{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,6]],"date-time":"2025-12-06T21:51:30Z","timestamp":1765057890037,"version":"3.46.0"},"publisher-location":"Singapore","reference-count":26,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819551187","type":"print"},{"value":"9789819551194","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,12,7]],"date-time":"2025-12-07T00:00:00Z","timestamp":1765065600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,12,7]],"date-time":"2025-12-07T00:00:00Z","timestamp":1765065600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-981-95-5119-4_7","type":"book-chapter","created":{"date-parts":[[2025,12,6]],"date-time":"2025-12-06T21:45:08Z","timestamp":1765057508000},"page":"205-234","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Password-Hardened Encryption Revisited"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-9310-8964","authenticated-orcid":false,"given":"Ruben","family":"Baecker","sequence":"first","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0164-0187","authenticated-orcid":false,"given":"Paul","family":"Gerhart","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6943-8914","authenticated-orcid":false,"given":"Dominique","family":"Schr\u00f6der","sequence":"additional","affiliation":[]}],"member":"297","published-online":{"date-parts":[[2025,12,7]]},"reference":[{"key":"7_CR1","doi-asserted-by":"crossref","unstructured":"Agrawal, S., Miao, P., Mohassel, P., Mukherjee, P.: PASTA: PASsword-based threshold authentication. In: Lie, D., Mannan, M., Backes, M., Wang, X. (eds.) ACM CCS 2018, pp. 2042\u20132059. ACM Press (2018)","DOI":"10.1145\/3243734.3243839"},{"key":"7_CR2","unstructured":"The\u00a0Go Authors: The go programming language (2025). https:\/\/go.dev"},{"key":"7_CR3","doi-asserted-by":"crossref","unstructured":"Bagherzandi, A., Jarecki, S., Saxena, N., Lu, Y.: Password-protected secret sharing. In: Chen, Y., Danezis, G., Shmatikov, V. (eds.) ACM CCS 2011, pp. 433\u2013444. ACM Press (2011)","DOI":"10.1145\/2046707.2046758"},{"key":"7_CR4","unstructured":"Barker, E.: NIST special publication 800-57 part 1, revision 5. https:\/\/nvlpubs.nist.gov\/nistpubs\/SpecialPublications\/NIST.SP.800-57pt1r5.pdf. Accessed 21 Jan 2025"},{"key":"7_CR5","doi-asserted-by":"crossref","unstructured":"Baum, C., Frederiksen, T.K., Hesse, J., Lehmann, A., Yanai, A.: PESTO: proactively secure distributed single sign-on, or how to trust a hacked server. In: 2020 IEEE European Symposium on Security and Privacy, pp. 587\u2013606. IEEE Computer Society Press (2020)","DOI":"10.1109\/EuroSP48549.2020.00044"},{"key":"7_CR6","doi-asserted-by":"crossref","unstructured":"Brost, J., Egger, C., Lai, R.W.F., Schmid, F., Schr\u00f6der, D., Zoppelt, M.: Threshold password-hardened encryption services. In: Ligatti, J., Ou, X., Katz, J., Vigna, G. (eds.) ACM CCS 2020, pp. 409\u2013424. ACM Press (2020)","DOI":"10.1145\/3372297.3417266"},{"key":"7_CR7","series-title":"Part II, volume 8617 of LNCS","doi-asserted-by":"publisher","first-page":"256","DOI":"10.1007\/978-3-662-44381-1_15","volume-title":"CRYPTO 2014","author":"J Camenisch","year":"2014","unstructured":"Camenisch, J., Lehmann, A., Lysyanskaya, A., Neven, G.: Memento: how to reconstruct your secrets from a single password in a hostile environment. In: Garay, J.A., Gennaro, R. (eds.) CRYPTO 2014. Part II, volume 8617 of LNCS, pp. 256\u2013275. Springer, Berlin, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-662-44381-1_15"},{"key":"7_CR8","doi-asserted-by":"crossref","unstructured":"Camenisch, J., Lehmann, A., Neven, G.: Optimal distributed password verification. In: Ray, I., Li, N., Kruegel, C. (eds.) ACM CCS 2015, pp. 182\u2013194. ACM Press (2015)","DOI":"10.1145\/2810103.2813722"},{"key":"7_CR9","doi-asserted-by":"crossref","unstructured":"Das, P., Hesse, J., Lehmann, A.: DPaSE: distributed password-authenticated symmetric-key encryption, or how to get many keys from one password. In: Suga, Y., Sakurai, K., Ding, X., Sako, K. (eds.) ASIACCS 22, pp. 682\u2013696. ACM Press (2022)","DOI":"10.1145\/3488932.3517389"},{"key":"7_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"441","DOI":"10.1007\/978-3-030-22038-9_21","volume-title":"Detection of Intrusions and Malware, and Vulnerability Assessment","author":"C Diomedous","year":"2019","unstructured":"Diomedous, C., Athanasopoulos, E.: Practical password hardening based on TLS. In: Perdisci, R., Maurice, C., Giacinto, G., Almgren, M. (eds.) DIMVA 2019. LNCS, vol. 11543, pp. 441\u2013460. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-22038-9_21"},{"key":"7_CR11","unstructured":"Everspaugh, A., Chaterjee, R., Scott, S., Juels, A., Ristenpart, T.: The Pythia PRF service. In: Jung, J., Holz, T. (eds.) USENIX Security 2015, pp. 547\u2013562. USENIX Association (2015)"},{"key":"7_CR12","unstructured":"Fortinet: 2024 state of operational technology and cybersecurity report. Technical report, Fortinet (2024). Accessed 7 May 2025"},{"key":"7_CR13","unstructured":"Google: Google cloud kms documentation: key rotation. https:\/\/cloud.google.com\/kms\/docs\/key-rotation. Accessed 21 Jan 2025"},{"key":"7_CR14","unstructured":"Identity Theft resource center: 2023 annual data breach report reveals record number of compromises, 72 percent increase over previous high (2023). Accessed 21 Jan 2025"},{"key":"7_CR15","series-title":"Part II, volume 8874 of LNCS","first-page":"233","volume-title":"ASIACRYPT 2014","author":"S Jarecki","year":"2014","unstructured":"Jarecki, S., Kiayias, A., Krawczyk, H.: Round-optimal password-protected secret sharing and T-PAKE in the password-only model. In: Sarkar, P., Iwata, T. (eds.) ASIACRYPT 2014. Part II, volume 8874 of LNCS, pp. 233\u2013253. Springer, Berlin, Heidelberg (2014)"},{"key":"7_CR16","series-title":"LNCS","doi-asserted-by":"publisher","first-page":"39","DOI":"10.1007\/978-3-319-61204-1_3","volume-title":"ACNS 17International Conference on Applied Cryptography and Network Security","author":"S Jarecki","year":"2017","unstructured":"Jarecki, S., Kiayias, A., Krawczyk, H., Jiayu, X.: TOPPSS: cost-minimal password-protected secret sharing based on threshold OPRF. In: Gollmann, D., Miyaji, A., Kikuchi, H. (eds.) ACNS 17International Conference on Applied Cryptography and Network Security. LNCS, vol. 10355, pp. 39\u201358. Springer, Cham (2017)"},{"key":"7_CR17","series-title":"Part II, volume 10770 of LNCS","first-page":"431","volume-title":"PKC 2018","author":"S Jarecki","year":"2018","unstructured":"Jarecki, S., Krawczyk, H., Shirvanian, M., Saxena, N.: Two-factor authentication with end-to-end password security. In: Abdalla, M., Dahab, R. (eds.) PKC 2018. Part II, volume 10770 of LNCS, pp. 431\u2013461. Springer, Cham (2018)"},{"key":"7_CR18","doi-asserted-by":"crossref","unstructured":"Jia, C.,\u00a0Wu, S.,\u00a0Wang, D.: Reliable password hardening service with opt-out. In: 2022 41st International Symposium on Reliable Distributed Systems (SRDS), pp. 250\u2013261, Los Alamitos, CA, USA (2022). IEEE Computer Society","DOI":"10.1109\/SRDS55811.2022.00031"},{"key":"7_CR19","unstructured":"Lai, R.W., Egger, C., Reinert, M., Chow, S.S., Maffei, M., Schr\u00f6der, D.: Simple password-hardened encryption services. In: Enck, W., Felt, A.P., (eds.) USENIX Security 2018, pp. 1405\u20131421. USENIX Association (2018)"},{"key":"7_CR20","unstructured":"Lai, R.W., Egger, C., Schr\u00f6der, D., Chow, S.S.: Phoenix: Rebirth of a cryptographic password-hardening service. In: Kirda, E., Ristenpart, T. (eds.) USENIX Security 2017, pp. 899\u2013916. USENIX Association (2017)"},{"key":"7_CR21","unstructured":"Miessler, D., and contributors: SecLists: common-credentials 10 million password list (top 1,000,000) (2025). https:\/\/github.com\/danielmiessler\/SecLists\/blob\/master\/Passwords\/Common-Credentials\/10-million-password-list-top-1000000.txt. Accessed 11 Jan 2025"},{"key":"7_CR22","unstructured":"Muffett, A.: Facebook password hashing & authentication. https:\/\/www.youtube.com\/watch?v=7dPRFoKteIU. Accessed 21 Feb 2023"},{"key":"7_CR23","unstructured":"Percival, C.: Stronger key derivation via sequential memory-hard functions. In: BSDCan 2009 (2009)"},{"key":"7_CR24","doi-asserted-by":"crossref","unstructured":"Schneider, J., Fleischhacker, N., Schr\u00f6der, D., Backes, M.: Efficient cryptographic password hardening services from partially oblivious commitments. In: Weippl, E.R., Katzenbeisser, S., Kruegel, C., Myers, A.C., Halevi, S. (eds.) ACM CCS 2016, pp. 1192\u20131203. ACM Press (2016)","DOI":"10.1145\/2976749.2978375"},{"key":"7_CR25","unstructured":"Virgil Security: Virgil PHE GO. https:\/\/github.com\/VirgilSecurity\/virgil-phe-go, 2025. Commit 7acc0de. https:\/\/github.com\/VirgilSecurity\/virgil-phe-go\/tree\/7acc0de"},{"key":"7_CR26","unstructured":"Security Standards Council: PCI DSS v4.0.1 (section 15, 3.7.4 & 3.7.5). https:\/\/docs-prv.pcisecuritystandards.org\/PCI%20DSS\/Standard\/PCI-DSS-v4_0_1.pdf. Accessed 21 Jan 2025"}],"container-title":["Lecture Notes in Computer Science","Advances in Cryptology \u2013 ASIACRYPT 2025"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-95-5119-4_7","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,6]],"date-time":"2025-12-06T21:45:19Z","timestamp":1765057519000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-95-5119-4_7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,12,7]]},"ISBN":["9789819551187","9789819551194"],"references-count":26,"URL":"https:\/\/doi.org\/10.1007\/978-981-95-5119-4_7","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,12,7]]},"assertion":[{"value":"7 December 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ASIACRYPT","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on the Theory and Application of Cryptology and Information Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Melbourne, VIC","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Australia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8 December 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12 December 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"asiacrypt2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/asiacrypt.iacr.org\/2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}