activity
20182025
most citedPasswords Are Meant to Be Secret: A Practical Secure Password Entry Channel for Web Browsers

1 citations · 1 across the 6 of their papers we have counts for

collaborators
Showing cs.CRShow all

6 papers · 1 filter

cs.CR2025

Passwords and FIDO2 Are Meant To Be Secret: A Practical Secure Authentication Channel for Web Browsers

Anuj Gautam, Tarun Yadav, Garrett Smith +2

Password managers provide significant security benefits to users. However, malicious client-side scripts and browser extensions can steal passwords after the manager has autofilled…

cs.CR2024★ 1 cited

Passwords Are Meant to Be Secret: A Practical Secure Password Entry Channel for Web Browsers

Anuj Gautam, Tarun Kumar Yadav, Kent Seamons +1

Password-based authentication faces various security and usability issues. Password managers help alleviate some of these issues by enabling users to manage their passwords effecti…

cs.CR2023

InfoGuard: A Design and Usability Study of User-Controlled Application-Independent Encryption for Privacy-Conscious Users

Tarun Yadav, Austin Cook, Justin Hales +1

Billions of secure messaging users have adopted end-to-end encryption (E2EE). Nevertheless, challenges remain. Most communication applications do not provide E2EE, and application…

cs.CR2023

A Security and Usability Analysis of Local Attacks Against FIDO2

Tarun Kumar Yadav, Kent Seamons

The FIDO2 protocol aims to strengthen or replace password authentication using public-key cryptography. FIDO2 has primarily focused on defending against attacks from afar by remote…

cs.CR2022

Automatic Detection of Fake Key Attacks in Secure Messaging

Tarun Kumar Yadav, Devashish Gosain, Amir Herzberg +2

Popular instant messaging applications such as WhatsApp and Signal provide end-to-end encryption for billions of users. They rely on a centralized, application-specific server to d…

cs.CR2018

SoK: Securing Email -- A Stakeholder-Based Analysis (Extended Version)

Jeremy Clark, P. C. van Oorschot, Scott Ruoti +2

While email is the most ubiquitous and interoperable form of online communication today, it was not conceived with strong security guarantees, and the ensuing security enhancements…