Title: Theory / Unimportant / CS / Usability / Password / Cue-Pin-Select, a Secure and Usable Offline Password Scheme
Tags: fromAlgorithm hasNotNewEffectReturnsMeaning

Name: Minimal condition for a password scheme
Definition: Analyzable
Page: 2
Definition2: Publishable
Conjdef: All of
Definition3: Secure
Definition4: Self-rehearsing
Definition5: Humanly usable

Name: Non-Minimal condition for a password scheme
Definition: Agent-independent
Page: 2
Definition2: Durable
Conjdef: at least
Definition3: Scalable

Name: Analyzable password scheme
Definition: A scheme following a deterministic algorithm whose security can be assessed.
Page: 2

Name: Publishable password scheme
Definition: A scheme which is public
Page: 2
Context: password

Name: secure password scheme
Definition: A scheme such that even an adversary with higher means cannot crack a user’s password.
Page: 2

Name: self-rehearsing password scheme
Definition: A scheme such that the only training needed to remember all of one’s passwords should come from normal use of the scheme itself.
Page: 2

Name: Humanly usable password scheme
Definition: that a human can easily learn and apply the scheme within reasonable time bounds
Page: 2
Context: Password scheme

Name: Agent-independent password scheme
Definition: A scheme that should be doable in one’s head without needing assistance from a physical or computational system
Page: 2
Context: Password

Name: Durable password scheme
Definition: A password scheme which is adaptable to idiosyncratic requirements, including the ones that require users to frequently change their passwords. It should also be compatible with existing technologie
Page: 2

Name: Scalable password scheme
Definition: A scheme that stay secure even for a large number of passwords.
Page: 2

Page: 2
Name: Cue-pin-Select algorithm
Returns: a random 12 characters string
Index: 4
Kind: algo
Input: A sentence of 6 common words
4 digits
a 4 letter cues

Question: (dis)advantage of obscur complex password scheme
Answer: there are no tool to attack it
Page: 3
Answer2: It can't be shared widely
Index: 4
Kind: algo

Question: What reduces entropy in passphrase generation of Cue-pin-Select ?
Answer: selecting the order of the word (3-7 bits)
Page: 4
Answer2: redrawing to obtain a better passphrase (2 bit)
Kind: algo

Question: How to choose cues
Answer: try to take cues very distinct fom cues you'd have from another service
Page: 6
Context: Cue-pin-Select

Question: How to deal with upper case requirement
Answer: Uppercase a letter in the cue, uppercase the same letter in the generated password
Page: 7
Context: Cue-pin-Select

Question: How to deal with number requirement
Answer: Start with 0. Insert it in the middle of password. Increase each time password is renewed
Page: 8
Context: Cue-pin-Select

Question: How to deal with requirement of special character
Answer: Fix a caracter, and put it everytime at same position in the password
Page: 8
Context: Cue-pin-Select

Question: How to deal with maximal password size
Answer: truncate password
Page: 8
Context: Cue-pin-Select

Question: How to deal with requirement for password change where password must be different from one time to another
Answer: change the first letter of the cue
Page: 8
Context: Cue-pin-Select