{"id":"https://openalex.org/W4391021892","doi":"https://doi.org/10.1109/tifs.2024.3356162","title":"Privacy-Preserving Password Cracking: How a Third Party Can Crack Our Password Hash Without Learning the Hash Value or the Cleartext","display_name":"Privacy-Preserving Password Cracking: How a Third Party Can Crack Our Password Hash Without Learning the Hash Value or the Cleartext","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4391021892","doi":"https://doi.org/10.1109/tifs.2024.3356162"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3356162","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3356162","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073042391","display_name":"Norbert Tihanyi","orcid":"https://orcid.org/0000-0002-9002-5935"},"institutions":[{"id":"https://openalex.org/I4210087059","display_name":"Technology Innovation Institute","ror":"https://ror.org/001kv2y39","country_code":"AE","type":"facility","lineage":["https://openalex.org/I4210087059"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Norbert Tihanyi","raw_affiliation_strings":["Department of Informatics, Eötvös Lóránd University, Budapest, Hungary","Technology Innovation Institute (TII), Abu Dhabi, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0002-9002-5935","affiliations":[{"raw_affiliation_string":"Department of Informatics, Eötvös Lóránd University, Budapest, Hungary","institution_ids":[]},{"raw_affiliation_string":"Technology Innovation Institute (TII), Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I4210087059"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052473439","display_name":"Tam\u00e1s Bisztray","orcid":"https://orcid.org/0000-0003-2626-3434"},"institutions":[{"id":"https://openalex.org/I184942183","display_name":"University of Oslo","ror":"https://ror.org/01xtthb56","country_code":"NO","type":"education","lineage":["https://openalex.org/I184942183"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Tam\u00e1s Bisztray","raw_affiliation_strings":["Department of Informatics, University of Oslo, Oslo, Norway"],"raw_orcid":"https://orcid.org/0000-0003-2626-3434","affiliations":[{"raw_affiliation_string":"Department of Informatics, University of Oslo, Oslo, Norway","institution_ids":["https://openalex.org/I184942183"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069161234","display_name":"Bertalan Borsos","orcid":"https://orcid.org/0009-0000-8718-8285"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bertalan Borsos","raw_affiliation_strings":["Department of Informatics, Eötvös Lóránd University, Budapest, Hungary"],"raw_orcid":"https://orcid.org/0009-0000-8718-8285","affiliations":[{"raw_affiliation_string":"Department of Informatics, Eötvös Lóránd University, Budapest, Hungary","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5092189580","display_name":"Sebastien Raveau","orcid":"https://orcid.org/0000-0002-3760-6407"},"institutions":[{"id":"https://openalex.org/I4210087059","display_name":"Technology Innovation Institute","ror":"https://ror.org/001kv2y39","country_code":"AE","type":"facility","lineage":["https://openalex.org/I4210087059"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Sebastien Raveau","raw_affiliation_strings":["Technology Innovation Institute (TII), Abu Dhabi, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0002-3760-6407","affiliations":[{"raw_affiliation_string":"Technology Innovation Institute (TII), Abu Dhabi, United Arab Emirates","institution_ids":["https://openalex.org/I4210087059"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.1262,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.74454656,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":"19","issue":null,"first_page":"2981","last_page":"2996"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8574332594871521},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.739300012588501},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.7379475235939026},{"id":"https://openalex.org/keywords/hash-chain","display_name":"Hash chain","score":0.5659812688827515},{"id":"https://openalex.org/keywords/cryptographic-hash-function","display_name":"Cryptographic hash function","score":0.5419737696647644},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5174604058265686},{"id":"https://openalex.org/keywords/password-cracking","display_name":"Password cracking","score":0.4624725878238678},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.36604782938957214},{"id":"https://openalex.org/keywords/one-time-password","display_name":"One-time password","score":0.35438334941864014},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.33613696694374084},{"id":"https://openalex.org/keywords/password-strength","display_name":"Password strength","score":0.2792208194732666}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8574332594871521},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.739300012588501},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.7379475235939026},{"id":"https://openalex.org/C135783594","wikidata":"https://www.wikidata.org/wiki/Q5678864","display_name":"Hash chain","level":3,"score":0.5659812688827515},{"id":"https://openalex.org/C7608002","wikidata":"https://www.wikidata.org/wiki/Q477202","display_name":"Cryptographic hash function","level":3,"score":0.5419737696647644},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5174604058265686},{"id":"https://openalex.org/C3847113","wikidata":"https://www.wikidata.org/wiki/Q2746524","display_name":"Password cracking","level":5,"score":0.4624725878238678},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.36604782938957214},{"id":"https://openalex.org/C89479133","wikidata":"https://www.wikidata.org/wiki/Q1137840","display_name":"One-time password","level":3,"score":0.35438334941864014},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.33613696694374084},{"id":"https://openalex.org/C70530487","wikidata":"https://www.wikidata.org/wiki/Q1990841","display_name":"Password strength","level":4,"score":0.2792208194732666}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2024.3356162","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3356162","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G714579870","display_name":null,"funder_award_id":"INEA/CEF/ICT/A2020/2373266 (JCOP Project)","funder_id":"https://openalex.org/F4320333478","funder_display_name":"Connecting Europe Facility"},{"id":"https://openalex.org/G8996762519","display_name":null,"funder_award_id":"101070586 (PHOENi2X Project)","funder_id":"https://openalex.org/F4320334322","funder_display_name":"HORIZON EUROPE Framework Programme"}],"funders":[{"id":"https://openalex.org/F4320333478","display_name":"Connecting Europe Facility","ror":null},{"id":"https://openalex.org/F4320334322","display_name":"HORIZON EUROPE Framework Programme","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":142,"referenced_works":["https://openalex.org/W101693620","https://openalex.org/W150223756","https://openalex.org/W278235758","https://openalex.org/W287184503","https://openalex.org/W297909767","https://openalex.org/W586258361","https://openalex.org/W593477458","https://openalex.org/W645926012","https://openalex.org/W1139204857","https://openalex.org/W1487941708","https://openalex.org/W1510442823","https://openalex.org/W1545140005","https://openalex.org/W1548561497","https://openalex.org/W1588912866","https://openalex.org/W1608516531","https://openalex.org/W1616788770","https://openalex.org/W1811376871","https://openalex.org/W1892454167","https://openalex.org/W1960990047","https://openalex.org/W1968380849","https://openalex.org/W1971881814","https://openalex.org/W1989713860","https://openalex.org/W2004302909","https://openalex.org/W2006873532","https://openalex.org/W2019578814","https://openalex.org/W2025839191","https://openalex.org/W2030112111","https://openalex.org/W2031533839","https://openalex.org/W2040682932","https://openalex.org/W2048755632","https://openalex.org/W2055745679","https://openalex.org/W2063829361","https://openalex.org/W2069372342","https://openalex.org/W2079193161","https://openalex.org/W2085612213","https://openalex.org/W2097267243","https://openalex.org/W2111303254","https://openalex.org/W2113427031","https://openalex.org/W2119067110","https://openalex.org/W2135359429","https://openalex.org/W2141040012","https://openalex.org/W2144942180","https://openalex.org/W2148896890","https://openalex.org/W2152643749","https://openalex.org/W2154611405","https://openalex.org/W2158879456","https://openalex.org/W2159024459","https://openalex.org/W2161229593","https://openalex.org/W2161396269","https://openalex.org/W2167883292","https://openalex.org/W2215280468","https://openalex.org/W2218132318","https://openalex.org/W2223374654","https://openalex.org/W2265356345","https://openalex.org/W2296067100","https://openalex.org/W2327069928","https://openalex.org/W2339832572","https://openalex.org/W2493343568","https://openalex.org/W2517157101","https://openalex.org/W2521755897","https://openalex.org/W2524448027","https://openalex.org/W2528123348","https://openalex.org/W2559948297","https://openalex.org/W2561675875","https://openalex.org/W2578455612","https://openalex.org/W2582054215","https://openalex.org/W2598853221","https://openalex.org/W2606882085","https://openalex.org/W2616051826","https://openalex.org/W2626588417","https://openalex.org/W2680793898","https://openalex.org/W2734150319","https://openalex.org/W2736745396","https://openalex.org/W2744999500","https://openalex.org/W2772927365","https://openalex.org/W2788357188","https://openalex.org/W2801931360","https://openalex.org/W2806482912","https://openalex.org/W2807225094","https://openalex.org/W2888427909","https://openalex.org/W2898712164","https://openalex.org/W2902076153","https://openalex.org/W2904289601","https://openalex.org/W2915385132","https://openalex.org/W2918691611","https://openalex.org/W2931853024","https://openalex.org/W2949073274","https://openalex.org/W2963660578","https://openalex.org/W2965442679","https://openalex.org/W2968267813","https://openalex.org/W2968514490","https://openalex.org/W2969807732","https://openalex.org/W2970634970","https://openalex.org/W2972080593","https://openalex.org/W2987263720","https://openalex.org/W2997756679","https://openalex.org/W3013109186","https://openalex.org/W3023244062","https://openalex.org/W3031405876","https://openalex.org/W3033289070","https://openalex.org/W3046760295","https://openalex.org/W3066421834","https://openalex.org/W3097397502","https://openalex.org/W3120591290","https://openalex.org/W3126476826","https://openalex.org/W3133596308","https://openalex.org/W3137836397","https://openalex.org/W3158562336","https://openalex.org/W3165498760","https://openalex.org/W3183257528","https://openalex.org/W3185267637","https://openalex.org/W3193739773","https://openalex.org/W3196313568","https://openalex.org/W3203723089","https://openalex.org/W3207595289","https://openalex.org/W3214568594","https://openalex.org/W3215635203","https://openalex.org/W4206323904","https://openalex.org/W4214858054","https://openalex.org/W4226028698","https://openalex.org/W4240980148","https://openalex.org/W4248291621","https://openalex.org/W4255929609","https://openalex.org/W4285145807","https://openalex.org/W4285236851","https://openalex.org/W4286257114","https://openalex.org/W4301465005","https://openalex.org/W4311940732","https://openalex.org/W4360591558","https://openalex.org/W4362007664","https://openalex.org/W4380993847","https://openalex.org/W4386501626","https://openalex.org/W6622411341","https://openalex.org/W6641057563","https://openalex.org/W6674796110","https://openalex.org/W6759162910","https://openalex.org/W6766417006","https://openalex.org/W6767111071","https://openalex.org/W6767270520","https://openalex.org/W6800114828","https://openalex.org/W6800285466","https://openalex.org/W7010268597"],"related_works":["https://openalex.org/W2989690789","https://openalex.org/W3088784215","https://openalex.org/W2021087413","https://openalex.org/W2400890210","https://openalex.org/W4381744352","https://openalex.org/W2184803487","https://openalex.org/W2949495265","https://openalex.org/W2054626033","https://openalex.org/W2953105088","https://openalex.org/W3110679839"],"abstract_inverted_index":{"Using":[0],"the":[1,28,37,42,45,50,70,81,85,101,109,117,128,132,154,162,167,175,179],"computational":[2],"resources":[3],"of":[4,19,26,96,103,111,119,161,174],"an":[5,200],"untrusted":[6],"third":[7,71],"party":[8,72],"to":[9,115,140,181],"crack":[10],"a":[11,16,62,92,112,120,141,194],"password":[12],"hash":[13,29,51,82,123],"can":[14,135],"pose":[15],"high":[17],"number":[18],"privacy":[20],"and":[21,44,138,190],"security":[22],"risks.":[23],"The":[24,125],"act":[25],"revealing":[27],"digest":[30],"could":[31],"in":[32,145,191],"itself":[33],"negatively":[34],"impact":[35],"both":[36,188],"data":[38,46],"subject":[39],"who":[40,48],"created":[41],"password,":[43],"controller":[47],"stores":[49],"digest.":[52],"This":[53,88],"paper":[54],"solves":[55],"this":[56],"currently":[57],"open":[58],"problem":[59],"by":[60,91,166],"presenting":[61],"Privacy-Preserving":[63],"Password":[64],"Cracking":[65],"protocol":[66,156,180],"(3PC),":[67],"that":[68],"prevents":[69],"cracking":[73,133,147],"server":[74,129],"from":[75],"learning":[76],"any":[77],"useful":[78],"information":[79,127],"about":[80],"digest,":[83],"or":[84],"recovered":[86],"cleartext.":[87],"is":[89],"achieved":[90],"tailored":[93],"anonymity":[94],"set":[95],"decoy":[97],"hashes,":[98],"based":[99],"on":[100,199],"concept":[102],"predicate":[104,113],"encryption,":[105],"where":[106],"we":[107],"extend":[108],"definition":[110],"function,":[114],"evaluate":[116],"output":[118],"one":[121],"way":[122],"function.":[124],"probabilistic":[126],"obtains":[130],"during":[131],"process":[134],"be":[136],"calculated":[137],"minimized":[139],"desired":[142],"level.":[143],"While":[144],"theory,":[146],"more":[148],"hashes":[149],"would":[150],"introduce":[151],"additional":[152],"overhead,":[153],"3PC":[155],"enables":[157],"constant-time":[158],"lookup":[159],"regardless":[160],"list":[163],"size,":[164],"limited":[165],"input/output":[168],"operation":[169],"per":[170],"second":[171],"(IOPS)":[172],"capabilities":[173],"third-party":[176],"server,":[177],"allowing":[178],"scale":[182],"efficiently.":[183],"We":[184],"demonstrate":[185],"these":[186],"claims":[187],"theoretically":[189],"practice,":[192],"with":[193],"real-life":[195],"use":[196],"case":[197],"implemented":[198],"FPGA":[201],"architecture.":[202]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}