English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Using the computational resources of an untrusted third party to crack apassword hash can pose a high number of privacy and security risks. The act ofrevealing the hash digest could in itself negatively impact both the datasubject who created the password, and the data controller who stores the hashdigest. This paper solves this currently open problem by presenting aPrivacy-Preserving Password Cracking protocol (3PC), that prevents the thirdparty cracking server from learning any useful information about the hashdigest, or the recovered cleartext. This is achieved by a tailored anonymityset of decoy hashes, based on the concept of predicate encryption, where weextend the definition of a predicate function, to evaluate the output of a oneway hash function. The protocol allows the client to maintain plausibledeniability where the real choice of hash digest cannot be proved, even by theclient itself. The probabilistic information the server obtains during thecracking process can be calculated and minimized to a desired level. While intheory cracking a larger set of hashes would decrease computational speed, the3PC protocol provides constant-time lookup on an arbitrary list size, boundedby the input/output operation per second (IOPS) capabilities of the third partyserver, thereby allowing the protocol to scale efficiently. We demonstratethese claims both theoretically and in practice, with a real-life use caseimplemented on an FPGA architecture.

Privacy-Preserving Password Cracking: How a Third Party Can Crack Our Password Hash Without Learning the Hash Value or the Cleartext