# FIDO2 Facing Kleptographic Threats By-Design
## 4 Linking Attacks with Discrete Logarithm Signatures
### Attack 2: Identity Sieve via Rejection Sampling Attack prerequisites:
* [PERSON] (2004) [PERSON]; [PERSON] _Malicious Cryptography--Exposing Cryptovirology_; Wiley: Hoboken, NJ, USA, 2004. * [PERSON] and [PERSON] (1997) [PERSON]; [PERSON] Kleptography: Using Cryptography Against Cryptography. In Proceedings of the Advances in Cryptology--EUROCRYPT '97, Konstanz, Germany, 11-15 May 1997; Springer: Berlin/Heidelberg, Germany, 1997; Volume 1233, pp. 62-74. * [PERSON] et al. (2024) [PERSON]; [PERSON]; [PERSON] Post-Quantum Backdoor for Kyber-KEM. Selected Areas in Cryptography 2024. 2024. Available online [[https://sacworkshop.org/SAC24/preproceedings/XiaWangGu.pdf](https://sacworkshop.org/SAC24/preproceedings/XiaWangGu.pdf)]([https://sacworkshop.org/SAC24/preproceedings/XiaWangGu.pdf](https://sacworkshop.org/SAC24/preproceedings/XiaWangGu.pdf)) (accessed on 2 December 2024). * [PERSON] (2013) [PERSON] A Few Thoughts on Cryptographic Engineering: A Few More Notes on NSA Random Number Generators. 2013. Available online: [[https://blog.cryptographengineering.com/2013/12/28/a-few-more-notes-on-nsa-random-number/](https://blog.cryptographengineering.com/2013/12/28/a-few-more-notes-on-nsa-random-number/)]([https://blog.cryptographengineering.com/2013/12/28/a-few-more-notes-on-nsa-random-number/](https://blog.cryptographengineering.com/2013/12/28/a-few-more-notes-on-nsa-random-number/)) (accessed on 2 December 2024). * [PERSON] and [PERSON] (2022) [PERSON]; [PERSON]; [PERSON] Anamorphic Encryption: Private Communication Against a Dictator. In Proceedings of the Advances in Cryptology--EUROCRYPT 2022, Part II, Trondheim, Norway, 30 May-3 June 2022; Springer: Berlin/Heidelberg, Germany, 2022; Volume 13276, pp. 34-63. * [PERSON] et al. (2018) [PERSON]; [PERSON]; [PERSON] Bringing Kleptography to Real-World TLS. In Proceedings of the Information Security Theory and Practice--12 th IFIP WG 11.2 International Conference, WISTP 2018, Brussels, Belgium, 10-11 December 2018; [PERSON], [PERSON], Eds. ; Volume 11469, pp. 15-27. * [PERSON] et al. (2022) [PERSON]; [PERSON] [PERSON]; [PERSON]; [PERSON]; [PERSON] ASAP: Algorithm Substitution Attacks on Cryptographic Protocols. In Proceedings of the ASIA CCS '22: ACM Asia Conference on Computer and Communications Security, Nagasaki, Japan, 30 May-3 June 2022; [PERSON], [PERSON], [PERSON], [PERSON], Eds. ; ACM: New York, NY, USA, 2022; pp. 712-726. [CrossRef]
* [PERSON] et al. (2022) [PERSON] [PERSON]; [PERSON]; [PERSON] [PERSON] Challenging Channels: Encrypted Covert Channels within Challenge-Response Authentication. In Proceedings of the 17 th International Conference on Availability, Reliability and Security, ARES '22, New York, NY, USA, 23-26 August 2022. * [PERSON] et al. (2021) [PERSON]; [PERSON]; [PERSON]; [PERSON] Provable Security Analysis of FIDO2. In Proceedings of the Advances in Cryptology--CRYPTO 2021, Part III, Virtual, 16-20 August 2021; Springer: Berlin/Heidelberg, Germany, 2021; Volume 12827, pp. 125-156. * [PERSON] et al. (2023) [PERSON]; [PERSON]; [PERSON] FIDO2, CTAP 2.1, and WebAuth 2: Provable Security and Post-Quantum Instantiation. In Proceedings of the 44 th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, 21-25 May 2023; IEEE: Piscataway, NJ, USA, 2023; pp. 1471-1490. * FIDO Alliance (2024) FIDO Alliance. FIDO Attestation: Enhancing Trust, Privacy, and Interoperability in Passwordless Authentication. 2024. Available online: [[https://fidoalliance.org/wp-content/uploads/2024/06/EDWG_Attestation-White-Paper_2024-1.pdf](https://fidoalliance.org/wp-content/uploads/2024/06/EDWG_Attestation-White-Paper_2024-1.pdf)]([https://fidoalliance.org/wp-content/uploads/2024/06/EDWG_Attestation-White-Paper_2024-1.pdf](https://fidoalliance.org/wp-content/uploads/2024/06/EDWG_Attestation-White-Paper_2024-1.pdf)) (accessed on 22 October 2024). * [PERSON] et al. (2023) [PERSON]; [PERSON]; [PERSON] Token meets Wallet: Formalizing Privacy and Revocation for FIDO2. In Proceedings of the 44 th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, 21-25 May 2023; IEEE: Piscataway, NJ, USA, 2023; pp. 1491-1508.