Authentication is successfully validating that an entity you are communicating with is actually who they claim to be. The entity typically demonstrates who they are by showing they possess a secret that only they could know.
1
vote
0answers
57 views
Algorithm digipass-like
I'm pretty sure there are famous algorithms for my problem, but I don't have enough knowledge in this field, so I need your lights.
Here si the problem :
Alice sends key X to Bob.
Bob has an ...
1
vote
0answers
100 views
Computer appliance protocol
I build the computer appliance system that consist of software server and multiple controllers. The system I want to build must be pluggable in the sense that when I connect a controller C to the ...
1
vote
0answers
107 views
Is TOTP or a timestamp encryption a better timestamp-based authentication token system?
Are there advantages to using TOTP over encrypting a timestamp with a shared secret, in cases where the readability or ease of typing the token are not important?
1
vote
0answers
92 views
Setting protocol parameters to achieve concrete security
Background
One issue with modern security proofs is that they are usually asymptotic. In other words, such proofs are usually formulated as follows: For any polynomial-time adversary $\mathcal A$, we ...
0
votes
0answers
23 views
How can I validate generated session keys in SRP-6a protocol
I have genereted two equal session keys on client and server successfully. But I couldn't understand how each other should validate that they have same session keys.
On the client I generated a SHA1 ...
0
votes
0answers
60 views
Is this a valid real-time authentication scheme?
The scenario in Alice/Bob/Cindy terms:
Alice approaches someone she doesn't know, but thinks is Bob, and asks for some secret information. Bob doesn't know and doesn't trust Alice, but Alice says she ...
0
votes
0answers
47 views
What happens when you use Windows credentials to sign a message?
I'm trying to dig into the messages that are exchanged when you sign a message using Windows credentials. I've modified the default service that is provided when you create a WCF service to use the ...
