Everything about Password Authentication Protocol

🧭 Start here: a 6-step reading path

1. Read the overview: Password Authentication ProtocolA 5-minute orientation
2. Skim a recent paper: A password less authentication protocol for multi-server environment using physical unclonable functionInfluential work since 2022
3. Pick up a classic book: Invitation to Computer ScienceThe most-reprinted book on the subject
4. Read the landmark paper: Advanced smart card based password authentication protocolCited 200 times
5. Go sideways: Challenge-Handshake Authentication ProtocolA closely related topic
6. Go sideways: RADIUSA closely related topic

🏆 Landmark papers (most cited)

• Advanced smart card based password authentication protocol

  Ronggong Song · 2010 · Computer Standards & Interfaces · 200 citations

• oPass: A User Authentication Protocol Resistant to Password Stealing and Password Reuse Attacks

  Hung-Min Sun, Yao-Hsin Chen, Yue-Hsun Lin · 2012 · IEEE Transactions on Information Forensics and Security · 94 citations

• An untraceable and anonymous password authentication protocol for heterogeneous wireless sensor networks

  Ruhul Amin, S.K. Hafizul Islam, Neeraj Kumar · 2018 · Journal of Network and Computer Applications · 69 citations

• Lightweight and Secure Password Based Smart Home Authentication Protocol: LSP-SHAP

  Sarra Naoui, Mohamed Elhoucine Elhdhili, Leila Azouz Saidane · 2019 · Journal of Network and Systems Management · 41 citations

• Security enhancement for Optimal Strong-Password Authentication protocol

  Chih-Wei Lin, Jau-Ji Shen, Min-Shiang Hwang · 2003 · ACM SIGOPS Operating Systems Review · 29 citations

• Security analysis of a password-based authentication protocol proposed to IEEE 1363

  Zhu Zhao, Zhongqi Dong, Yongge Wang · 2006 · Theoretical Computer Science · 29 citations

• A lightweight password‐based authentication protocol using smart card

  Chenyu Wang, Ding Wang, Guoai Xu · 2017 · International Journal of Communication Systems · 22 citations

• Off-line password-guessing attack to Peyravian–Jeffries’s remote user authentication protocol

  J. Munilla, A. Peinado · 2006 · Computer Communications · 16 citations

🆕 Influential since 2022

• A password less authentication protocol for multi-server environment using physical unclonable function

  E. Praveen Kumar, S. Priyanka · 2023 · The Journal of Supercomputing · 14 citations

• Three-Party Password Authentication and Key Exchange Protocol Based on MLWE

  Songhui Guo, Yunfan Song, Song Guo · 2023 · Symmetry · 13 citations

• K-PAKE: post quantum password authentication key exchange protocol for satellite networks

  Yatao Yang, Ruoyan Zhao, Fangrui Yin · 2025 · Cluster Computing · 4 citations

• DssP: Efficient Dual-Server Secret Sharing Protocol Based on Password Authentication for Cloud Storage Services

  Songsong Zhang, Xie Yong, Min Luo · 2022 · IEEE Systems Journal · 3 citations

• A Novel High-Efficiency Password Authentication and Key Agreement Protocol for Mobile Client-Server

  Xiang Xu, Yu Wang, Xue-Dian Zhang · 2023 · Security and Communication Networks · 1 citations

📚 Books worth reading

• Invitation to Computer ScienceG. Michael Schneider, Judith L. Gersting · 1995
• The web application hacker's handbookDafydd Stuttard, Marcus Pinto · 2007
• Information Security and PrivacyColin Boyd · 2005
• The basics of information securityJason Andress · 2011
• Security Protocols XXBruce Christianson · 2012
• Cryptography and network securityWilliam Stallings · 2006
• 📕Everyday CryptographyKeith M. Martin · 2012
• Information and Communications SecurityTat Wing Chim · 2012

Ranked by number of editions on Open Library, a rough measure of how lasting a book is.

🔗 Related topics

• Challenge-Handshake Authentication Protocol In computing, the Challenge-Handshake Authentication Protocol (CHAP) is an authentication protocol originally used by Point-to-Point Protocol (PPP) to…
• RADIUS Remote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized authentication, authorization, and accounting (AAA)…
• Authentication protocol An authentication protocol is a type of computer communications protocol or cryptographic protocol specifically designed for transfer of authentication…
• Extensible Authentication Protocol Extensible Authentication Protocol (EAP) is an authentication framework frequently used in network and internet connections. It is defined in RFC 3748…
• Point-to-Point Tunneling Protocol The Point-to-Point Tunneling Protocol (PPTP) is an obsolete method for implementing virtual private networks. PPTP has many well known security issues…
• Salted Challenge Response Authentication Mechanism In cryptography, the Salted Challenge Response Authentication Mechanism (SCRAM) is a family of modern, password-based challenge–response authentication…
• Transport Layer Security Transport Layer Security (TLS) is a cryptographic protocol designed to provide secured communications over a computer network, such as the Internet. The…
• CRAM-MD5 In cryptography, CRAM-MD5 is a challenge–response authentication mechanism (CRAM) based on the HMAC-MD5 algorithm. As one of the mechanisms supported by…