Permutation-Based Hash Chains with Application to Password Hashing

ePrint Report: Permutation-Based Hash Chains with Application to Password Hashing

Charlotte Lefevre, Bart Mennink

Hash chain based password systems are a useful way to guarantee authentication with one-time passwords. The core idea is specified in RFC 1760 as S/Key. At CCS 2017, Kogan et al. introduced T/Key, an improved password system where one-time passwords are only valid for a limited time period. They proved security of their construction in the random oracle model under a basic modeling of the adversary. …

application authentication eprint report guarantee hash hashing idea key password passwords report rfc system systems