Evaluating the Security Posture of Real-World FIDO2 Deployments
Dhruv Kuchhal, Muhammad Saad, Adam Oest, Frank Li
Abstract
FIDO2 is a suite of protocols that combines the usability of local authentication (e.g., biometrics) with the security of public-key cryptography to deliver passwordless authentication. It eliminates shared authentication secrets (i.e., passwords, which could be leaked or phished) and provides strong security guarantees assuming the benign behavior of the client-side protocol components.
Topics & Concepts
Computer securityComputer sciencePasswordUsabilityAuthentication (law)Authentication protocolCryptographyProtocol (science)Cryptographic protocolBiometricsPublic-key cryptographyKey (lock)Challenge–response authenticationSuiteInternet privacyEncryptionHuman–computer interactionAlternative medicinePathologyHistoryArchaeologyMedicineUser Authentication and Security SystemsAdvanced Malware Detection TechniquesAdvanced Authentication Protocols Security