Disrupting Password Attack Using Compression

摘要

Methods and systems for disrupting password attacks using compression are described. A user password may be stored on a mobile computing device. The password may be compressed, for example, using a Huffman compression algorithm, and may be subsequently encrypted using a short secret as a key. The user password may be stored as the compressed and encrypted key. The compressed and encrypted password may be stored such that a brute force password attack, for example, using every possible short secret, would reveal too may possible matches to allow an attacker to select the real password.

主权项

1. A method comprising:
receiving, at a mobile computing device, a short secret and a long password; compressing the long password; encrypting the compressed long password with the short secret as the key; and storing the compressed and encrypted long password.