Paper 2016/345 Original: eprint.iacr.org/2016/345 ↗
Provably Secure Password Reset Protocol: Model, Definition, and Generic Construction
Abstract
Many online services adopt a password-based user authentication system because of its usability. However, several problems have been pointed out on it, and one of the well-known problems is that a user forgets his/her password and cannot login the services. To solve this problem, most online services support a mechanism with which a user can reset a password. In this paper, we consider a provable security treatment for a password reset protocol. We formalize a model and security definitions, propose a generic construction based on a pseudorandom function and public key encryption. In addition, we implement a prototype of our protocol to evaluate its efficiency.
Metadata
- Available format(s)
PDF- Category
- Cryptographic protocols
- Publication info
- Preprint.
- History
- 2016-04-01: last updated
- 2016-04-01: published
- Short URL
- https://ia.cr/2016/345
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2016/345,
author = {Satsuya Ohata and Takahiro Matsuda and Kanta Matsuura},
title = {Provably Secure Password Reset Protocol: Model, Definition, and Generic Construction},
howpublished = {Cryptology {ePrint} Archive, Paper 2016/345},
year = {2016},
url = {https://eprint.iacr.org/2016/345}
}