Securing One Time Password (OTP) for Multi-Factor Out-of-Band Authentication through a 128-bit Blowfish Algorithm

Abstract

Authentication and cryptography have been used to address security issues on various online services. However, researchers discovered that even the most commonly used multi-factor out-of-band authentication mechanism was vulnerable to attacks and traditional crypto-algorithms were characterized to have some drawbacks making it crucial to choose desirable algorithms for a particular purpose. This study introduces an innovative modification of the Blowfish algorithm designed to capitalize on its strengths but supports 128-bits block size text input using dynamic selection encryption method and reduction of cipher function execution through randomly determined rounds. Experimentation results on 128-bit input text revealed significant performance improvements with utmost 5.91 % in terms of avalanche effect, 38.97 % for integrity, and 41.02 % in terms of execution time. Results also showed that the modification introduced extra security layer, thus, displaying higher complexity and stronger diffusion at faster execution time making it more difficult and complex for an unauthorized individual to decipher the information and desirable to be used for applications with multiple users respectively. This is a good contribution to the continuous developments in the field of information security particularly in cryptography and towards providing a secure OTP for multifactor out-of-band authentication.

Blockchain-Enabled Cybersecurity Provision for Scalable Heterogeneous Network: A Comprehensive Survey

“…Keylogger attackers [62] infect the user's computer using USB sticks, keyboard strokes, and system bugs while users log in to the webpages by typing in their passwords and credit card numbers. Attackers can easily recognize the keystroke patterns and log in to the user system [63]. Criminals furtively move the personal or financial records of any company or employees by applying this technique from the client side.…”

A New Approach in Expanding the Hash Size of MD5

“…Hence, there have been a lot of approaches and techniques in securing the client-server communication and other related online services and transactions. According to [33], the use of Short Message Service (SMS)-based One Time Password (OTP) is one of the most commonly used multi-factor authentication and authorization mechanism to address security issues on various online services. Another approach is the use of Radio Frequency Identification (RFID) technology for authentication.…”

Introducing a Machine Learning Password Metric Based on EFKM Clustering Algorithm

“…Passwords provide a mechanism to verify authenticity [1]. They are vital for any system, whether it is online or offline [2].…”