<?xml version="1.0" encoding="UTF-8"?>
<article article-type="Research Article">
  <front>
    <journal-meta>
      <journal-id journal-id-type="publisher">journal-of-discrete-mathematical-sciences-and-cryptography</journal-id>
      <journal-title-group>
        <journal-title>Journal of Discrete Mathematical Sciences and Cryptography</journal-title>
      </journal-title-group>
      <issn publication-format="electronic">2169-0065</issn>
      <issn publication-format="print">0972-0529</issn>
      <publisher>
        <publisher-name>Taru Publications</publisher-name>
      </publisher>
    </journal-meta>
    <article-meta>
      <article-id pub-id-type="doi">10.47974/JDMSC-2438</article-id>
      <title-group>
        <article-title>Cryptographic protocols for passwordless systems with enhanced security</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <name>
            <surname>Kumawat</surname>
            <given-names>Gaurav</given-names>
          </name>
          <aff>School of Computer Science and Engineering, Manipal University Jaipur, Jaipur, Rajasthan, 303007, India</aff>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Kant</surname>
            <given-names>Tapan</given-names>
          </name>
          <aff>Department of Computer Engineering and Application, GLA University, Mathura, Uttar Pradesh, 281406, India</aff>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Bhardwaj</surname>
            <given-names>Vivek</given-names>
          </name>
          <aff>Department of Computer Science and Engineering, Amity University Punjab, Mohali, Punjab, 140306, India</aff>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Kumar</surname>
            <given-names>Mukesh</given-names>
          </name>
          <aff>Department of Computer Applications, Chandigarh School of Business, Chandigarh Group of Colleges, Jhanjeri, Mohali, Punjab, 140307, India</aff>
        </contrib>
        <contrib contrib-type="author" corresp="yes">
          <name>
            <surname>Rashid</surname>
            <given-names>Abdulnaser</given-names>
          </name>
          <aff>Department of Computer Science, College of Computer, Qassim University, Buraydah, 51452, Saudi Arabia</aff>
        </contrib>
        <contrib contrib-type="author">
          <name>
            <surname>Othman</surname>
            <given-names>Mohamed Tahar Ben</given-names>
          </name>
          <aff>Department of Computer Science, College of Computer, Qassim University, Buraydah, 51452, Saudi Arabia</aff>
        </contrib>
      </contrib-group>
      <volume>28</volume>
      <issue>8</issue>
      <fpage>2933</fpage>
      <lpage>2944</lpage>
      <pub-date date-type="pub">
        <day>08</day>
        <month>12</month>
        <year>2025</year>
      </pub-date>
      <abstract>
        <p>Password-based authentication systems are vulnerable to a variety of security risks, such as phishing, credential theft, and user fatigue due to complex password requirements. This paper introduces a novel passwordless authentication framework that leverages advanced cryptographic techniques, including Zero-Knowledge Proofs (ZKP), Secure Multi-Party Computation (SMPC), and Homomorphic Encryption to enhance security, privacy, and user experience. The proposed system eliminates the need for traditional passwords by utilizing biometric data to generate cryptographic keys, ensuring that sensitive information remains secure. The architecture is composed of three primary components: the client device, the authentication server, and the key management system (KMS). The client device captures biometric data and transforms it into cryptographic keys using SMPC, while the server verifies the authentication using ZKP and establishes secure communication channels via Diffie-Hellman key exchange. The KMS handles key generation, storage, and rotation to ensure secure communication. Evaluation results show that the system is highly resistant to common attack vectors such as replay and man-in-the-middle attacks, with a 0% attack success rate. Performance analysis reveals an average authentication time of 180 ms, which is 10% faster than WebAuthn. </p>
      </abstract>
      <kwd-group>
        <kwd>Cryptographic protocols</kwd>
        <kwd>Passwordless authentication</kwd>
        <kwd>Data privacy</kwd>
        <kwd>Security</kwd>
        <kwd>Performance gain</kwd>
      </kwd-group>
      <custom-meta-group>
        <custom-meta>
          <meta-name>access</meta-name>
          <meta-value>open</meta-value>
        </custom-meta>
        <custom-meta>
          <meta-name>retracted</meta-name>
          <meta-value>no</meta-value>
        </custom-meta>
      </custom-meta-group>
    </article-meta>
  </front>
</article>
