Abstract:We built a system for protecting passwords stored on servers. We started with dongles, and expanded into hosted system with web service interface. Scalable, server-compromise resilient thing is next.

Bio:Many years' experience in analysing security and crypto architectures of large banking information systems (Swift, card payment processing, Faster Payments, IBM and Cryptomathic key management systems). Three years at the University of Cambridge and more than ten years of academic experience. Expert on information security and applied cryptography, IT system architectures, embedded C programming. Practical experience with software and hardware products (smart cards, hardware security modules, COTS systems) and implementations - design, testing, devising attacks and defences. Specialties: Cryptography in banking systems, security of wireless networks, security of smart cards, public key infrastructures, key management, password security. ….Can't say much more as some results here could actually cost people a lot of money.

Back to Passwords Con 2014 video list