A simple scheme to make passwords based on one-way functions much harder to crack

Computers and Security

Volumn 15, Issue 2, 1996, Pages 171-176

  Manber, Udi ^a  

^a Gould Simpson Building   (United States)

Author keywords

Authentication; Encryption; One way function; Passwords; Security

Indexed keywords

COMPUTER SOFTWARE; COMPUTERS; CRYPTOGRAPHY; FUNCTIONS;

AUTHENTICATION; DECRYPTION; ONE WAY FUNCTION; PASSWORDS;

SECURITY OF DATA;

EID: 0029696153     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/0167-4048(96)00003-X     Document Type: Article

References (13)

1. R. Morris and K. Thompson, Password security: a case history, Communications of the ACM, Vol. 22, (1979) 594-597.
2. M.V. Wilkes, Time-sharing Computer Systems, Elsevier, New York (1968).
3. C. Stoll, The Cuckoo's Egg, Doubleday, Garden City, NY (1989).
4. D.L. Jobush and A.E. Oldehoeft, A survey of password mechanisms: weaknesses and potential improvements, Part 1, Computers & Security, Vol. 8, (1989) 587-604
5. E.H. Spafford, Opus: preventing weak password choices, Computers & Security, Vol. 11, (1992) 273-278
6. Icons of the computer age, Harper's Magazine, p. 26 (Nov. 1991).
7. U. Manber and S. Wu, An algorithm for approximate membership checking with application to password security, Information Processing Letters, Vol. 50, (1994) 191-197.
8. S. Garfinkel and G. Spafford, Practical UNIX Security, O'Reilly and Associates, Inc., Sabastopol, CA (1991).
9. D.C. Feldmeier and P.R. Karn, UNIX password security - ten years later, Proceedings of the UNIX Security Workshop (Aug. 1989).
10. D.V. Klein, Foiling the cracker: a survey of, and improvement to, password security, UNIX Security Workshop II, pp. 5-14, The Usenix Association (Aug. 1990).
11. D.A. Curry, Unix System Security, Addison-Wesley, Reading, MA (1992).
12. J. Reid, Open systems security: traps and pitfalls, Computers & Security, Vol. 14, (1995) 496-517.
13. D.E. Muffett, Crack: a sensible password checker for Unix, a document distributed with the Crack 4.1 software package (Mar. 1992).