Optimizing a password hashing function with hardware-accelerated symmetric encryption

DOI10.3390/SYM10120705MaRDI QIDQ2337862zbMATH OpenOpenAlexWikidataFDO

Authors Rafael Álvarez, Alicia Andrade, Antonio Zamora

Publication date 20 November 2019

Published in Symmetry (Search for Journal in Brave)

Copyright license Creative Commons Attribution 4.0 International

Full work available at URL https://doi.org/10.3390/sym10120705

zbMATH Keywords

cryptographyencryptionhashpasswordPBKDFsymmetric

Mathematics Subject Classification ID

Data encryption (aspects in computer science) (68P25) Cryptography (94A60) Authentication, digital signatures and secret sharing (94A62)

Review text

Summary: Password-based key derivation functions (PBKDFs) are commonly used to transform user passwords into keys for symmetric encryption, as well as for user authentication, password hashing, and preventing attacks based on custom hardware. We propose two optimized alternatives that enhance the performance of a previously published PBKDF. This design is based on (1) employing a symmetric cipher, the Advanced Encryption Standard (AES), as a pseudo-random generator and (2) taking advantage of the support for the hardware acceleration for AES that is available on many common platforms in order to mitigate common attacks to password-based user authentication systems. We also analyze their security characteristics, establishing that they are equivalent to the security of the core primitive (AES), and we compare their performance with well-known PBKDF algorithms, such as Scrypt and Argon2, with favorable results.

Recommendations

• Rig: a simple, secure and flexible design for password hashing
• Topics in Cryptology – CT-RSA 2005
• Design and Analysis of Password-Based Key Derivation Functions
• VLSI design and implementation of combined secure hash algorithm SHA-512
• Constructing chaos-based hash function via parallel impulse perturbation

Cites work

• A cryptanalytic time-memory trade-off
• scientific article; zbMATH DE number 1682693 (Why is no real title available?)
• Improved asymmetric cipher based on matrix power function with provable security
• Lattice-based revocable certificateless signature
• Lyra2: Efficient Password Hashing with High Security against Time-Memory Trade-Offs
• Memory-demanding password scrambling
• On the Indifferentiability of the Sponge Construction
• Simple authenticated key agreement and protected password change protocol
• Two-round password-only authenticated key exchange in the three-party setting

Cited in

(1)

• Lyra2: Efficient Password Hashing with High Security against Time-Memory Trade-Offs

This page was built for publication: Optimizing a password hashing function with hardware-accelerated symmetric encryption

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2337862)