Guillou-quisquater protocol for user authentication based on zero knowledge proof

Abstract

Authentication is the act of confirming the validity of someone's personal data. In the traditional authentication system, username and password are sent to the server for verification. However, this scheme is not secure, because the password can be sniffed. In addition, the server will keep the user's password for the authentication. This makes the system vulnerable when the database server is hacked. Zero knowledge authentication allows server to authenticate user without knowing the user's password. In this research, this scheme was implemented with Guillou-Quisquater protocol. Two login mechanisms were used: file-based certificate with key and local storage. Testing phase was carried out based on the Open Web Application Security Project (OWASP) penetration testing scheme. Furthermore, penetration testing was also performed by an expert based on Acunetix report. Three potential vulnerabilities were found and risk estimation was calculated. According to OWASP risk rating, these vulnerabilities were at the medium level.

Java Script Data Transformation Library using Fork Join Pool and Web Workers Technology

“…The testing of the grade calculation website was carried out using Equation 1. The testing of cryptographic websites was carried out using CryptoJs library with three popular encryption methods, namely Advanced Encryption Standard (AES), Secure Hash Algorithms 384 (SHA384), and SHA512 [27,28]. The trial was conducted to determine whether the ForkJoinPool method implementation uses Web Workers technology in JavaScript as a data transformation library affecting the speed of data transformation.…”

Developing “friend or foe” protocol in residue number system code for satellite authentication

“…In [10], a new authentication scheme based on the Fiat-Shamir protocol was developed for the exchange of confidential information in the Internet of Things technology. The works [11,12] show the application of the Feige-Fiat-Shamir authentication protocol for machine authentication in the integration of external networks and the Internet of vehicles (IoV). However, these protocols cannot be used in a friend or foe system for satellites since the identification process requires 20 to 40 times of authentication.…”

Comparative Analysis of Modifications of the Fiat – Shamir and Guillou – Quisquater Authentication Protocols Implemented in the Codes of the Residue Number System

“…В работах [6,7] представлен протокол аутентификации Гиллоу -Куискуотера, который также относится к протоколам с нулевым разглашением знаний. Проведем его модификацию в модулярном коде СОК.…”