基于服务器随机数异或的短口令方案OA

In order to strengthen the usability and security of passwords,a short password scheme,XO-Red with server random numbers,is proposed.In this scheme,a password is formed by XOR operation of a user password and a server password.The user password is short for ease of use.The server pass-word is encrypted,and an additional secure system is introduced to store the secret key and provide en-cryption and decryption services.Computationally unbounded attackers cannot succeed in offline at-tacks,this scheme is better than existing password schemes in preventing password guessing attacks.