Zero-Knowledge Authentication

TL;DR

This paper proposes a zero-knowledge proof-based authentication system utilizing quadratic residuosity to enhance security over insecure networks, integrated within the extensible authentication protocol.

Contribution

It introduces a novel authentication method combining ZKP with EAP, leveraging quadratic residuosity for secure password verification.

Findings

Provides a secure password verification mechanism using ZKP

Enhances security over insecure networks

Integrates ZKP into EAP protocol

Abstract

In the thesis we focus on designing an authentication system to authenticate users over a network with a username and a password. The system uses the zero-knowledge proof (ZKP) system as a password verification mechanism. The ZKP protocol used is based on the quadratic residuosity problem. The authentication system is defined as a method in the extensible authentication protocol (EAP). Using a ZKP system yields interesting security properties that make the system favourable to be used over insecure networks.