Questions tagged [password-based-encryption]

Encryption using a key derived from a password or passphrase entered by the user.

10 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
0answers
70 views

Upgrading key derivation by adding a XOR with a known value

In general keys for password based key derivation are derived from a password hash such as the old PBKDF2 function or Argon2, possibly followed by another derivation function to derive data and ...
2
votes
0answers
59 views

Did “The Catena Password-Scrambling Framework” make an error in the reduction of its pseudorandomness?

I was reviewing the most recent version of the Catena paper and they made some claims that I find questionable in their reduction of the pseudorandomness of the output of Catena (p. 32). First I will ...
2
votes
0answers
114 views

SPAKE2 - Pairwise keys with multiple participants

With magic wormhole, I've discovered SPAKE(2) and I was wondering if it is possible to derive pairwise shared keys between multiple participants still using one password only. More precisely, amongst ...
1
vote
1answer
159 views

Hardware, Handheld Password Manager

I am currently working on a hardware project that will utilize the native USB and keyboard emulation capabilities of the Teensy device. Essentially, the user will store an encrypted password database ...
1
vote
0answers
206 views

An efficient SPEKE protocol with curve25519

SPEKE is a very simple and elegant PAKE protocol. I think, one of the reasons why PACE has been invented and is now the ICAO protocol, is because SPEKE was patented. Fortunately, the SPEKE patent ...
0
votes
0answers
23 views

What are some best practices to handle user password in shell script and environment variables?

I'm new to this community. Currently im working on a project which involves handling user password in shell script. Following steps describe my password consumption flow: Get password from user ...
0
votes
0answers
17 views

Using PIN to enable MFA for YubiKey-based logon provider

I've created a custom credential provider (for Windows) that allows logon just by inserting a YubiKey. The user's Windows password is protected as follows: ...
0
votes
0answers
31 views

Authenticating without sending password to the server, and store data encrypted with password derived key on server

I am trying to think of a scheme that would allow a user to authenticate to a server, whithout sending the password to the server, and to also derive a symetric key on the client (that also never gets ...
0
votes
2answers
241 views

How to validate a PBKDF2 password

I want to encrypt several files correctly with a PBKDF2 generated key (using a password and salt), I am currently doing so but if I enter the wrong password, as expected an exception occurs. Note: ...
0
votes
0answers
201 views

Encrypt/Decrypt cloud passwords with master password

I know it's generally bad to store password in the clouds, and that I should be using salted-hashed password only. I'm making an application that will authenticate a user (with salted-hash), and then ...