%0 Conference Proceedings %T Towards an Empirical Cost Model for Mental Password Algorithms %+ Department of Algorithms, Computation, Image and Geometry (LORIA - ALGO) %+ Selker Design Research %+ Observatoire de Paris %A Blanchard, Enka %A Selker, Ted %A Waligorski, Florentin %< avec comité de lecture %B CHI Conference on Human Factors in Computing Systems %C Honolulu, United States %3 Extended Abstracts of the 2020 CHI Conference on Human Factors in Computing Systems %8 2020-04-25 %D 2020 %R 10.1145/3334480.3382990 %K Psychometrics %K Password %K Mental Computation %K Author Keywords Psychometrics %K User Study %Z Computer Science [cs]/Human-Computer Interaction [cs.HC] %Z Life Sciences [q-bio]/Neurons and Cognition [q-bio.NC]/Cognitive SciencesConference papers %X Reliance on technology has diminished our use of mental computation. However, mental computation's inherent privacy features are becoming central to new research on creating more secure and usable passwords than one gets with approaches such as password managers. This work empirically studies the validity of cognitive assumptions relative to mental computation for making codes like passwords , using as a starting point password algorithms and a cost model for mental computation developed by Blum and Vempala. Through a study on 126 participants, we refute some of their model's assumptions, and introduce evidence of behaviours where human computing costs behave counter-intuitively. We also identify three empirical questions around symmetry, repeatability, and distribution of costs whose resolution would allow the development of more predictive cognitive computation models. This would then allow the efficient creation of better security algorithms. %G English %Z IMPACT DIGITRUST %2 https://univ-paris8.hal.science/hal-02560611/document %2 https://univ-paris8.hal.science/hal-02560611/file/CHI2020_extended_abstract%20%286%29.pdf %L hal-02560611 %U https://univ-paris8.hal.science/hal-02560611 %~ OBSPM %~ UNIV-PARIS8 %~ CNRS %~ INRIA %~ LORIA2 %~ UNIV-LORRAINE %~ LORIA-ALGO-TEST5 %~ LORIA %~ LORIA-ALGO %~ PSL %~ LUE-UL %~ INRIA-AUT %~ IMPACT-DIGITRUST %~ UNIV-PARIS-LUMIERES %~ OBSPM-PSL %~ ANR