Stronger Password-Based Encryption Using I/O Hardness
Authors: Greg Zaverucha

Date: August 2015
Publication: Passwords15 Las Vegas / MSR-TR-2015-63
Source 1:

Abstract or Summary:
Password-based encryption needs all the help it can get to withstand brute-force attacks. We repurpose an old idea to encrypt data so that each password guess requires processing all of the encrypted data. Then, we'll look at some use cases to see how the costs change for the attacker and defender. In a brute force attack, this can mean a large increase in attacker I/O, with little cost increase to defenders, who must process all of the data anyway. Note: Video of presentation: Technical report uses slightly different title of "Stronger Password-Based Encryption Using All-of-Nothing Transforms"

Do you have additional information to contribute regarding this research paper? If so, please email with the details.

<-- Back to Authentication Research Paper Index

[Home] [About Us] [News] [Research]

Copyright © 2019