Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

I got confused which one is considered challenge-response mechanism which one is not.

share|improve this question

closed as unclear what you're asking by e-sushi, DrLecter, AFS, Maeher, John Deters Jan 29 at 5:52

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question.If this question can be reworded to fit the rules in the help center, please edit the question.

    
Your question doesn't really show much attempted research into the problem, which almost suggests it might be an assignment question. What have you considered about the protocols? Why are you unsure whether they're challenge response or not? –  figlesquidge Jan 26 at 20:54
    
I don't believe an assignment question in crypto based on YES/NO answer will be given ever ! –  Tareq Jan 27 at 1:00
    
I've seen it before, but you're probably right - not with these sorts of examples, sorry –  figlesquidge Jan 27 at 1:01
add comment

1 Answer 1

up vote 1 down vote accepted

Short: SRP.

For encrypted key exchange you need to add key confirmation to get challenge-response authentication.


These all are password-authenticated key exchange (PAKE) mechanisms. These mechanisms end-up into peers sharing an agreed key, which is only the same if the password agreement was successful.

Challenge-response authentication is usually considered to contain challenge, response and verification of response (authentication). In case of PAKE mechanism, key confirmation protocol is not strictly neccessary, as if the peers do not have compatible keys, the communication cannot successfully continue.

I would consider all of these to be primarily PAKE, because I consider that one as more important security feature than challenge-response authentication. As result of successful key exchange, both sides have a key they know third parties do not have and thus they can use it in further cryptographic operations to ensure confidentiality and authenticity of further communication.

SRP includes check where for keys agreed being the same, therefore, it can be seen as challenge-response authentication.

For DH-EKE, A-EKE, SPEKE, the protocol is concerned with generation of shared key, without third party (who cannot guess the password) being able to get the same key as the result. For authentication purposes (challenge-response authentication), key confirmation shall be added.

share|improve this answer
add comment

Not the answer you're looking for? Browse other questions tagged or ask your own question.