123 citations · 443 across the 21 of their papers we have counts for
7 papers · 1 filter
MFDPG: Multi-Factor Authenticated Password Management With Zero Stored Secrets
Vivek Nair, Dawn Song
While password managers are a vital tool for internet security, they can also create a massive central point of failure, as evidenced by several major recent data breaches. For ove…
Multi-Factor Credential Hashing for Asymmetric Brute-Force Attack Resistance
Vivek Nair, Dawn Song
Since the introduction of bcrypt in 1999, adaptive password hashing functions, whereby brute-force resistance increases symmetrically with computational difficulty for legitimate u…
Decentralizing Custodial Wallets with MFKDF
Vivek Nair, Dawn Song
The average cryptocurrency user today faces a difficult choice between centralized custodial wallets, which are notoriously prone to spontaneous collapse, or cumbersome self-custod…
Unique Identification of 50,000+ Virtual Reality Users from Head & Hand Motion Data
Vivek Nair, Wenbo Guo, Justus Mattern +4
With the recent explosive growth of interest and investment in virtual reality (VR) and the so-called "metaverse," public attention has rightly shifted toward the unique security a…
Going Incognito in the Metaverse: Achieving Theoretically Optimal Privacy-Usability Tradeoffs in VR
Vivek Nair, Gonzalo Munilla Garrido, Dawn Song
Virtual reality (VR) telepresence applications and the so-called "metaverse" promise to be the next major medium of human-computer interaction. However, with recent studies demonst…
Multi-Factor Key Derivation Function (MFKDF) for Fast, Flexible, Secure, & Practical Key Management
Vivek Nair, Dawn Song
We present the first general construction of a Multi-Factor Key Derivation Function (MFKDF). Our function expands upon password-based key derivation functions (PBKDFs) with support…
Exploring the Privacy Risks of Adversarial VR Game Design
Vivek Nair, Gonzalo Munilla Garrido, Dawn Song +1
Fifty study participants playtested an innocent-looking "escape room" game in virtual reality (VR). Within just a few minutes, an adversarial program had accurately inferred over 2…