Attacks that are based on recording an encrypted and/or signed communication and replaying it at a later time.
4
votes
3answers
265 views
Preventing message replay with RSA
I am using RSA to encrypt some data but I would like to eliminate the possibility of message replay. By message replay I mean sending a valid message multiple times to the original recipient. It is ...
3
votes
1answer
96 views
Why doesn't this replay attack work on ECDSA?
I've just started working with elliptic curves and ECSDA in particular, so my understanding of the underlying math isn't great. The thing I'm currently stuck on is trying to understand why replay ...
3
votes
1answer
85 views
Attack by replaying messages
Assume Alice and Bob communicate over an insecure channel using one-time perfectly-secret encryption together with one-time secure message authentication code. Say Eve has the ability to eavesdrop and ...
2
votes
1answer
964 views
Secure way to transfer data over NFC?
I am currently writing a payment system to accept payment details from an NFC enabled smartphone (BlackBerry 9900) to a Windows client (C#.NET)
I am currently having two issues relating to security:
...
2
votes
1answer
276 views
Replay attack prevention under strict conditions
Say I have a request-response protocol and the task to make it immune to replay attacks. The requirements are as follows:
The defense mechanism cannot rely on the clocks of the parties.
The defense ...
1
vote
2answers
652 views
Replay attack in ECB mode
How do replay attacks work in ECB mode?
I found this in Wikipedia:
"ECB mode can also make protocols without integrity protection even more susceptible to replay attacks, since each block gets ...
1
vote
0answers
56 views
Prevent/minimize replay attacks in public message board
Assume we have a public message board where anyone can send a message to. If plain messages are used, anyone can impersonate anyone. The goal is to disallow impersonations. We can use public key ...
1
vote
0answers
102 views
Computer appliance protocol
I build the computer appliance system that consist of software server and multiple controllers. The system I want to build must be pluggable in the sense that when I connect a controller C to the ...
