Abstract:A significant percentage of security research that is conducted suffers from common issues that prevent wide-scale adoption. Common snags of such proposed methods tend to include (i) introduction of additional nodes within the communication architecture, breaking the simplicity of the typical client-server model, or fundamental restructuring of the Internet ecosystem; (ii) significant inflation of responsibilities or duties for the user and/or server operator; and (iii) adding increased risks surrounding sensitive data during the authentication process. Many schemes seek to prevent brute-forcing attacks; they often ignore either partially or holistically the dangers of other cyber-attacks such as MiTM or replay attacks. Therefore, there is no incentive to implement such proposals, and it has become the norm instead to inflate current username/password authentication systems. These have remained standard within client-server authentication paradigms, despite insecurities stemming from poor user and server operator practices, and vulnerabilities to interception and masquerades. Besides these vulnerabilities, systems which revolve around secure authentication typically present exploits of two categories; either pitfalls which allow MiTM or replay attacks due to transmitting data for authentication constantly, or the storage of sensitive information leading to highly specific methods of data storage or facilitation, increasing chances of human error. This paper proposes a more secure method of authentication that retains the current structure of accepted paradigms, but minimizes vulnerabilities which result from the process, and does not inflate responsibilities for users or server operators. The proposed scheme uses a hybrid, layered encryption technique alongside a two-part verification process, and provides dynamic protection against interception-based cyber-attacks such as replay or MiTM attacks, without creating additional vulnerabilities for other attacks such as bruteforcing. Results show the proposed mechanism outperforms not only standardized methods, but also other schemes in terms of deployability, exploit resilience, and speed.

ZLR: a fast online authenticated encryption scheme achieving full security

At Least Factor-of-Two Optimization for RWLE-Based Homomorphic Encryption

A Lightweight and Efficient Secure Hybrid RSA (SHRSA) Messaging Scheme with Four-Layered Authentication Stack

Construction and security analysis of hash algorithm based on stream cipher

Efficient Implementation of Ring-LWE Encryption on High-End IoT Platform

Leakage-Resilient Anonymous Heterogeneous Multi-Receiver Hybrid Encryption in Heterogeneous Public-Key System Settings

A Scheme to resist Fast Correlation Attack for Word Oriented LFSR based Stream Cipher

A Novel Revocable Lightweight Authentication Scheme for Resource-Constrained Devices in Cyber–Physical Power Systems

Identity-Concealed Authenticated Encryption from Ring Learning with Errors

Identity-based Online/offline Signcryption for Low Power Devices

Offline/online Attribute‐based Encryption with Verifiable Outsourced Decryption

Permutation-Based Tweakable On-line Cipher with Improved Security Guarantees

A Hybrid Dynamic Encryption Scheme for Multi-Factor Verification: A Novel Paradigm for Remote Authentication

On the provable security of BEAR and LION schemes

Post-Quantum Secure Remote Password Protocol from RLWE Problem.

RECTANGLE: a Bit-Slice Lightweight Block Cipher Suitable for Multiple Platforms

Attribute-Based Online/Offline Encryption with Outsourcing Decryption.

Tight Leakage-Resilient CCA-Security from Quasi-Adaptive Hash Proof System

Provably Secure Password Authenticated Key Exchange Based On Rlwe For The Post-Quantum World

Lower rounds lattice-based anonymous AKA under the seCK model for the IoT

Non-interactive zero-knowledge proof scheme from RLWE-based key exchange