Post-quantum secure server-aided password-based authentication using Module-LWE.

Area of Science:

• Computer Science
• Cryptography
• Cybersecurity

Background:

• Password authentication is prevalent but vulnerable to offline dictionary attacks.
• Current server-aided schemes lack post-quantum security and use complex computations.
• Quantum computing poses a threat to existing cryptographic assumptions.

Purpose of the Study:

• Introduce a novel server-aided password-based authentication scheme.
• Achieve post-quantum security using the Module Learning With Errors (M-LWE) problem.
• Ensure operational transparency and user convenience.

Main Methods:

• Developed a new authentication protocol based on the M-LWE problem.
• Integrated a transparent key rotation mechanism for database updates.
• Conducted formal security analysis using the Real-or-Random (RoR) framework.
• Implemented an optimized NTT-based approach for polynomial multiplication.

Main Results:

• The protocol is resistant to offline dictionary attacks, relying on M-LWE hardness.
• Achieved forward secrecy via the key rotation mechanism.
• Demonstrated high computational efficiency with low registration (0.88 ms) and authentication (0.96 ms) latencies.
• The scheme integrates seamlessly with existing web interfaces without user modification.

Conclusions:

• The proposed scheme offers a practical and secure post-quantum solution for password-based authentication.
• The transparent key rotation ensures long-term resilience and simplifies key management.
• The M-LWE foundation provides robust security against future quantum threats.