Anastasis

Website

https://anastasis.lu/

Password-less key recovery via multi-factor multi-party authentication

ProjectID

ledger_Anastasis

Acronym

Anastasis

Additional Info

Anastasis will allow users to securely recover secret keys without necessarily relying on passwords or other key material. Instead, the key material is split across multiple independent Anastasis service providers, and users are enabled to recover their master key by authenticating with each provider. Users of OpenPGP or electronic wallets are frequently facing the challenge to secure their core secrets (private keys), and the contemporary default of asking them to remember strong passphrases is inadequate for mass adoption. Our project was inspired by a discussion the GNU Taler team had with the European Central Bank, which informed them about a requirement for electronic wallets denominated in Euros to support password-less recovery. Our protocol ensures that - without prior knowledge - the service providers learn nothing from the protocol except the minimum amount of data required to authenticate the user. Even that information is only disclosed at the time of authentication.