research and an open problem contradictory to their security claims because 3.3 Forward Secrecy We suppose that user Ui previous login request {ID, M3, .