Authentication is successfully validating that an entity you are communicating with is actually who they claim to be. The entity typically demonstrates who they are by showing they possess a secret that only they could know.
1
vote
0answers
92 views
Setting protocol parameters to achieve concrete security
Background
One issue with modern security proofs is that they are usually asymptotic. In other words, such proofs are usually formulated as follows: For any polynomial-time adversary $\mathcal A$, we ...
0
votes
0answers
23 views
How can I validate generated session keys in SRP-6a protocol
I have genereted two equal session keys on client and server successfully. But I couldn't understand how each other should validate that they have same session keys.
On the client I generated a SHA1 ...
0
votes
0answers
60 views
Is this a valid real-time authentication scheme?
The scenario in Alice/Bob/Cindy terms:
Alice approaches someone she doesn't know, but thinks is Bob, and asks for some secret information. Bob doesn't know and doesn't trust Alice, but Alice says she ...
0
votes
0answers
47 views
What happens when you use Windows credentials to sign a message?
I'm trying to dig into the messages that are exchanged when you sign a message using Windows credentials. I've modified the default service that is provided when you create a WCF service to use the ...
-4
votes
3answers
147 views
Why shouldn't one build a MAC by XORing multiple message blocks?
I found this simple proposal for a MAC algorithm:
Let the MAC of message M (which consists of message blocks $M_1$,$M_2$, ..., $M_n$)
be the AES encryption with key K of the XOR of all the ...
