The Pythia PRF Service

Adam Everspaugh; Rahul Chatterjee; Ari Juels; Samuel Scott; Thomas Ristenpart

The Pythia PRF Service

Adam Everspaugh, Rahul Chatterjee, Ari Juels, Samuel Scott, Thomas Ristenpart

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

Conventional cryptographic services such as hardware-security modules and
software-based key management systems offer the ability to apply a pseudorandom function (PRF) such as HMAC to inputs of a client's choosing. These services are used, for example, to harden stored password hashes against offline brute-force attacks. We propose a modern PRF service called PYTHIA designed to offer a level of flexibility, security, and ease of deployability lacking in prior approaches.

Original language	English
Title of host publication	Proceedings of the 24th USENIX Conference on Security Symposium
Publisher	USENIX Association
Pages	547
Number of pages	15
Publication status	Published - Aug 2015

Access to Document

https://www.usenix.org/node/190917

1 Doctoral Thesis

The Design and Analysis of Real-World Cryptographic Protocols
Scott, S., 2018, (Unpublished) 218 p.
Research output: Thesis › Doctoral Thesis

File

Cite this

@inproceedings{77cf70f42ebb4bb184e592d4444d0b13,

title = "The Pythia PRF Service",

abstract = "Conventional cryptographic services such as hardware-security modules andsoftware-based key management systems offer the ability to apply a pseudorandom function (PRF) such as HMAC to inputs of a client's choosing. These services are used, for example, to harden stored password hashes against offline brute-force attacks. We propose a modern PRF service called PYTHIA designed to offer a level of flexibility, security, and ease of deployability lacking in prior approaches. ",

author = "Adam Everspaugh and Rahul Chatterjee and Ari Juels and Samuel Scott and Thomas Ristenpart",

year = "2015",

month = aug,

language = "English",

pages = "547",

booktitle = "Proceedings of the 24th USENIX Conference on Security Symposium",

publisher = "USENIX Association",

}

TY - GEN

T1 - The Pythia PRF Service

AU - Everspaugh, Adam

AU - Chatterjee, Rahul

AU - Juels, Ari

AU - Scott, Samuel

AU - Ristenpart, Thomas

PY - 2015/8

Y1 - 2015/8

N2 - Conventional cryptographic services such as hardware-security modules andsoftware-based key management systems offer the ability to apply a pseudorandom function (PRF) such as HMAC to inputs of a client's choosing. These services are used, for example, to harden stored password hashes against offline brute-force attacks. We propose a modern PRF service called PYTHIA designed to offer a level of flexibility, security, and ease of deployability lacking in prior approaches.

AB - Conventional cryptographic services such as hardware-security modules andsoftware-based key management systems offer the ability to apply a pseudorandom function (PRF) such as HMAC to inputs of a client's choosing. These services are used, for example, to harden stored password hashes against offline brute-force attacks. We propose a modern PRF service called PYTHIA designed to offer a level of flexibility, security, and ease of deployability lacking in prior approaches.

M3 - Conference contribution

SP - 547

BT - Proceedings of the 24th USENIX Conference on Security Symposium

PB - USENIX Association

ER -

The Pythia PRF Service

Abstract

Access to Document

Research output

The Design and Analysis of Real-World Cryptographic Protocols

Cite this