On Security of Key Derivation Functions in Password-based Cryptography

Kodwani, Gaurav; Arora, Shashank; Atrey, Pradeep K.

doi:10.1109/csr51186.2021.9527961

Cited by 1 publication

(1 citation statement)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The paper's implications are crucial for understanding PBKDF2's vulnerability in security systems like Microsoft .NET framework and WiFi Protected Access (WPA2). The choice of the hash function in PBKDF2 impacts its security (Li et al, 2015;Visconti et al, 2015;Kodwani et al, 2021). Visconti et al (2019) investigate the expenses related to breaching PBKDF2's defenses, considering elements like the complexity of passwords, the cost of electricity, and the efficiency of different hardware setups.…”

Section: Pbkdfmentioning

confidence: 99%

On time-memory trade-offs for password hashing schemes

Saran

2024

Front. Comput. Sci.

View full text Add to dashboard Cite

A password hashing algorithm is a cryptographic method that transforms passwords into a secure and irreversible format. It is used not only for authentication purposes but also for key derivation mechanisms. The primary purpose of password hashing is to enhance the security of user credentials by preventing the exposure of plaintext passwords in the event of a data breach. As a key derivation function, password hashing aims to derive secret keys from a master key, password, or passphrase using a pseudorandom function. This review focuses on the design and analysis of time-memory trade-off (TMTO) attacks on recent password hashing algorithms. This review presents a comprehensive survey of TMTO attacks and recent studies on password hashing for authentication by examining the literature. The study provides valuable insights and strategies for safely navigating transitions, emphasizing the importance of a systematic approach and thorough testing to mitigate risk. The purpose of this paper is to provide guidance to developers and administrators on how to update cryptographic practices in response to evolving security standards and threats.

show abstract

Section: Pbkdfmentioning

confidence: 99%

On time-memory trade-offs for password hashing schemes

Saran

2024

Front. Comput. Sci.

View full text Add to dashboard Cite

show abstract

On Security of Key Derivation Functions in Password-based Cryptography

Cited by 1 publication

References 13 publications

On time-memory trade-offs for password hashing schemes

On time-memory trade-offs for password hashing schemes

Contact Info

Product

Resources

About