This document discusses panic passwords and proposes a threat model for analyzing authentication systems that incorporate panic passwords. It defines key terms like password space and describes four parameters of the threat model: coercion, persistence, Bob's action, and Oscar's goal. It then analyzes categories of attacks based on these parameters and potential system responses. Potential directions for future work are discussed, such as expanding the threat model, designing new rules for unlimited panic passwords, and conducting usability studies.

1. Jeremy Clark Panic Passwords: Authenticating under duress Urs Hengartner

2. © Universal Pictures International 2007. Used under the fair dealings clause in the Canada Copyright Act.

4. Definitions Password Space

5. Definitions Password Space Regular

6. Definitions Password Space Regular Panic

7. Definitions Password Space Regular Panic Invalid

8. literature review

10. a threat model

18. some categories of attacks

19. Unrecoverable reactions  B $

21. 2P System Password Space Regular Panic Invalid

22. Unrecoverable reactions  B $

23. Non-Persistent Attacks  A B B $

25. Non-Persistent Attacks  A B B $

26. 2P-Lock System Password Space Regular Panic Invalid

27. 2P-Lock System Within a window of time: No Lock Lock upon second password Lock upon second password No Lock

28. 2P-Lock System Within a window of time: No Lock Lock upon second password Lock upon second password No Lock Different set of bills Same behaviour

29. Persistent Attacks  A B B $

31. Persistent Attacks  A B B $

32. P-Compliment System Password Space Regular Panic

33. P-Compliment System Password Space Regular Panic

34. Password Space Regular Panic Invalid

35. Password Space Regular Panic Invalid

36. Alice knows: 1 regular and 1 rule for separating panic from invalid Regular Panic Invalid

37. A System  A B B $

38. concluding remarks

40. Concluding Remarks

41. Questions?