OSDI '23 - Accountable authentication with privacy protection: The Larch system for universal login

OSDI '23 - Accountable authentication with privacy protection: The Larch system for universal login

Emma Dauterman, UC Berkeley, Danny Lin, Woodinville High School, Henry Corrigan-Gibbs, MIT, David Mazières, Stanford University

Credential compromise is hard to detect and hard to mitigate. To address this problem, we present larch, an accountable authentication framework with strong security and privacy properties. Larch protects user privacy while ensuring that the larch log server correctly records every authentication. Specifically, an attacker who compromises a user’s device …

address authentication compromise credential credential compromise detect hard high high school login mit privacy problem protection school stanford stanford university system uc berkeley university