WebAuthn: Yubico's Proposal Analysis

This lecture delves into the concept of asynchronous remote key generation, focusing on Yubico's proposal to enhance web authentication. It explores the challenges of password-based authentication, the introduction of multi-factor authentication, and the birth of WebAuthn. The presentation covers the registration and authentication processes without passwords, the properties and challenges of WebAuthn, and the solution proposed by Yubico. The discussion includes a security analysis, performance evaluation, and a detailed explanation of the setup, registration, and recovery phases. Additionally, the lecture examines the security properties of ARKG, such as secret key security and public key unlinkability, and its composability with generic public key protocols.