Passwords Management via Split-Key

Kenneth Giuliani, V. Kumar Murty, Guangwu Xu
2016 Journal of Information Security  
This paper proposes a scheme for password management by storing password encryptions on a server. The method involves having the encryption key split into a share for the user and one for the server. The user's share shall be based solely on a selected passphrase. The server's share shall be generated from the user's share and the encryption key. The security and trust are achieved by performing both encryption and decryption on the client side. We also address the issue of countering
more » ... attack by providing a further enhancement of the scheme.
doi:10.4236/jis.2016.73016 fatcat:jq47hcpcebhw7ee64xile2ifu4