References & Citations
Computer Science > Cryptography and Security
Title: One Password: An Encryption Scheme for Hiding Users' Register Information
(Submitted on 12 Oct 2017 (v1), last revised 24 Jun 2022 (this version, v2))
Abstract: In recent years, the attack which leverages register information (e.g. accounts and passwords) leaked from 3rd party applications to try other applications is popular and serious. We call this attack "database collision". Traditionally, people have to keep dozens of accounts and passwords for different applications to prevent this attack. In this paper, we propose a novel encryption scheme for hiding users' register information and preventing this attack. Specifically, we first hash the register information using existing safe hash function. Then the hash string is hidden, instead a coefficient vector is stored for verification. Coefficient vectors of the same register information are generated randomly for different applications. Hence, the original information is hardly cracked by dictionary based attack or database collision in practice. Using our encryption scheme, each user only needs to keep one password for dozens of applications.
Submission history
From: Bo Zhao [view email][v1] Thu, 12 Oct 2017 03:27:56 GMT (435kb,D)
[v2] Fri, 24 Jun 2022 03:32:23 GMT (0kb,I)
Link back to: arXiv, form interface, contact.