Development of an Outsourcing Password Evaluation System Using Intel SGX

Users are required to set passwords that are both complex and not included in leaked lists, with the recent increase in unauthorised access due to password list attacks. When password security is evaluated by the user, the burden on the user is large and impractical due to the increased size of the compromised password list. Therefore, there are methods to evaluate passwords on an external server, but there is a possibility that passwords may be compromised due to eavesdropping by the server administrator. In this paper, we propose, implement and evaluate an outsourcing password evaluation system using Intel SGX, which can prevent passwords from being eavesdropped.