Paper 2025/555 Original: eprint.iacr.org/2025/555 ↗
Strong Federated Authentication With Password-based Credential Against Identity Server Corruption
Abstract
We initiate the study of strong federated authentication with password-based credential against identity server corruption (SaPBC). We provide a refined formal security model, which captures all the necessary security properties in registration, authentication, and session key establishment between a user and an application server. The new model with fine-grained information leakage separates the leakage of password-related files and long-term secrets (including passwords and credentials). Moreover, we present two SaPBC protocols constructed from efficient cryptographic primitives for these corruption scenarios. In addition to rigorous security proofs, we also conduct comprehensive performance evaluation of the two protocols.
Metadata
- Available format(s)
PDF- Category
- Cryptographic protocols
- Publication info
- Preprint.
- History
- 2025-03-26: last updated
- 2025-03-26: published
- Short URL
- https://ia.cr/2025/555
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2025/555,
author = {Changsong Jiang and Chunxiang Xu and Guomin Yang and Li Duan and Jing Wang},
title = {Strong Federated Authentication With Password-based Credential Against Identity Server Corruption},
howpublished = {Cryptology {ePrint} Archive, Paper 2025/555},
year = {2025},
url = {https://eprint.iacr.org/2025/555}
}