Um estudo comparativo dos protocolos de autenticação PAKE: CPace e OPAQUE

Abstract

Information and data effective security is a concern of many organizations. The quantity of digital information is increasing and ensuring its integrity has stimulated the search for effective means of protection. One way to increase the protection of digital information is through the use of authentication mechanisms. There are several authentication methods available. Each method has characteristics and requirements, advantages and disadvantages, and choosing which method is best suited for a given context and need can become a complex and time-consuming activity. To assist in this choice, this work presents a comparative study of two authentication protocols, CPace and OPAQUE. To compare these protocols, two test environments were defined that simulated real use cases. For the analysis, two requirements were defined, performance and memory usage. The comparative analysis of the simulation results indicated that the CPace protocol was more eficiente than the OPAQUE. The qualitative analysis indicated CPace as a more appropriate authentication protocol for use in low-performance devices and, concerning the need for systems tha deal with sensitive data and require more robust authentication mechanisms, OPAQUE proved to be more appropriate.