A hidden-password online password manager
A hidden-password online password manager
复制标题
隐藏密码在线密码管理器
DOI:
10.1145/3412841.3442131
复制
发表时间:
2021
期刊:
影响因子:
--
通讯作者:
Krawczyk, Hugo
中科院分区:
文献类型:
--
作者:
Shirvanian, Maliheh;Price, Christopher Robert;Jubur, Mohammed;Saxena, Nitesh;Jarecki, Stanislaw;Krawczyk, Hugo
The most commonly adopted password management technique is to store web account passwords on a password manager and lock them using a master password. However, current online password managers do not hide the account passwords or the master password from the password manager itself, which highlights their real-world vulnerability and lack of user confidence in the face of malicious insiders and outsiders that compromise the password management service especially given its online nature. We attempt to address this crucial vulnerability in the design of online password managers by proposing HIPPO, a cloud-based password manager that does not learn or store master passwords and account passwords. HIPPO is based on the cryptographic notion of device-enhanced password authenticated key exchange proven by Jarecki et al. to resist online guessing attacks and dictionary attacks. We introduce the HIPPO protocol design and report on a full implementation of the system.
DOI:
--
发表时间:
2017
期刊:
IEEE International Conference on Distributed Computing Systems
影响因子:
--
作者:
Maliheh Shirvanian;Stanislaw Jarecki;H. Krawczyk;Nitesh Saxena
通讯作者:
Nitesh Saxena
DOI:
--
发表时间:
2016
期刊:
影响因子:
--
作者:
Nora Alkaldi;K. Renaud
通讯作者:
K. Renaud
DOI:
10.14722/usec.2014.23025
发表时间:
2013
期刊:
IACR Cryptol. ePrint Arch.
影响因子:
--
作者:
Emiliano De Cristofaro;Honglu Du;Julien Freudiger;Gregory Norcie
通讯作者:
Gregory Norcie