Tag Archives: Security

Two Methods of Cryptographic Single Sign-On on Mobile Devices

This is the sixth and last post of a series discussing the paper A Comprehensive Approach to Cryptographic and Biometric Authentication from a Mobile Perspective. To conclude this series I am going to discuss briefly two methods of single sign-on … Continue reading

Posted in Identity | Tagged , , , , | Leave a comment

Using Cryptographic Authentication without a Cryptographic API on iOS and Android Devices

This is the fifth of a series of posts discussing the paper A Comprehensive Approach to Cryptographic and Biometric Authentication from a Mobile Perspective. Everybody agrees that passwords provide very poor security for user authentication, being vulnerable to capture by … Continue reading

Posted in Identity | Tagged , , , , | Leave a comment

Strong Authentication with a Low-Entropy Biometric Key

This is the fourth of a series of posts discussing the paper A Comprehensive Approach to Cryptographic and Biometric Authentication from a Mobile Perspective. Biometrics are a strong form of authentication when there is assurance of liveness, i.e. assurance that … Continue reading

Posted in Identity | Tagged , , , , , | Leave a comment

Defense in Depth of Cryptographic Credentials on a Mobile Device

This is the third of a series of posts discussing the paper A Comprehensive Approach to Cryptographic and Biometric Authentication from a Mobile Perspective. Credentials based on public key cryptography provide much stronger security than ordinary passwords or one-time passwords. … Continue reading

Posted in Identity | Tagged , , , , | Leave a comment

Pomcor’s Comments on the Cybersecurity Green Paper

We have written a response to the Call for Comments on the report entitled Cybersecurity, Innovations and the Internet Economy, written by the Internet Policy Task Force of the US Department of Commerce. In the response we call for research … Continue reading

Posted in Security | Tagged , , , , | Leave a comment