Ludvík Prokopec / Articles
Download CV (PDF)-
Token Architecture Evolution: From Sessions to Transaction Tokens
An exploration of the evolution of token-based authentication and authorization patterns within microservice architectures — analyzing trade-offs between performance, privacy, instant revocability, and security scoping.
OAuth 2.0 API Security Architecture JWT Microservices -
Solving the Lost YubiKey problem with WebAuthn PRF & Shamir’s Secret Sharing
This article proposes a conceptual design for a password manager utilizing the WebAuthn PRF extension for client-side encryption. By integrating Shamir’s Secret Sharing, the work presents a decentralized recovery mechanism for non-exportable credentials. This theoretical model guarantees that only the owner possesses the cryptographic material required for recovery.
Cryptography WebAuthn Passkeys Recovery