ROBUSTNESS OF AN AUTHENTICATION SCHEME BASED ON ZERO-WATERMARKING

Abstract

The article presents an analysis of the robustness of an authentication scheme based on zero watermarking. The study examines a two-factor authentication scheme that uses "knowledge of something" (a password) and "possession of something" (a digital RGB image) as its factors.

The zero watermarking algorithm chosen is based on DWT and K-means transformations, with additional use of the Swish function. The analysis is conducted by considering the theoretical complexity of the algorithm assuming the adversary knows its parameters, such as the password, the hash of the password, the image, the reference watermark, the transformation result, and other parameters.

Previous studies have shown a high theoretical robustness of the scheme, which relies on the complexity of the password and the dimensionality of the image. For large image sizes (512×512 pixels and above), a relatively high level of cryptographic resistance is achieved. However, this robustness is not formally proven, and the actual strength may be significantly lower due to the specifics of the images and transformations, which can introduce additional vulnerabilities. The algorithm is subject to a relatively high rate of collision, associated with digital image transformations and matrix multiplications, which weakens its resistance.

Authentication schemes and zero watermarking algorithms require further research, formal proof of cryptographic properties, and methods for integration into access control systems, as they can provide a high level of authentication robustness in systems with high noise levels. Additionally, the convenience and low cost of such schemes give them an advantage over other authentication methods. The study provides recommendations for improving the potential characteristics of the algorithm.