Password Managers: Attacks and Defenses [pdf]
crypto.stanford.edu