0
$\begingroup$

I am looking for an authentication mechanism that works best with low memory, low computing power devices. I came across a paper "A Practical Zero-Knowledge Protocol Fitted to Security Microprocessor Minimizing Both Transmission and Memory" which is released in 1988.

Couldnt find any recent papers. Is it the best one or am I missing some ?

UPDATE:

I have a case where I have few processors connected to a gateway processors. I can send upto 64 bits of data at a time. Computing power is low in the sense that I cant employ something like AES-128 algorithm in all chips. I also need to minimize the number of bits of data send for authentication

$\endgroup$
2
  • 1
    $\begingroup$ You might want to add some more details to your question. For instance, who/what do you want to authenticate to whom, what kind of keys/passwords/tokens do they share, what kind of processor are you talking about ("low" can be relative), and what kind of attack scenarios are you expecting? $\endgroup$ Dec 17, 2013 at 1:15
  • 1
    $\begingroup$ If you can't even do AES at all, I'm not sure how you think you're going to implement any kind of zero-knowledge proof. There's very little practical crypto you can do with devices that limited. (Then again, it's also possible that you're just underestimating the performance of your processors; even many smart cards can do AES nowadays.) $\endgroup$ Dec 17, 2013 at 2:40

1 Answer 1

2
$\begingroup$

SRP doesn't require very much memory, has a low transmission cost (4 packets), and its CPU usage isn't very high (less than 1 second on a low-end 32-bit CPU, but higher on something like an 8-bit CPU).

http://en.wikipedia.org/wiki/Secure_Remote_Password_protocol

$\endgroup$
1
  • $\begingroup$ @skillzeo I cant use this since it require computation at both parties and have to send messages between them many times $\endgroup$
    – user5507
    Dec 17, 2013 at 1:39

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.