Provably secure identity-based remote password registration

Abstract

One of the most significant challenges is the secure user authentication. If it becomes breached, confidentiality and integrity of the data or services may be compromised. The most widespread solution for entity authentication is the passwordbased scheme. It is easy to use and deploy. During password registration typically users create or activate their account along with their password through their verification email, and service providers are authenticated based on their Secure Sockets Layer / Transport Layer Security (SSL/TLS) certificate. We propose a certificate-less secure blind registration protocol (CLS-BPR) which is a password registration scheme based on identity-based cryptography, i.e., both the user and the service provider are authenticated by their short-lived identity-based secret key. For secure storage a bilinear map with a salt is applied, therefore in case of an offline attack the adversary is forced to calculate a computationally expensive bilinear map for each password candidate and salt that slows down the attack. New adversarial model with new secure password registration scheme are introduced. We show that the proposed protocol is based on the assumptions that solving the Bilinear Diffie-Hellman problem is computationally infeasible, the bilinear map is a one-way function, Mac is existentially unforgeable under an adaptive chosen-message attack, where the bilinear map is considered in the generic bilinear group model and the hash functions are supposed as random oracles.

Development of an improved SSL/TLS protocol using post-quantum algorithms

“…However, given the rapid development of computing capabilities, the total accuracy reaches 89.25 %, which does not allow timely response to targeted threats. In order to provide the authenticity service, it is proposed in [13] to use a secure blind registration protocol without certificates (Cumulative Layout Shift, CLS-BPR) instead of certificates transmitted based on the SSL/TLS protocol. This protocol is a password registration scheme based on identity-based cryptography, i.e.…”

“…SSL cryptographic protocols and TLS transport layer security provide data encryption and authentication between various homogeneous and heterogeneous devices such as servers, computers and software applications running across the network. In smart technologies, the use of the SSL/TLS protocol stack is integrated with blockchain technology, as well as with the EDS Elliptic Curve Digital Signature Algorithm (ECDSA) based on elliptic curves, which will ensure system security until the post-quantum period [3,10,[12][13][14][15][16]. However, the use of such an approach is associated with an increase in the energy intensity of the protocol and the need to take into account the hardware characteristics of the physical environment of cyber-physical systems [3,7,9].…”