Error-tolerant password recovery

Many encryption systems require the user to memorize high entropy passwords or passphrases and reproduce them exactly. This is often a difficult task. We propose a more fault-tolerant scheme, where a high entropy key (or password) is derived from a sequence of low entropy passwords. The user is able to recover the correct key if she remembers a certain percentage of the passwords correctly. In contrast to other systems that have been proposed for fault-tolerant passwords, our basic design is provably secure against a computationally unbounded attacker. Categories and Subject Descriptors E.3 [Data]: Data Encryption; E.4 [Data]: Coding and In

• Type: Conference
• Year: 2001
• Where: CCS
• Authors: Niklas Frykholm, Ari Juels
• Keywords: CCS 2001, Entropy Passwords, Low Entropy Passwords, Many Encryption Systems, Security Privacy