[Resource Topic] 2006/258: Cryptanalysis of a Cognitive Authentication Scheme

Welcome to the resource topic for 2006/258

Cryptanalysis of a Cognitive Authentication Scheme

Authors: Philippe Golle, David Wagner


We present attacks against two cognitive authentication schemes [W06] recently proposed at the 2006 IEEE Symposium on Security and Privacy. These authentication schemes are designed to be secure against eavesdropping attacks while relying only on human cognitive skills. They achieve authentication via challenge response protocols based on a shared secret set of pictures. Our attacks use a SAT solver to recover a user’s key in a few seconds, after observing only a small number of successful logins. These attacks demonstrate that the authentication schemes of [W06] are not secure against an eavesdropping adversary.

ePrint: https://eprint.iacr.org/2006/258

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .