{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T16:20:48Z","timestamp":1783009248887,"version":"3.54.5"},"publisher-location":"Berlin, Heidelberg","reference-count":41,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783642331664","type":"print"},{"value":"9783642331671","type":"electronic"}],"license":[{"start":{"date-parts":[[2012,1,1]],"date-time":"2012-01-01T00:00:00Z","timestamp":1325376000000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1007\/978-3-642-33167-1_44","type":"book-chapter","created":{"date-parts":[[2012,8,18]],"date-time":"2012-08-18T10:07:05Z","timestamp":1345284425000},"page":"770-787","source":"Crossref","is-referenced-by-count":28,"title":["On the Security of Password Manager Database Formats"],"prefix":"10.1007","author":[{"given":"Paolo","family":"Gasti","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kasper B.","family":"Rasmussen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"44_CR1","unstructured":"Trusteer: Reused Login Credentials, http:\/\/www.trusteer.com\/sites\/default\/files\/cross-logins-advisory.pdf"},{"key":"44_CR2","doi-asserted-by":"crossref","unstructured":"Herzberg, A.: Why Johnny can\u2019t Surf (Safely)? Attacks and Defenses for Web Users. Computers & Security 28(1-2) (2009)","DOI":"10.1016\/j.cose.2008.09.007"},{"key":"44_CR3","volume-title":"SIGCHI Conference on Human Factors in Computing Systems","author":"R. Dhamija","year":"2006","unstructured":"Dhamija, R., Tygar, J., Hearst, M.: Why Phishing Works. In: SIGCHI Conference on Human Factors in Computing Systems. ACM, New York (2006)"},{"key":"44_CR4","unstructured":"RomanLab Co. Ltd.: USB password manager: When your password database is right where you need it, http:\/\/www.anypassword.com\/password-database-in-usb-password-manager.html"},{"key":"44_CR5","unstructured":"Siber Systems, Inc.: Roboform2go for USB drives, http:\/\/www.roboform.com\/platforms\/usb"},{"key":"44_CR6","unstructured":"Portable Apps: Keepass password safe portable, http:\/\/portableapps.com\/apps\/utilities\/keepass_portable"},{"key":"44_CR7","unstructured":"1Password: Automatic Syncing Using Dropbox, http:\/\/help.agilebits.com\/1Password3\/cloud_syncing_with_dropbox.html"},{"key":"44_CR8","unstructured":"KeePassDroid: Dropbox and KeePassDroid, http:\/\/blog.keepassdroid.com\/2010\/06\/dropbox-and-keepassdroid.html"},{"key":"44_CR9","unstructured":"AgileBits, Inc.: 1password, https:\/\/agilebits.com\/onepassword"},{"key":"44_CR10","unstructured":"Vanhove, M.: Kypass, http:\/\/itunes.apple.com\/us\/app\/kypass\/id425680960?mt=8"},{"key":"44_CR11","unstructured":"Pellin, B.: Keepassdroid, http:\/\/www.keepassdroid.com"},{"key":"44_CR12","unstructured":"Google: Get a fast, free web browser, https:\/\/www.google.com\/chrome\/"},{"key":"44_CR13","unstructured":"Mozilla: Firefox, http:\/\/www.mozilla.org\/"},{"key":"44_CR14","unstructured":"Microsoft: Internet Explorer 9, http:\/\/windows.microsoft.com\/en-us\/internet-explorer\/products\/ie\/home"},{"key":"44_CR15","unstructured":"KeePass \u2013 A Free and Open-source Password Manager, http:\/\/keepass.info\/"},{"key":"44_CR16","unstructured":"Muiznieks, R.: Passdrop, http:\/\/itunes.apple.com\/us\/app\/passdrop\/id431185109?mt=8"},{"key":"44_CR17","unstructured":"PINs, Secure Passwords Manager, http:\/\/www.mirekw.com\/winfreeware\/pins.html"},{"key":"44_CR18","unstructured":"Password Safe \u2013 Simple & Secure Password Management, http:\/\/passwordsafe.sourceforge.net\/"},{"key":"44_CR19","unstructured":"Pilhofer, F.: Password Gorilla, http:\/\/www.fpx.de\/fp\/Software\/Gorilla\/"},{"key":"44_CR20","unstructured":"Siber Systems, Inc.: RoboForm, http:\/\/www.roboform.com\/"},{"key":"44_CR21","volume-title":"SOUPS 2006","author":"S. Gaw","year":"2006","unstructured":"Gaw, S., Felten, E.: Password Management Strategies for Online Accounts. In: SOUPS 2006. ACM Press, Pittsburgh (2006)"},{"key":"44_CR22","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"284","DOI":"10.1007\/3-540-44706-7_20","volume-title":"Fast Software Encryption","author":"J. Katz","year":"2001","unstructured":"Katz, J., Yung, M.: Unforgeable Encryption and Chosen Ciphertext Secure Modes of Operation. In: Schneier, B. (ed.) FSE 2000. LNCS, vol.\u00a01978, pp. 284\u2013299. Springer, Heidelberg (2001)"},{"key":"44_CR23","doi-asserted-by":"crossref","unstructured":"Bellare, M., Namprempre, C.: Authenticated Encryption: Relations among Notions and Analysis of the Generic Composition Paradigm. J. Cryptology 21(4) (2008)","DOI":"10.1007\/s00145-008-9026-x"},{"key":"44_CR24","unstructured":"Google: Protect your synced data, http:\/\/support.google.com\/chrome\/bin\/answer.py?hl=en&answer=1181035"},{"key":"44_CR25","unstructured":"Mozilla: Firefox Sync for Mobile, http:\/\/www.mozilla.org\/en-US\/mobile\/sync\/"},{"key":"44_CR26","unstructured":"Frazier, M.: Sync Firefox from the Command Line, http:\/\/www.linuxjournal.com\/content\/sync-firefox-command-line"},{"key":"44_CR27","unstructured":"Microsoft Dev Center: CryptProtectData function, http:\/\/msdn.microsoft.com\/en-us\/library\/windows\/desktop\/aa380261v=vs.85.aspx"},{"key":"44_CR28","unstructured":"AgileBits, Inc.: 1password agile keychain design, http:\/\/help.agilebits.com\/1Password3\/agile_keychain_design.html"},{"key":"44_CR29","unstructured":"GNU zip: The GZIP homepage, http:\/\/www.gzip.org\/"},{"key":"44_CR30","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"84","DOI":"10.1007\/978-3-540-68351-3_8","volume-title":"New Stream Cipher Designs","author":"D.J. Bernstein","year":"2008","unstructured":"Bernstein, D.J.: The Salsa20 Family of Stream Ciphers. In: Robshaw, M., Billet, O. (eds.) New Stream Cipher Designs. LNCS, vol.\u00a04986, pp. 84\u201397. Springer, Heidelberg (2008)"},{"key":"44_CR31","unstructured":"Gasti, P., Rasmussen, K.: On The Security of Password Manager Database Formats. Technical report, UCI (2012), Available from Cryptology ePrint Archive, http:\/\/eprint.iacr.org"},{"key":"44_CR32","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"449","DOI":"10.1007\/3-540-45708-9_29","volume-title":"Advances in Cryptology - CRYPTO 2002","author":"I. Damgaard","year":"2002","unstructured":"Damgaard, I., Nielsen, J.: Expanding Pseudorandom Functions; or: From Known-Plaintext Security to Chosen-Plaintext Security. In: Yung, M. (ed.) CRYPTO 2002. LNCS, vol.\u00a02442, pp. 449\u2013464. Springer, Heidelberg (2002)"},{"key":"44_CR33","unstructured":"Password Safe V3 Database Format, http:\/\/passwordsafe.svn.sourceforge.net\/viewvc\/passwordsafe\/trunk\/pwsafe\/pwsafe\/docs\/"},{"key":"44_CR34","unstructured":"Schneier, B., Kelsey, J., Whiting, D., Wagner, D., Hall, C.: Twofish: A 128-Bit Block Cipher. Current 21(1) (1998)"},{"key":"44_CR35","unstructured":"Ferguson, N.: AES-CBC + Elephant diffuser A Disk Encryption Algorithm for Windows Vista. Technical report, Microsoft Research (2006)"},{"key":"44_CR36","unstructured":"Luo, H., Henry, P.: A Common Password Method for Protection of Multiple Accounts. In: International Symposium on Personal, Indoor and Mobile Radio Communication (2003)"},{"key":"44_CR37","unstructured":"Blasko, G., Narayanaswami, C., Raghunath, M.: A Wristwatch-Computer Based Password-Vault. Technical report, IBM Research Division (2005)"},{"key":"44_CR38","doi-asserted-by":"crossref","unstructured":"Englert, B., Shah, P.: On the Design and Implementation of a secure Online Password Vault. In: ICHIT 2009. ACM Press (2009)","DOI":"10.1145\/1644993.1645063"},{"key":"44_CR39","unstructured":"Bonneau, J., Preibusch, S.: The Password Thicket: Technical and Market Failures in Human Authentication on the Web. Information Security 8(1) (2010)"},{"key":"44_CR40","unstructured":"Belenko, A., Sklyarov, D.: \u201cSecure Password Managers\u201d and \u201cMilitary-Grade Encryption\u201d on Smartphones: Oh, Really? Technical report, Elcomsoft Co. Ltd. (2012), http:\/\/www.elcomsoft.com\/WP\/BH-EU-2012-WP.pdf"},{"key":"44_CR41","doi-asserted-by":"crossref","unstructured":"Katz, J., Lindell, Y.: Introduction to Modern Cryptography. Chapman & Hall\/CRC (2008)","DOI":"10.1201\/9781420010756"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2012"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-33167-1_44","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,26]],"date-time":"2022-01-26T21:03:25Z","timestamp":1643231005000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-33167-1_44"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012]]},"ISBN":["9783642331664","9783642331671"],"references-count":41,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-33167-1_44","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2012]]}}}