attacks such as eavesdropping or replay attack. To overcome this problem, OTP technique is used. The most popular OTP is HOTP algorithm, which is based on one-way hash function SHA-1. As recent researches show the weakness of the hash function, we need a new algorithm to replace HOTP. In this paper we propose a new OTP algorithm using the MAC(Message Authentication Code) based on AES. We also show that the new OTP outperforms HOTP experimentally.

Keywords