Sloth: Key Stretching and Deniable Encryption using Secure Elements on Smartphones

ePrint Report: Sloth: Key Stretching and Deniable Encryption using Secure Elements on Smartphones

Daniel Hugenroth, Alberto Sonnino, Sam Cutler, Alastair R. Beresford

Traditional key stretching lacks a strict time guarantee due to the ease of parallelized password guessing by attackers. This paper introduces Sloth, a key stretching method leveraging the Secure Element (SE) commonly found in modern smartphones to provide a strict rate limit on password guessing. While this would be straightforward with full access to the SE, Android and …

attackers daniel encryption eprint report guarantee key password password guessing report sam smartphones