Article

Cryptanalysis of a Cognitive Authentication Scheme (Extended Abstract)

Authors:

Philippe Golle,

David WagnerAuthors Info & Claims

SP '07: Proceedings of the 2007 IEEE Symposium on Security and Privacy

Pages 66 - 70

https://doi.org/10.1109/SP.2007.13

Published: 20 May 2007 Publication History

Publisher Site

Abstract

We present attacks against two cognitive authentication schemes [9] proposed at the 2006 IEEE Symposium on Security and Privacy. These authentication schemes are designed to be secure against eavesdropping attacks while relying only on human cognitive skills. They achieve authentication via challenge response protocols based on a shared secret set of pictures. Our attacks use a SAT solver to recover a user's secret key in a few seconds, after observing only a small number of successful logins. These attacks demonstrate that the authentication schemes of [9] are not secure against an eavesdropping adversary.

Cited By

View all

Lewis BKirupaharan PRanalli TVenkatasubramanian K(2024)A3C: An Image-Association-Based Computing Device Authentication Framework for People with Upper Extremity ImpairmentsACM Transactions on Accessible Computing10.1145/365252217:2(1-37)Online publication date: 19-Mar-2024
https://dl.acm.org/doi/10.1145/3652522
Togookhuu BZhang J(2017)New Graphic Password Scheme Containing Questions-Background-Pattern and ImplementationProcedia Computer Science10.1016/j.procs.2017.03.071107:C(148-156)Online publication date: 1-Apr-2017
https://dl.acm.org/doi/10.1016/j.procs.2017.03.071
Wang TGe HChowdhury OMaji HLi NWeippl EKatzenbeisser SKruegel CMyers AHalevi S(2016)On the Security and Usability of Segment-based Visual Cryptographic Authentication ProtocolsProceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security10.1145/2976749.2978417(603-615)Online publication date: 24-Oct-2016
https://dl.acm.org/doi/10.1145/2976749.2978417
Show More Cited By

Index Terms

Cryptanalysis of a Cognitive Authentication Scheme (Extended Abstract)

Recommendations

Cryptanalysis of Zuhua Shao key Authentication Scheme

In public key cryptosystem, the protecting of public keys against intruders is very important. Usually, key authentication schemes are required to preserve public keys. Most of the key authentication schemes require one or more authorities to ...
Cryptanalysis of nonce-based mutual authentication scheme using smart cards
ICHIT'11: Proceedings of the 5th international conference on Convergence and hybrid information technology

Recently, many user authentication schemes using smart cards have been proposed to improve the security weaknesses in user authentication process. In 2008, Liu et al. proposed a new mutual authentication scheme using smart cards which is based on nonce ...
Cryptanalysis and Improvement of a Certificateless Multi-proxy Signature Scheme

Certificateless cryptography is a new type of public key cryptography, which removes the certificate management problem in traditional public key cryptography and the key escrow problem in identity-based public key cryptography. Multi-proxy signature is ...

Comments

Information & Contributors

Information

Published In

SP '07: Proceedings of the 2007 IEEE Symposium on Security and Privacy

May 2007

362 pages

ISBN:0769528481

Publisher

IEEE Computer Society

United States

Publication History

Published: 20 May 2007

Qualifiers

Article

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

24
Total Citations
View Citations
0
Total Downloads

Downloads (Last 12 months)0
Downloads (Last 6 weeks)0

Reflects downloads up to 03 Oct 2024

Other Metrics

View Author Metrics

Citations

Cited By

View all

Lewis BKirupaharan PRanalli TVenkatasubramanian K(2024)A3C: An Image-Association-Based Computing Device Authentication Framework for People with Upper Extremity ImpairmentsACM Transactions on Accessible Computing10.1145/365252217:2(1-37)Online publication date: 19-Mar-2024
https://dl.acm.org/doi/10.1145/3652522
Togookhuu BZhang J(2017)New Graphic Password Scheme Containing Questions-Background-Pattern and ImplementationProcedia Computer Science10.1016/j.procs.2017.03.071107:C(148-156)Online publication date: 1-Apr-2017
https://dl.acm.org/doi/10.1016/j.procs.2017.03.071
Wang TGe HChowdhury OMaji HLi NWeippl EKatzenbeisser SKruegel CMyers AHalevi S(2016)On the Security and Usability of Segment-based Visual Cryptographic Authentication ProtocolsProceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security10.1145/2976749.2978417(603-615)Online publication date: 24-Oct-2016
https://dl.acm.org/doi/10.1145/2976749.2978417
Wiese ORoth VPaternò FVäänänen KChurch KHäkkilä JKrüger ASerrano M(2016)See you next timeProceedings of the 18th International Conference on Human-Computer Interaction with Mobile Devices and Services10.1145/2935334.2935388(453-464)Online publication date: 6-Sep-2016
https://dl.acm.org/doi/10.1145/2935334.2935388
Song YCho GOh SKim HHuh JBegole BKim JInkpen KWoo W(2015)On the Effectiveness of Pattern Lock Strength MetersProceedings of the 33rd Annual ACM Conference on Human Factors in Computing Systems10.1145/2702123.2702365(2343-2352)Online publication date: 18-Apr-2015
https://dl.acm.org/doi/10.1145/2702123.2702365
(2015)Leakage-resilient password entryComputers and Security10.1016/j.cose.2014.10.00848:C(196-211)Online publication date: 1-Feb-2015
https://dl.acm.org/doi/10.1016/j.cose.2014.10.008
Uellenbeck SDürmuth MWolf CHolz TSadeghi AGligor VYung M(2013)Quantifying the security of graphical passwordsProceedings of the 2013 ACM SIGSAC conference on Computer & communications security10.1145/2508859.2516700(161-172)Online publication date: 4-Nov-2013
https://dl.acm.org/doi/10.1145/2508859.2516700
Asghar HLi SPieprzyk JWang H(2013)Cryptanalysis of the convex hull click human identification protocolInternational Journal of Information Security10.1007/s10207-012-0161-x12:2(83-96)Online publication date: 1-Apr-2013
https://dl.acm.org/doi/10.1007/s10207-012-0161-x
Biddle RChiasson SVan Oorschot P(2012)Graphical passwordsACM Computing Surveys10.1145/2333112.233311444:4(1-41)Online publication date: 7-Sep-2012
https://dl.acm.org/doi/10.1145/2333112.2333114
Hsu FChen HMachiraju S(2011)WebCallerIDJournal of Computer Security10.5555/2590701.259070419:5(869-893)Online publication date: 1-Sep-2011
https://dl.acm.org/doi/10.5555/2590701.2590704
Show More Cited By

Abstract

Cited By

Index Terms

Recommendations

Cryptanalysis of Zuhua Shao key Authentication Scheme

Cryptanalysis of nonce-based mutual authentication scheme using smart cards

Cryptanalysis and Improvement of a Certificateless Multi-proxy Signature Scheme

Comments

Information

Published In

Publisher

Publication History

Qualifiers

Contributors

Other Metrics

Bibliometrics

Article Metrics

Other Metrics

Citations

Cited By

View options

Figures

Other

Share

Share this Publication link

Share on social media

Affiliations