New answers tagged nonce
Without the initial exchange of nonces, an attacker could replay a recorded handshake. Although an attacker can't use this to replay actual packets, an attacker could possibly execute a denial of service attack if the process protected by spiped is not expecting a large number of connections. The attack (assuming a modified spiped protocol that MACs the ...
Without the nonces, one could violate explicit authentication by replaying the group_element || MAC_tag messages.
Top 50 recent answers are included