Title: Dynamic salt generation for mobile data security using elliptic curves against precomputation attacks

Authors: Bh. Padma; G.V.S. Raj Kumar

Addresses: Department of Computer Applications, Gayatri Vidya Parishad College for Degree and PG Courses, Rushikonda, Visakhapatnam-45, Andhra Pradesh, India ' Department of Information Technology, GITAM University, Rushikonda, Visakhapatnam-45, Andhra Pradesh, India

Abstract: Pattern lock is a mechanism that most of the people set to their Android smart phones. As the built-in pattern lock system adds an extra layer of protection and is one of the innovative unlock methods supported by Android, a fair quantity of study has been done about its (in)security. Pattern locks are not difficult to crack and are vulnerable to precomputation attacks such as brute forcing, dictionaries and rainbow tables. Older versions of Android produce SHA-1 signatures for authentication process which are not salted hashes. However, the newer versions of Android pattern locks utilise scrypt hash function that generates random salt value which needs to be stored in the database to withstand such attacks. But for pattern passwords attaching a salt value is still found not to be enough and susceptible to brute force. This research, therefore, proposes a method where it helps to produce and append a salt value to a password dynamically by representing the pattern using points of an elliptic curve. After the implementation and analysis, the results show this method exhibits strict avalanche criterion and passwords will become more tolerant to brute forcing, and other precomputation attacks which makes it more difficult to compromise.

Keywords: android; brute force; dictionaries; elliptic curves; rainbow tables; salt; smart phones; strict avalanche criterion.

DOI: 10.1504/IJIM.2017.085306

International Journal of Image Mining, 2017 Vol.2 No.3/4, pp.179 - 194

Received: 21 Jun 2016
Accepted: 19 Oct 2016

Published online: 21 Jul 2017 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article