Abstract:Using the computational resources of an untrusted third party to crack a password hash can pose a high number of privacy and security risks. The act of revealing the hash digest could in itself negatively impact both the data subject who created the password, and the data controller who stores the hash digest. This paper solves this currently open problem by presenting a Privacy-Preserving Password Cracking protocol (3PC), that prevents the third party cracking server from learning any useful information about the hash digest, or the recovered cleartext. This is achieved by a tailored anonymity set of decoy hashes, based on the concept of predicate encryption, where we extend the definition of a predicate function, to evaluate the output of a one way hash function. The probabilistic information the server obtains during the cracking process can be calculated and minimized to a desired level. While in theory, cracking more hashes would introduce additional overhead, the 3PC protocol enables constant-time lookup regardless of the list size, limited by the input/output operation per second (IOPS) capabilities of the third-party server, allowing the protocol to scale efficiently. We demonstrate these claims both theoretically and in practice, with a real-life use case implemented on an FPGA architecture.

Password Recovery On Challenge And Response: Impossible Differential Attack On Hash Function

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

Amogap: Defending Against Man-In-The-Middle And Offline Guessing Attacks On Passwords

Multi-Factor Credential Hashing for Asymmetric Brute-Force Attack Resistance

Cryptanalysis of the Hash Functions MD4 and RIPEMD

Privacy-Preserving Password Cracking: How a Third Party Can Crack Our Password Hash Without Learning the Hash Value or the Cleartext

Cryptanalysis Of Midori128 Using Impossible Differential Techniques

A DYNAMIC PASSWORD AUTHENTICATION FOR REMOTE USERS IN INSECURE CHANNEL

Differential Power Analysis on Dynamic Password Token Based on SM3 Algorithm, and Countermeasures

How to Break MD5 and Other Hash Functions

The second-preimage attack on MD4

On the Security of Some Password Authentication Protocols.

The weak password problem: chaos, criticality, and encrypted p-CAPTCHAs

Cryptanalysis on Four Two-Party Authentication Protocols

Multi-Collision Attack On The Compression Functions Of Md4 And 3-Pass Haval

A Differential Power Analysis Attack on Dynamic Password Token Based on SM3 Algorithm

A practical forgery and state recovery attack on the authenticated cipher PANDA-s.

Client-Server Password Recovery (Extended Abstract)

Full Key-Recovery Attack on the HMAC/NMAC Based on 3 and 4-Pass HAVAL

A New Non-MDS Hash Function Resisting Birthday Attack and Meet-in-the-middle Attack

MultiCollision Attack on the Compression Functions of MD4 and 3-Pass HAVAL.