SaTC: TTP: Small: SPHINX: A Password Store that Perfectly Hides Passwords from Itself

口令管理器代表一种安全技术，该技术允许用户通过基于单个主口令与‘管理器’(例如，在线第三方服务)交互来存储和检索用于多个口令保护的网络服务的口令。然而，当前的密码管理器非常容易在管理器被泄露或恶意的情况下泄露所有密码。该项目构建、研究和部署了一种新的在线密码管理方法，称为Sphinx，即使密码管理器本身已被攻破，该方法仍保持安全。在Sphinx中，存储在管理器上的数据是理论上独立于用户主密码的信息，这意味着入侵管理器的攻击者不会了解有关主密码或用户个人密码的信息。Sphinx一旦部署，就可以为日常互联网用户提供更高级别的保护和可用性。这项研究正在与教育活动相结合，在认证和人机交互的广泛领域以高级课程开发和学生指导的形式进行。高中生和K-12学生以及少数民族的参与扩大了该项目的覆盖范围。与制造商和工业联盟的合作促进了技术转移和向现实世界使用的过渡。Sphinx的技术设计和安全基于设备增强型PAKE模型，该模型为这种构建提供了理论基础，并有安全的密码证明支持。总体而言，该项目设计、实施和评估了提供浏览器插件和服务端(或管理者端)应用程序的完整在线Sphinx系统的计算/通信性能。作为设计的一个主要组成部分，该项目突出并解决了在建立透明和稳健的经理-浏览器双向沟通方面的相关挑战。Sphinx系统的可用性研究也在实验室和现实生活环境中进行。此外，在根据可用性研究的结果改进系统软件和用户界面设计后，Sphinx将在外地环境中进行试点。在完成这一试点部署后，该系统将为最终在现实世界中进行全面部署做好准备。

Password managers represent a security technique that allows a user to store and retrieve passwords for multiple password-protected web services by interacting with a 'manager' (e.g., an online third-party service) on the basis of a single master password. However, current password managers are highly vulnerable to leakage of all passwords in the event the manager is compromised or malicious. This project builds, studies, and deploys a novel approach to online password management, called SPHINX, which remains secure even when the password manager itself has been compromised. In SPHINX, the data stored on the manager is information theoretically independent of the user's master password, meaning that an attacker breaking into the manager learns no information about the master password or the user's individual passwords. SPHINX, once deployed, offers an improved level of protection and usability to everyday Internet users. The research is being integrated with educational activities in the form of advanced curriculum development and student mentoring in the broad domains of Authentication and Human-Computer Interaction. The involvement of high school and K-12 students, and minority populations broadens the reach of the project. Collaboration with manufacturers and industrial consortia facilitatws technology transfer and transition to real world use.The technical design and security of SPHINX is based on the device-enhanced PAKE model that provides the theoretical basis for this construction and is backed by cryptographic proofs of security. Overall, the project designs, implements and evaluates the computational/communication performance of a full online SPHINX system offering browser plugins and a service-side (or manager-side) application. As a main component of the design, the project highlights and addresses the challenges associated in building transparent and robust bidirectional manager-browser communication. Usability studies of the SPHINX system are also being conducted in both lab and real-life settings. Further, after refining the system software and UI designs informed by the results of the usability studies, SPHINX will be piloted in the field settings. Upon completion of this pilot deployment, the system will be ready for an eventual full-fledged deployment in the real world.