Attacks that are based on recording an encrypted and/or signed communication and replaying it at a later time.
1
vote
0answers
53 views
Prevent/minimize replay attacks in public message board
Assume we have a public message board where anyone can send a message to. If plain messages are used, anyone can impersonate anyone. The goal is to disallow impersonations. We can use public key ...
3
votes
1answer
89 views
Why doesn't this replay attack work on ECDSA?
I've just started working with elliptic curves and ECSDA in particular, so my understanding of the underlying math isn't great. The thing I'm currently stuck on is trying to understand why replay ...
1
vote
0answers
100 views
Computer appliance protocol
I build the computer appliance system that consist of software server and multiple controllers. The system I want to build must be pluggable in the sense that when I connect a controller C to the ...
3
votes
1answer
83 views
Attack by replaying messages
Assume Alice and Bob communicate over an insecure channel using one-time perfectly-secret encryption together with one-time secure message authentication code. Say Eve has the ability to eavesdrop and ...
1
vote
2answers
575 views
Replay attack in ECB mode
How do replay attacks work in ECB mode?
I found this in Wikipedia:
"ECB mode can also make protocols without integrity protection even more susceptible to replay attacks, since each block gets ...
2
votes
1answer
254 views
Replay attack prevention under strict conditions
Say I have a request-response protocol and the task to make it immune to replay attacks. The requirements are as follows:
The defense mechanism cannot rely on the clocks of the parties.
The defense ...
2
votes
1answer
908 views
Secure way to transfer data over NFC?
I am currently writing a payment system to accept payment details from an NFC enabled smartphone (BlackBerry 9900) to a Windows client (C#.NET)
I am currently having two issues relating to security:
...
4
votes
3answers
246 views
Preventing message replay with RSA
I am using RSA to encrypt some data but I would like to eliminate the possibility of message replay. By message replay I mean sending a valid message multiple times to the original recipient. It is ...
