True2F: Backdoor-resistant authentication tokens — mentioned by kwantam

Sun, 19 May 2019 20:08:44 GMT

It's possible to rule out some (but not necessarily all) cross-protocol attacks with a simple and cheap tweak. I have not proved that this rules out everything, but it appears to be no weaker than the scheme sans tweak, and proofs shouldn't be too hard. The high-level idea is to derive a new encryption key from the recipient's signing key, such that only the recipient knows the secret. This is similar to HD wallets[1] and some recent work by Dauterman et al.[2]. It's easy to show, following the work of Morita et al.[3], that EdDSA is secure against (certain) related-key attacks. This means…

Paper and discussion history. A mention is not an endorsement.

True2F: Backdoor-resistant authentication tokens · HackerPapers discussions

True2F: Backdoor-resistant authentication tokens — mentioned by kwantam