<img src="/assets/images/miracl-blog-FIDO-logo-black-RGB.png" alt="Authentication, FIDO, M-Pin, Public Key Substitution, PKI, phishing attacks, credential databases, MIRACL"> <p><strong><em>FIDO is an authentication technology based on the mathematics of public key cryptography that emerged in the 1970s and the 1980s. It is promoted by a large industry backed consortium as the two-factor successor to the username/password mechanism, which is well understood as being no longer fit for purpose. But intrinsic to FIDO is the requirement for both client-side secure hardware and a vulnerable server-side credentials database. Here we propose a better solution which would ditch both of these requirements by separating the registration and authentication processes, and which provides true multi-factor authentication using more modern ideas that have emerged from cryptographic research.</em></strong></p>…