PALPAS - PAssword Less PAssword synchronization

M. Horsch, A.T. Hülsing, J. Buchmann

Onderzoeksoutput: Hoofdstuk in Boek/Rapport/CongresprocedureConferentiebijdrageAcademicpeer review

1 Citaat (Scopus)

Samenvatting

Tools that synchronize passwords over several user devices typically store the encrypted passwords in a central online database. For encryption, a low-entropy, password-based key is used. Such a database may be subject to unauthorized access which can lead to the disclosure of all passwords by an offline brute-force attack. In this paper, we present PALPAS, a secure and user-friendly tool that synchronizes passwords between user devices without storing information about them centrally. The idea of PALPAS is to generate a password from a high entropy secret shared by all devices and a random salt value for each service. Only the salt values are stored on a server but not the secret. The salt enables the user devices to generate the same password but is statistically independent of the password. In order for PALPAS to generate passwords according to different password policies, we also present a mechanism that automatically retrieves and processes the password requirements of services. PALPAS users need to only memorize a single password and the setup of PALPAS on a further device demands only a one-time transfer of few static data.

Originele taal-2Engels
TitelProceedings - 10th International Conference on Availability, Reliability and Security, ARES 2015
Plaats van productiePiscataway
UitgeverijInstitute of Electrical and Electronics Engineers
Pagina's30-39
Aantal pagina's10
ISBN van elektronische versie978-1-4673-6590-1
DOI's
StatusGepubliceerd - 16 okt 2015
Evenement10th International Conference on Availability, Reliability and Security, ARES 2015 - Toulouse, Frankrijk
Duur: 24 aug 201527 aug 2015

Congres

Congres10th International Conference on Availability, Reliability and Security, ARES 2015
LandFrankrijk
StadToulouse
Periode24/08/1527/08/15

    Vingerafdruk

Citeer dit

Horsch, M., Hülsing, A. T., & Buchmann, J. (2015). PALPAS - PAssword Less PAssword synchronization. In Proceedings - 10th International Conference on Availability, Reliability and Security, ARES 2015 (blz. 30-39). [7299896] Piscataway: Institute of Electrical and Electronics Engineers. https://doi.org/10.1109/ARES.2015.23