Comment on 'ElGamal cryptosystem‐based secure authentication system for cloud‐based IoT applications'. Issue 5 (23rd February 2021)

• Record Type: Journal Article
• Authors: Irshad, Azeem; Chaudhry, Shehzad Ashraf
• Is Part Of: IET networks. Volume 10:Issue 5(2021)
• Page Start: 244
• Page End: 245
• Publication Date: 2021-02-23
• Subjects: Computer network architectures -- Periodicals; Computer network protocols -- Periodicals; Information networks -- Periodicals; Telecommunication systems -- Periodicals; 004.605
• DOI: 10.1049/ntw2.12014
• Languages: English
• ISSNs: 2047-4954

Abstract

Abstract: This comment is presented to identify the drawbacks in a recently demonstrated scheme by Maitra et al., SAS‐Cloud: doi:10.1049/iet-net.2019.0004, which adopted an ElGamal cryptosystem‐based technique for biometric authentication in cloud‐based IoT applications. In this protocol, the authors claim that their scheme provides mutual authentication. However, it is demonstrated in this article that the protocol merely supports unilateral authentication, which may result in clogging attack on the server's end. This is because the latter is unable to verify the authentication request in absolute terms, which might lead to resource clogging as well as denial of service attack affecting its Quality of Service (QoS).