Reference : HoneyPAKEs

	Document type :	Scientific congresses, symposiums and conference proceedings : Paper published in a book
	Discipline(s) :	Engineering, computing & technology : Computer science
	Focus Areas :	Security, Reliability and Trust
	To cite this reference:	http://hdl.handle.net/10993/37937

Title :	HoneyPAKEs
Language :	English
Author, co-author :	Lopez Becerra, José Miguel [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
	Roenne, Peter [University of Luxembourg > Interdisciplinary Centre for Security, Reliability and Trust (SNT) > >]
	Ryan, Peter [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) >]
	Sala, Petra [University of Luxembourg > Faculty of Science, Technology and Communication (FSTC) > Computer Science and Communications Research Unit (CSC) >]
Publication date :	27-Nov-2018
Main document title :	Security Protocols XXVI: Lecture Notes in Computer Science
Publisher :	Springer International Publishing
Pages :	63-77
Peer reviewed :	Yes
On invitation :	Yes
Audience :	International
ISBN :	978-3-030-03251-7
Event name :	Security Protocols XXVI: 26th International Workshop
Event date :	from 19-03-2018 to 21-03-2018
Event place (city) :	Cambridge
Event country :	UK
Keywords :	[en] PAKEs ; Honeywords ; passwords ; login ; authentication
Abstract :	[en] We combine two security mechanisms: using a Password-based Authenticated Key Establishment (PAKE) protocol to protect the password for access control and the Honeywords construction of Juels and Rivest to detect loss of password files. The resulting construction combines the properties of both mechanisms: ensuring that the password is intrinsically protected by the PAKE protocol during transmission and the Honeywords mechanisms for detecting attempts to exploit a compromised password file. Our constructions lead very naturally to two factor type protocols. An enhanced version of our protocol further provides protection against a compromised login server by ensuring that it does not learn the index to the true password.
Research centres :	Interdisciplinary Centre for Security, Reliability and Trust (SnT) > Applied Security and Information Assurance Group (APSIA)
Funders :	Fonds National de la Recherche - FnR
Target :	Researchers ; Professionals ; Students
Permalink :	http://hdl.handle.net/10993/37937
Other URL :	https://www.springer.com/gp/book/9783030032500#aboutBook
FnR project :	FnR ; FNR8293135 > Peter Y. A. Ryan > AToMS > A Theory of Matching Sessions > 01/05/2015 > 30/04/2018 > 2014

	File(s) associated to this reference
	Fulltext file(s): File Commentary Version Size Access Open access 2.1-ryan.pdf Publisher postprint 314.03 kB View/Open

All documents in ORBi^lu are protected by a user license.

 

University of Luxembourg Library |  Feedback |  Legal notices Site Map