System, method, and computer program product for performing hardware backed symmetric operations for password based authentication
A system, method, and computer program product are provided for implementing hardware backed symmetric operations for password based authentication. In operation, a system receives a request to access software utilizing password-based authentication. Further, the system receives a password for the password-based authentication. The system computes a hash utilizing the password and a hardware-based authenticator associated with hardware of the system utilizing hardware backed symmetric encryption. Moreover, the system verifies that the hash computed utilizing the password and the hardware-based authenticator is correct for accessing the software.
1. A method, comprising:
receiving, by a system, a request to access software utilizing password-based authentication;
receiving, by the system, a password for the password-based authentication;
computing, by the system, a hash utilizing the password and a hardware-based authenticator associated with hardware of the system, wherein the hash is computed utilizing a combination of a single implementation of a hardware-based symmetric encryption algorithm provided by a hardware-backed cryptographic module of the system and two implementations of a software-based one-way pseudorandom function by:
utilizing a first implementation of the two implementations of the software-based one-way pseudorandom function, utilizing the single implementation of the hardware-based symmetric encryption algorithm after the first implementation of the software-based one-way pseudorandom function, and utilizing a second implementation of the two implementations of the software-based one-way pseudorandom function after utilizing the single implementation of the hardware-based symmetric encryption algorithm; and
verifying, by the system, that the hash computed utilizing the password and the hardware-based authenticator is correct for accessing the software.
2. A non-transitory computer readable medium storing computer code executable by a processor to perform a method comprising:
receiving, by a system, a request to access software utilizing password-based authentication;
receiving, by the system, a password for the password-based authentication;
computing, by the system, a hash utilizing the password and a hardware-based authenticator associated with hardware of the system, wherein the hash is computed utilizing a combination of a single implementation of a hardware-based symmetric encryption algorithm provided by a hardware-backed cryptographic module of the system and two implementations of a software-based one-way pseudorandom function by:
utilizing a first implementation of the two implementations of the software-based one-way pseudorandom function, utilizing the single implementation of the hardware-based symmetric encryption algorithm after the first implementation of the software-based one-way pseudorandom function, and utilizing a second implementation of the two implementations of the software-based one-way pseudorandom function after utilizing the single implementation of the hardware-based symmetric encryption algorithm; and
verifying, by the system, that the hash computed utilizing the password and the hardware-based authenticator is correct for accessing the software.
3. A system, comprising:
a memory storing instructions, and
a computer processor executing the instructions for:
receiving, by the system, a request to access software utilizing password-based authentication;
receiving, by the system, a password for the password-based authentication;
computing, by the system, a hash utilizing the password and a hardware-based authenticator associated with hardware of the system, wherein the hash is computed utilizing a combination of a single implementation of a hardware-based symmetric encryption algorithm provided by a hardware-backed cryptographic module of the system and two implementations of a software-based one-way pseudorandom function by:
utilizing a first implementation of the two implementations of the software-based one-way pseudorandom function, utilizing the single implementation of the hardware-based symmetric encryption algorithm after the first implementation of the software-based one-way pseudorandom function, and utilizing a second implementation of the two implementations of the software-based one-way pseudorandom function after utilizing the single implementation of the hardware-based symmetric encryption algorithm; and
verifying, by the system, that the hash computed utilizing the password and the hardware-based authenticator is correct for accessing the software.