Passwordless Authentication System Using Public Key Cryptography

This project aims to develop a passwordless authentication system that eliminates password-related vulnerabilities. The system uses public key cryptography to authenticate users securely without requiring traditional passwords.

Study password-based authentication weaknesses and attack methods.

Understand public-private key cryptography fundamentals.

Design a passwordless authentication workflow.

Implement key pair generation and secure storage mechanisms.

Use cryptographic challenge–response authentication.

Integrate biometric or device-based authentication options.

Implement secure session handling and token management.

Test resistance against phishing and credential theft attacks.

Measure authentication speed and user experience.

Evaluate security improvements over password-based systems.

Document deployment considerations and limitations.