Establishing secure mutual trust using an insecure password

A method of establishing trust between a first device and a second device, comprising:

• generating, by the first device, a set of n password substrings from a one-time-password known to the second device, wherein n is an integer greater than one;
• receiving n received authenticators from the second device;
• receiving n nonces from the second device;
• generating, by the first device, n corresponding authenticators, wherein each of the n corresponding authenticators is a cryptographic encoding comprising one of the nonces of the n nonces and one of the password substrings in the set of n password substrings;
• verifying that each received authenticator of the n received authenticators matches a corresponding authenticator of the n corresponding authenticators;
• and
• establishing trust between the first device and the second device after each received authenticator of the n received authenticators has been verified.

A computer system comprising a first device and a second device, the first device comprising:

• one or more processors;
• a memory storing computer-readable instructions that when executed by the one or more processors perform a method of establishing trust between the first device and the second device, the method comprising:
• generating, by the first device, a set of n password substrings from a one-time-password known to the second device, wherein n is an integer greater than one;
• receiving a first authenticator of n received authenticators from the second device;
• receiving a first nonce of a set of n nonces from the second device;
• generating, by the first device, a first corresponding authenticator of n corresponding authenticators, wherein the first corresponding authenticator is a cryptographic encoding comprising the first nonce and a first password substring of the set of n password substrings, and wherein each corresponding authenticator of the n corresponding authenticators is a cryptographic encoding of one nonce of the n nonces and one password substring of the set of n password substrings;
• verifying that the first received authenticator matches the first corresponding authenticator;
• receiving a next authenticator of the n received authenticators and a next nonce of the n nonces from the second device;
• generating a next corresponding authenticator of the n corresponding authenticators, wherein the next corresponding authenticator is a cryptographic encoding comprising the next nonce and a next password substring of the set of n password substrings;
• verifying that the next received authenticator matches the next corresponding authenticator;
• and
• establishing trust between the first device and the second device when each received authenticator of the n received authenticators has been verified.

A computer medium storing instructions that when executed by one or more processors configure the one or more processors to perform a method of establishing trust between a first device and a second device, the method comprising:

• generating, by the first device, a set of n password substrings from a one-time-password known to the second device, wherein n is an integer greater than one;
• receiving n received authenticators from the second device;
• receiving n nonces from the second device;
• generating, by the first device, n corresponding authenticators, wherein each of the n corresponding authenticators is a cryptographic encoding comprising one of the nonces of the n nonces and one of the password substrings in the set of password substrings;
• verifying that each received authenticator of the n received authenticators matches a corresponding authenticator of the n corresponding authenticators;
• and
• establishing trust between the first device and the second device after each received authenticator of the n received authenticators has been verified.