Privacy and Nomadic Computing: A Public-Key Cryptosystem Based on Passwords - Archive ouverte HAL Access content directly
Reports Year : 2013

Privacy and Nomadic Computing: A Public-Key Cryptosystem Based on Passwords

Abstract

The use of public-key cryptography is complicated in a nomadic computing era. Private keys are typically huge numbers that are impossible to memorize or even to write down and have to be stored electronically. Therefore a mobile user has somehow to keep its private key with him at all time (it is senseless to imagine that the private key is downloaded through a public network). It is neither realistic nor safe. Indeed the mobile device must be protected, which is usually done through password mechanisms. At the end of the day all the cryptosystem relies on this password. In this paper we propose a generic way to produce keys from a password using secure hashing functions. We have done an implementation of a nomadic PGP as a proof of concept: the software is a java applet, thus platform independent, providing a complete solution for mail encryption based on public-key cryptography. In the end the user just has to remember its password, and no longer has to rely on specific software/operating system/hardware settings.
Fichier principal
Vignette du fichier
Prost-Terras_RR2013.pdf (5.51 Mo) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-00933842 , version 1 (21-01-2014)

Identifiers

  • HAL Id : hal-00933842 , version 1

Cite

Frederic Prost, Lydie Terras. Privacy and Nomadic Computing: A Public-Key Cryptosystem Based on Passwords. 2013. ⟨hal-00933842⟩
108 View
95 Download

Share

Gmail Facebook X LinkedIn More