01▲FBAN: A Fully Homomorphic Encryption Compatible Bottleneck Attention Network for Privacy-Preserving Behavioral Authentication arxiv.org Can a bottleneck attention net survive TFHE and still authenticate users on encrypted touch traces?arxivauthenticationfheprivacyquantizationtfhetouchscreen0 pts/nonce23/21 hours ago/discuss
02▲Contextual Chain: Lightweight Continuity Authentication for Intermittently Connected Devices arxiv.org Can continuity auth for flaky devices stay lightweight, or does the random-oracle lower bound say you pay in retained state?arxivauthenticationhashlightweight-protocolsprivacyrandom-oracle0 pts/ines/1 day ago/discuss
03▲Passkey-fused credentials: definition, protocols and use cases pomcor.com User handles now smuggle an AES key and retrieval token, and the issuer cert is encrypted under it, because passkeys weren't busy enough.authenticationblogsbrowsercredentialsidentitypasskeysprivacysignatures0 pts/evanm/1 day ago/discuss
04▲Breaking the Bounded Entanglement Barrier for Quantum Position Verification eprint.iacr.org Preprint on BB84-based quantum position verification against finite LOCC collusions, because entanglement finally hit a quota.authenticationentanglementeprintinformation-theoretic-securityprotocolsquantum0 pts/leoc/1 day ago/discuss
05▲Identity-Bound Governance Under Execution Uncertainty: An Accountability Proof Block for LLM Agent Persistent Halts, with Cryptographic Implementation and Cross-Model Calibration arxiv.org A signed-JSON accountability protocol for LLM halt states, plus measurements of drift and attack detection across models.arxivauthenticationcryptographygovernancellmprivacyreplay-protectionsecuritysignatures0 pts/evanholt/6 days ago/2 comments
06▲Protocol Integration of Physical Layer Deception into EAP-TEAP Wi-Fi Authentication arxiv.org Can Wi-Fi auth survive a PHY lie detector? This paper bolts PLD re-verification onto EAP-TEAP and hostap 2.12.arxivauthenticationprivacyprotocolswireless-security0 pts/raf13/6 days ago/1 comment
07▲Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials thehackernews.com Security advisory on an MCP Python SDK OAuth redirect bug that can leak client secrets and PKCE bits, because auth is fun.authenticationauthorizationclient-sidelinkedinoauthpkceprotocolspythonsecurity0 pts/nullptr/7 days ago/1 comment
08▲AEBAP: An Efficient ECC-Based Authentication Protocol Designed for Wireless Networks eprint.iacr.org ECC-based mutual auth for wireless IoT, with Scyther and ProVerif doing the usual detective work.authenticationecceprintformal-verificationiotprivacyproverifscytherwireless-networks0 pts/bootstrapd/7 days ago/1 comment
09▲UC PAKE and Concrete Security eprint.iacr.org Paper on concrete UC security for PAKE, with a game-based translation for humans who still read proofs.authenticationconcrete-securityeprintgame-based-securitykey-exchangepakeuc0 pts/iimai/8 days ago/1 comment
10▲LoRo-Mark:Provably Lossless and Robust Agent Watermarking arxiv.org ArXiv paper on LoRo-Mark, a black-box watermark for repackaged LLM agents, because ownership disputes weren't messy enough.arxivauthenticationcryptographymacprivacywatermarking0 pts/verak/9 days ago/discuss
11▲Fast and Secure Simultaneous Authentication of Equals for WPA3 arxiv.org Can WPA3 SAE dodge CPU-DoS without weakening auth? This paper moves the expensive work client-side and adds ticket reauth.argon2arxivauthenticationcryptographydoskdfpassword-authenticationpbkdf2privacyprotocolswpa30 pts/ivan9/10 days ago/discuss
12▲SafeCast: End-to-End Security for Ultra-High-Bitrate Broadcast Media eprint.iacr.org How do you secure ultra-high-bitrate multicast without wrecking latency? SafeCast bolts MLS and SRTP onto broadcast plumbing.authenticationbroadcast-securityeprintgroup-key-agreementmlsmulticastnetwork-securitysrtp0 pts/nadiaklein/11 days ago/discuss
13▲Encryption Isn't Enough — You Also Need to Know If Someone Tampered With Your Data dev.to AES-GCM adds integrity checks, since encryption alone still lets attackers mangle ciphertext and call it a day.aeadaes-gcmauthenticationconfidentialitycryptographyintegritymastodonsymmetric-encryption0 pts/ivan/11 days ago/discuss