Generalized Fuzzy Password-Authenticated Key Exchange from Error Correcting Codes

ePrint Report: Generalized Fuzzy Password-Authenticated Key Exchange from Error Correcting Codes

Jonathan Bootle, Sebastian Faller, Julia Hesse, Kristina Hostáková, Johannes Ottenhues

Fuzzy Password-Authenticated Key Exchange (fuzzy PAKE) allows cryptographic keys to be generated from authentication data that is both fuzzy and of low entropy. The strong protection against offline attacks offered by fuzzy PAKE opens an interesting avenue towards secure biometric authentication, typo-tolerant password authentication, and automated IoT device pairing. Previous constructions of fuzzy PAKE are either based on Error …

attacks authentication cryptographic data entropy eprint report error exchange generated key keys low password protection report