This paper is

Detection of password reuse and credential stuffing: a server-side approach

The widespread adoption of password-based authentication across diverse digital platforms, has significantly heightened exposure to security threats. Due to memorability constraints, users often reuse passwords across multiple platforms, thereby increasing vulnerability to credential-stuffing attacks. Although pass...

Threshold Cryptography for Leakage-Resilient Single Sign-On: A Comparative Security Analysis and Architecture Framework

Single Sign-On (SSO) is now a common way to log in to cloud platforms, enterprise systems, mobile apps, and shared digital services, but traditional deployments remain vulnerable to credential leakage, phishing, token theft, replay attacks, and identity-provider compromise. Recent research has turned to threshold crypt...

The State of Passkeys: Studying the Adoption and Security of Passkeys on the Web

Fast and Secure Simultaneous Authentication of Equals for WPA3

The Simultaneous Authentication of Equals (SAE) protocol, introduced in WPA3, provides robust protection against offline dictionary attacks against a network Pre-Shared Key (PSK) and also protection of session keys from other people knowing that PSK. However, its high computational cost for the Password Element (PE) de...

Privex: A Privacy-Preserving Online Meeting System Using Hybrid Cryptography

In this paper, a behaviour-sensitive session orchestration architecture over secure communication and the rationale behind it will be proposed and discussed, which is a variant of mixed public-key cryptography that aims at offering more manageable, secret, and authenticity in real-time messaging infrastructure. The arc...

Quantum-Safe Web Service Architecture Using Time-Based One-Time Passwords

One-Time Passwords (OTPs) have become a common option for multi-factor authentication in several applications. For instance, during website login processes, OTPs are often used in conjunction with traditional text-based usernames and passwords to verify whether the access request originates from a legitimate human user...