Is it too late for PAKE? John Engler (UC Berkeley) Chris Karlof - PowerPoint PPT Presentation

Mar 31, 2024 •99 likes •206 views

Is it too late for PAKE? John Engler (UC Berkeley) Chris Karlof Elaine Shi Dawn Song (Usable Security (PARC) (UC Berkeley) Systems) What is PAKE? Password Authenticated Key Exchange 1 Enter Password 2 Crypto

Is it too late for PAKE? John Engler (UC Berkeley) Chris Karlof Elaine Shi Dawn Song (Usable Security (PARC) (UC Berkeley) Systems)
What is PAKE? ● Password Authenticated Key Exchange 1 Enter Password 2 Crypto Protocol 3 Generate Session Key
Why PAKE? ● Password not transmitted ● Mutual Authentication
T wo Hurdles ● Secure password entry ● Branding and message
Problem: Mimicry Attacks
Possible Solution: Secure UI Rachna, et al. Dynamic Security Skin Login Oiwa, et al. MAP-HTTP's In-chrome Login
Problem: Confusion Attacks
Problem: Branding and Messaging
Conclusion ● More issues remain: – User Training – Implementation – Deployment ● PAKE: Potential benefits but hurdles. ● Full Paper:Firefox implemenation: http://webblaze.cs.berkeley.edu/2009/pake/

Recommend

Upstream Graphics: Too Little, Too Late Upstream Graphics: Too Little, Too Late Daniel Vetter,

Upstream Graphics: Too Little, Too Late Upstream Graphics: Too Little, Too Late Daniel Vetter, Intel OTC @danvet LPC 2019, Lisbon Everything Great About Upstream Graphics: Too Little, Too Late Upstream Graphics: Too Little, Too Late Daniel

367 views • 25 slides

Not a Fairy Tale Year for State Risk Managers Too hot, Too cold Too little, Too much Lessons

Not a Fairy Tale Year for State Risk Managers Too hot, Too cold Too little, Too much Lessons Learned from Water Disasters Session Agenda and Speakers Ice and Winter Storms An introduction to the session Patti Hayden State of Maine Tainted

825 views • 70 slides

too hilly, too hard What are the barriers to cycling in the UK? David Wildman 15 th

Too wet, too windy, too dangerous, too far, too hilly, too hard What are the barriers to cycling in the UK? David Wildman 15 th September 2015 The benefits are a given Improve health Save money Door to door transport No emissions

514 views • 14 slides

NRHS Late Starts and Class Sizes April 6, 2016 1 Late Start Key Questions How have late

NRHS Late Starts and Class Sizes April 6, 2016 1 Late Start Key Questions How have late starts been used at NRHS this year? What has been the staff, parent, and student reaction to late starts? What is proposed for the 2016-17 year?

424 views • 16 slides

Late binding Ch 15.3 Highlights - Late binding for variables - Late binding for functions

Late binding Ch 15.3 Highlights - Late binding for variables - Late binding for functions Review: Derived classes Today we will deal more with inheritance Mainly we will focus on how you can store a child class in a parent container (sort

552 views • 30 slides

Too Little Too Late, part II p Clean Innovation as Policy Commitment Device CREE annual

Too Little Too Late, part II p Clean Innovation as Policy Commitment Device CREE annual workshop, Oslo 16-17 Sep 2013 Reyer Gerlagh, Sam Okullo, Mads Greaker Tilburg University Introduction / model / results / conclusion WRE 96: IPCC92 wants

442 views • 23 slides

OPAQUE: A Strong Asymmetric PAKE Protocol Secure Against Pre-Computation Attacks Stanislaw

OPAQUE: A Strong Asymmetric PAKE Protocol Secure Against Pre-Computation Attacks Stanislaw Jarecki, Hugo Krawczyk, Jiayu Xu Motivation: Password Authentication Passwords are the prevalent tool for authentication Passwords are vulnerable

482 views • 22 slides

Dragonfly: A PAKE Scheme Dan Harkins IETF 83 Paris, France The Rise of Password Protocols in

Dragonfly: A PAKE Scheme Dan Harkins IETF 83 Paris, France The Rise of Password Protocols in the IETF EAP-GPSK, TLS-SRP, TLS-PSK EAP-pwd PAP! Plaintext passwords (1986 to 1995 or so) PAP-like exchange completely broken

340 views • 12 slides

Hash Proof Systems and Password Protocols III SPHF-based PAKE David Pointcheval CNRS, Ecole

Hash Proof Systems and Password Protocols III SPHF-based PAKE David Pointcheval CNRS, Ecole normale sup erieure/PSL & INRIA 8th BIU Winter School Key Exchange February 2018 CNRS/ENS/PSL/INRIA David Pointcheval 1/53 Intuition

477 views • 18 slides

AuCPace: Efficient Verifier-Based PAKE protocol tailored for the IIoT Bjrn Haase, Benot

Products Solutions Services AuCPace: Efficient Verifier-Based PAKE protocol tailored for the IIoT Bjrn Haase, Benot Labrique Endress + Hauser Conducta GmbH & Co. KG. Slide 1 07/22/2019 B. Haase, B. Labrique AuCPace: Efficient

1.21k views • 81 slides

Lollipops taste of Lollipops taste of Lollipops taste of Vanilla too Vanilla too Vanilla too

Lollipops taste of Lollipops taste of Lollipops taste of Vanilla too Vanilla too Vanilla too Post-ICLP'94 Workshop on Proof-Theoretical Extensions of Logic Programming Iliano Cervesato Iliano Cervesato Dipartimento di Informatica

348 views • 21 slides

Final Planting Date/Late Planting Period (LPP) Final Planting Date is Crop/County specific Corn

Final Planting Date/Late Planting Period (LPP) Final Planting Date is Crop/County specific Corn has a 20-day late planting period Soybeans has a 25-day late planting period There is a 1% a day reduction in guarantee if planted during late

656 views • 20 slides

Hel Hell is s Truth seen seen Too Late INET 2017 Edinburgh Ph Philip Mirowski Rough Outline

Hel Hell is s Truth seen seen Too Late INET 2017 Edinburgh Ph Philip Mirowski Rough Outline of Talk Existing Analyses of fake news too parochial, limited Start with Neoliberalism and its central connection to market

371 views • 17 slides

Too much or too little red cells What should you do? Dr Melissa Ooi Consultant Haematologist,

Too much or too little red cells What should you do? Dr Melissa Ooi Consultant Haematologist, NCIS GP CME Symposium 2017 What can affect the red cell results? Answer: Too many red cells Polycythaemia Polycythaemia indicates increased red

1.07k views • 47 slides

Particle Filtering Sometimes |X| is too big to use exact inference |X| may be too big to

Particle Filtering Sometimes |X| is too big to use exact inference |X| may be too big to even store B(X) E.g. X is continuous |X| 2 may be too big to do updates Solution: approximate inference Track samples of X, not

287 views • 27 slides

3 36 The Future of Publishing 1. You know everyone too 1. You know everyone too 2. E-Books =

3 36 The Future of Publishing 1. You know everyone too 1. You know everyone too 2. E-Books = Awesome 1. You know everyone too QUALITY OPENNESS X QUALITY OPENNESS X QUALITY OPENNESS [ Math Portion ] AU THO R AU THO R + EDITOR AU THO

651 views • 42 slides

LATE and the Generalized Roy Model: Some Relationships James J. Heckman University of Chicago

Main: Defining LATE Example of Normal Model Nonparametric Identification of the Roy Model LATE and the Generalized Roy Model: Some Relationships James J. Heckman University of Chicago Extract from: Building Bridges Between Structural and

1.01k views • 88 slides

LATE and the Generalized Roy Model: Some Relationships James J. Heckman University of Chicago

LATE and the Generalized Roy Model: Some Relationships James J. Heckman University of Chicago Extract from: Building Bridges Between Structural and Program Evaluation Approaches to Evaluating Policy James J. Heckman (JEL 2010) Econ 312,

876 views • 66 slides

Sovereign Debt and Default Costas Arkolakis Teaching fellow: Federico Esposito Economics 407,

Sovereign Debt and Default Costas Arkolakis Teaching fellow: Federico Esposito Economics 407, Yale February 2014 Outline Sovereign debt and default A brief history of default episodes A Simple Model of Default Managing Sovereign

682 views • 54 slides

Exam 2 Review 18.05 Spring 2014 Jeremy Orloff and Jonathan Bloom Cannot cover everything. Jerry

Exam 2 Review 18.05 Spring 2014 Jeremy Orloff and Jonathan Bloom Cannot cover everything. Jerry will go through a list of examples. Jon, Peter, Ruthi, Erika will take questions. Summary Data: x 1 , . . . , x n Basic statistics: sample mean, sample

444 views • 21 slides

Econ 2148, fall 2017 Instrumental variables II, continuous treatment Maximilian Kasy Department

Instrumental variables Econ 2148, fall 2017 Instrumental variables II, continuous treatment Maximilian Kasy Department of Economics, Harvard University 1 / 35 Instrumental variables Recall instrumental variables part I Origins of

633 views • 35 slides

LATe: A Lightweight cole Mines-Tlcom Authenticated Time Synchronization Protocol for IoT

IMT Atlantique Bretagne-Pays de la Loire LATe: A Lightweight cole Mines-Tlcom Authenticated Time Synchronization Protocol for IoT Renzo E. NAVAS, Laurent TOUTAIN Table of contents 1/26 1 Problem Statement and SoA 2 LATe Protocol 3

746 views • 40 slides

Exploring Marginal Treatment Effects Flexible estimation using Stata Martin Eckhoff Andresen

Exploring Marginal Treatment Effects Flexible estimation using Stata Martin Eckhoff Andresen Statistics Norway Oslo, September 12th 2018 Martin Andresen (SSB) Exploring MTEs Oslo, 2018 1 / 25 Introduction Motivation Instrumental variables

720 views • 25 slides

Doing More When Youre Running LATE: Applying Marginal Treatment Effect Methods to Examine

Doing More When Youre Running LATE: Applying Marginal Treatment Effect Methods to Examine Treatment Effect Heterogeneity in Experiments Amanda E. Kowalski Associate Professor, Department of Economics, Yale Faculty Research Fellow, NBER

1.19k views • 100 slides

Download document

More recommend

Explore More Topics

Stay informed with curated content and fresh updates.

animals pets art culture automotive transportation business finance computer internet construction architecture education-career electronics communication

Is it too late for PAKE? John Engler (UC Berkeley) Chris Karlof - PowerPoint PPT Presentation

Is it too late for PAKE? John Engler (UC Berkeley) Chris Karlof Elaine Shi Dawn Song (Usable Security (PARC) (UC Berkeley) Systems) What is PAKE? Password Authenticated Key Exchange 1 Enter Password 2 Crypto

Upstream Graphics: Too Little, Too Late Upstream Graphics: Too Little, Too Late Daniel Vetter,

Not a Fairy Tale Year for State Risk Managers Too hot, Too cold Too little, Too much Lessons

too hilly, too hard What are the barriers to cycling in the UK? David Wildman 15 th

NRHS Late Starts and Class Sizes April 6, 2016 1 Late Start Key Questions How have late

Late binding Ch 15.3 Highlights - Late binding for variables - Late binding for functions

Too Little Too Late, part II p Clean Innovation as Policy Commitment Device CREE annual

OPAQUE: A Strong Asymmetric PAKE Protocol Secure Against Pre-Computation Attacks Stanislaw

Dragonfly: A PAKE Scheme Dan Harkins IETF 83 Paris, France The Rise of Password Protocols in

Hash Proof Systems and Password Protocols III SPHF-based PAKE David Pointcheval CNRS, Ecole

AuCPace: Efficient Verifier-Based PAKE protocol tailored for the IIoT Bjrn Haase, Benot

Lollipops taste of Lollipops taste of Lollipops taste of Vanilla too Vanilla too Vanilla too

Final Planting Date/Late Planting Period (LPP) Final Planting Date is Crop/County specific Corn

Hel Hell is s Truth seen seen Too Late INET 2017 Edinburgh Ph Philip Mirowski Rough Outline

Too much or too little red cells What should you do? Dr Melissa Ooi Consultant Haematologist,

Particle Filtering Sometimes |X| is too big to use exact inference |X| may be too big to

3 36 The Future of Publishing 1. You know everyone too 1. You know everyone too 2. E-Books =

LATE and the Generalized Roy Model: Some Relationships James J. Heckman University of Chicago

LATE and the Generalized Roy Model: Some Relationships James J. Heckman University of Chicago

Sovereign Debt and Default Costas Arkolakis Teaching fellow: Federico Esposito Economics 407,

Exam 2 Review 18.05 Spring 2014 Jeremy Orloff and Jonathan Bloom Cannot cover everything. Jerry

Econ 2148, fall 2017 Instrumental variables II, continuous treatment Maximilian Kasy Department

LATe: A Lightweight cole Mines-Tlcom Authenticated Time Synchronization Protocol for IoT

Exploring Marginal Treatment Effects Flexible estimation using Stata Martin Eckhoff Andresen

Doing More When Youre Running LATE: Applying Marginal Treatment Effect Methods to Examine

Explore More Topics

Sambuz

Useful Links

Newsletter

Mail Us