~/talk

Accountable authentication with privacy protection: The Larch system for universal login

on YouTube 13m
Talkat OSDI 2023 · 2023-07-10..07-12· [security, cryptography]

speakers

name:Emma Dauterman
links:none on file
name:Danny Lin
links:none on file
name:Henry Corrigan-Gibbs
links:none on file
name:David Mazières
x:dmazieres

resources

video:https://youtu.be/AEl1F4MfIgA
slides:none on file

summary

Larch splits each authentication secret between client and a log server so an attacker who compromises a device cannot authenticate without producing an encrypted log record, and the log cannot learn which relying party was used. It works with unmodified FIDO2, TOTP and password logins and prevents the log from authenticating for users or linking accounts. Implementation uses two-party computation and a threshold ECDSA precomputation trick; measured latencies are 150ms (FIDO2), 91ms (TOTP, 1.23s preprocessing), and 74ms (passwords).

AI-written summary · about

chapters (7)

  1. 0:00The problem of SSO
  2. 1:31Introduction to Lark
  3. 2:17Lark design principles
  4. 4:27The Lark protocol
  5. 6:53Protocol optimization
  6. 9:57Evaluation and results
  7. 11:55Conclusion

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.