Details

Autor(en) / Beteiligte

• Ellison, Carl
• Hall, Chris
• Milbert, Randy
• Schneier, Bruce

Titel

Protecting secret keys with personal entropy

Ist Teil von

• Future generation computer systems, 2000-02, Vol.16 (4), p.311-318

Ort / Verlag

Elsevier B.V

Erscheinungsjahr

2000

Quelle

Alma/SFX Local Collection

Beschreibungen/Notizen

• Conventional encryption technology often requires users to protect a secret key by selecting a password or passphrase. While a good passphrase will only be known to the user, it also has the flaw that it must be remembered exactly in order to recover the secret key. As time passes, the ability to remember the passphrase fades and the user may eventually lose access to the secret key. We propose a scheme whereby a user can protect a secret key using the “personal entropy” in his own life, by encrypting the passphrase using the answers to several personal questions. We designed the scheme so the user can forget answers to a subset of the questions and still recover the secret key, while an attacker must learn the answer to a large subset of the questions in order to recover the secret key.