Identity-based cryptography (IBC), proposed by Adi Shamir, revolutionized public key authentication by eliminating the need for certificates, enabling a more efficient and scalable approach to cryptographic systems. Meanwhile, in \cite{Katsumata2024group}, Katsumata et al. were the first to present the blind signature protocol based on the hardness assumption of isogeny with provable security, which resembles the Schnorr blind signature. Building upon these foundational concepts, we propose an Identity-Based Blind Signature Scheme with an Honest Zero-Knowledge Verifier utilizing the CSIDH framework. This scheme combines blind signatures for privacy preservation with zero-knowledge proofs to ensure the verifier's honesty without revealing any additional information. Leveraging the quantum-resistant properties of CSIDH, a post-quantum secure scheme based on supersingular isogenies, our scheme offers strong protection against quantum adversaries while maintaining computational efficiency. We analyze the security of the introduced protocol in the standard cryptographic model and demonstrate its effectiveness in safeguarding privacy and verifier honesty. Furthermore, we present a performance evaluation, confirming the practical viability of this quantum-resistant cryptographic solution for privacy-preserving applications. This work advances the creation of secure, and scalable cryptographic systems for the post-quantum era.
Wong Jie Sheng, Intan Farahana Kasmin, Salmiah Mohamad Amin, Nur Khairunnisha Zainal
Multi-Factor Authentication (MFA) has been gaining popularity in recent years for offering extra layers of protection to secure user accounts. Most of the integration of MFA today includes a OTP to be sent through a Short Message Service (SMS) identified by a user’s phone number or through an MFA application. However, MFA executions like these still possess underlying vulnerabilities like phishing attacks. The aim of this research is to propose an effective Software Engineering solution to decrease the number of successful attacks on user accounts during the MFA process. The proposed system suggests a first-level authentication in the form of textbox for users to input their current location of access. This can prompt the user naturally to always pay attention to the user information provided before they continue on with the MFA process. This can help users to identify a threat and realise an attempted phishing attack before giving the full access to the attackers if proceeded with the MFA process. This paper proposes a solution that takes in voice recognition biometric alongside the traditional OTP. An improved distributed ledger technology in the form of Hedera Hashgraph is also proposed which addresses efficiency and security shortcomings of Blockchains like the Ethereum Blockchain. For this research, self-selection sampling was carried out and 5 people were chosen to attend a one-to-one online interview session.