The strong-password based authentication mechanism is an important development direction of authentication.In this paper we examine OSPA(Optimal Strong-Password Authentication)
a recent solution to authentication
and attack it using composite attack which is put forward firstly.The results of attacks demonstrate OSPA is vulnerable to stolen-verifier