Bachelor/Master - PG/Lab - Recovery of Passkeys

Supervisor: Eva (gerlitz@cs.uni-bonn.de)

This course can be done as a Projektgruppe (Bachelor) or as a Lab (Master)

Passkeys are a possibility for passwordless authentication. However, as we switch to another mechanism for authentication, users’ assumptions of how they can recover an account once they loose their primary authenticator might not hold anymore.

Your Task:

• Set up accounts for services that offer password less authentication (0)
• Analyze how passkeys can be recovered: What does it need to regain access to accounts?
• Evaluate how likely a user could run into such a situation.

Literatur to start with:

• (0): https://passkeys.directory/
• Analysis of services when it comes to recovery (of MFA):
  • https://www.usenix.org/system/files/soups2023-gerlitz-adventures.pdf
  • https://arxiv.org/pdf/2306.09708.pdf
  • https://publications.cispa.saarland/3899/1/Lyastani_NDSS23.pdf