Aditya Mitra

Passkey in the Wooden Horse: A Deep Dive into Trojan Based Compromise of Passwordless Credentials

Beyond the Trust Boundary: A Critical Reassessment of the FIDO2 Threat Model

This work critically reassess the FIDO2 threat model and shows that several commonly assumed security properties do not hold under realistic deployment conditions, and concludes that effective FIDO2 security requires layered mitigations covering the browser, operating system, hardware, protocol stack, and metadata infr...

SSHafe: A Real-Time SSH Brute Force Attack Detection and Novel Credential Rotation Standard

The proposed novel password reset standard performs authentication and password update in a single cryptographically bound flow, eliminating the need for sessions, cookies, OTPs, or email-based verification, and mitigating phishing, session hijacking, CSRF, and replay attacks.

SFDS: Selective File Disclosure System

This paper proposes an architecture based on the Selective Disclosure JSON Web Token (SD-JWT) standard for securely sharing read-only files, which embeds cryptographic signatures and integrity protection directly into the shared resource, providing verifiable authenticity without relying on complex IAM infrastructures.