Mind the GeekQuickie15min
Revisiting user registration and authentication
This talk explores enhancing user registration and authentication by combining two cryptographic protocols: Proof of Work (PoW) and Zero-Knowledge Password Proof (ZKPP). While these protocols are established in cryptocurrencies and password managers, their integration can offer a more robust and secure solution than standard framework implementations.
Vassilis PoursalidisEpignosis
talkDetail.whenAndWhere
talks.scheduleTBD
Αndreas & Maria Kalokairinou
talks.roomOccupancytalks.noOccupancyInfo
All Apps are faced with the problem of how to register users and authenticate them. But user registration and authentication is boilerplate while implementing your idea.
So you either implement something very basic or rely on what is provided to you by the framework you selected. And while there are alternative solutions (SSO, OAuth etc), almost always this default build-in authentication mechanism will exist for years to come.
But we can do better! In this talk we will discuss about two cryptographic protocols:
- Proof of Work (PoW) and
- Zero-Knowledge Password Proof (ZKPP),
that can help us with user registration and authentication. Using those protocols we can have a very robust solution, more secure than most available implementations inside frameworks.
Both protocols are not new and are widely used: PoW in cryptocurrencies and ZKPP in password managers, but in this talk we will discuss on how to combine them and strengthen not only the authentication but also our entire solution.
So you either implement something very basic or rely on what is provided to you by the framework you selected. And while there are alternative solutions (SSO, OAuth etc), almost always this default build-in authentication mechanism will exist for years to come.
But we can do better! In this talk we will discuss about two cryptographic protocols:
- Proof of Work (PoW) and
- Zero-Knowledge Password Proof (ZKPP),
that can help us with user registration and authentication. Using those protocols we can have a very robust solution, more secure than most available implementations inside frameworks.
Both protocols are not new and are widely used: PoW in cryptocurrencies and ZKPP in password managers, but in this talk we will discuss on how to combine them and strengthen not only the authentication but also our entire solution.
Vassilis Poursalidis
Vassilis has nearly 20 years of experience working in diverse projects in the technology industry, with a strong record of leadership and technical expertise. He is currently an Engineering Director at Epignosis, dedicated to fostering a collaborative team environment.